Well, ok, they are only new interpretations of existing standards. But you get the idea.

The Federal Deposit Insurance Commission, the Federal Reserve, the Office of Thrift Supervision and the Comptroller of the Currency and the Office of the Comptroller of the Currency have put their heads together on new interpretations of the Graham-Leach-Bliley-Act and have produced new data security notificiation rules for the institutions that they govern. The new guidelines require investigsation of potential leaks and prompt notification of consumers if it is "reasonable" that personal information has been exposed.

CNet Asia has the full story.

Information Week has a link over to the new interpretations (PDF), courtesy the Officer of the Comptroller of Currency.

-- MDT