Amend SB 122 in SECTION 2 of the bill, in added Section 48.103, Business & Commerce Code (House Committee Printing, page 6, lines 21-26), by striking proposed Subsection (g) and substituting the following: (g) Notwithstanding Subsection (e), a person complies with the notice requirements of this section if, when a breach of system security occurs, the person notifies affected persons in accordance with notification procedures maintained by the person: (1) as part of an information security policy for the treatment of sensitive personal information that complies with the timing requirements for notice under this section; or (2) in accordance with the rules, regulations, procedures, or guidelines established by the person's primary or functional federal regulator.