16 CFR 318.9
§ 318.9 Sunset.
United States · 16 CFR — Commercial Practices · Status: effective
Cite this
- Citation
- 16 CFR 318.9, § 318.9 Sunset, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/64432
- Permanent ID
ys:prov:64432@1- SHA-256
16007e9614a25b32ea8720e452b3739dc47c554935a405476890920ae58ef398
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
If new legislation is enacted establishing requirements for notification in the case of a breach of security that apply to entities covered by this part, the provisions of this part shall not apply to breaches of security discovered on or after the effective date of regulations implementing such legislation.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.