SEC Chairman lists the changes from the new final Reg S-P amendments

"Under these amendments, covered firms will be required to notify customers of breaches that might put their personal data at risk"