The Security and Exchange Commission (SEC) has recently adopted changes to Regulation S-P, which now requires financial institutions to disclose security breaches within 30 days of learning about them. These amendments also expand safeguards and disposal rules, mandate written compliance records, and extend the rules to transfer agents. The primary goal of these new requirements...