16 C.F.R. § 318.8

Applicability date.

This part shall apply to breaches of security that are discovered on or after September 24, 2009.