FTC Adopts Data Breach Notification Obligations for Non-Banking Financial Institutions

Polsinelli – On October 27, the FTC adopted an amendment to its Safeguards Rule that will require non-banking financial institutions to notify them within thirty days of discovering a data breach involving the nonpublic personal information of at least 500 consumers.