
Some US financial institutions are now legally required to disclose a security breach within 30 days of their discovery.
The news comes as a result of changes made by the US Securities and Exchange Commission (SEC) to Regulation S-P, a rule adopted to protect the privacy of consumers' personal financial information held by financial institutions.