Amend SB 122 as follows: On Page 6, strike Lines 21 through 26 in their entirety and substitute in lieu thereof the following: "(g) Notwithstanding Subsection (e), a person complies with the notice requirements of this section if, when a breach of security occurs, the person notifies affected persons in accordance with notification procedures maintained by that person: (1) as part of an information security policy for the treatment of sensitive personal information that complies with the timing requirements for notice under this section; or (2) in accordance with the rules, regulations, procedures, or guidelines established by the primary or functional federal regulator."