Amend SB 122, on third reading, in added Section 48.103, Business & Commerce Code, by striking Subsection (g), as added on second reading by Amendment No. 4 by Giddings, and substituting the following: (g) Notwithstanding Subsection (e), a person that maintains its own notification procedures as part of an information security policy for the treatment of sensitive personal information that complies with the timing requirements for notice under this section complies with this section if the person notifies affected persons in accordance with that policy.