Relates to when and how notification of a data breach is to be provided to the department of financial services.