Amend SB 122 as follows:                                                     
	On Page 6, strike Lines 21 through 26 in their entirety and 
substitute in lieu thereof the following:
	"(g) Notwithstanding Subsection (e), a person complies with 
the notice requirements of this section if, when a breach of 
security occurs, the person notifies affected persons in accordance 
with notification procedures maintained by that person:
		(1) as part of an information security policy for the 
treatment of sensitive personal information that complies with the 
timing requirements for notice under this section; or
		(2) in accordance with the rules, regulations, 
procedures, or guidelines established by the primary or functional 
federal regulator."