FTC GLBA Safeguards Rule (16 CFR Part 314) 314.4(j)(1): Notice to the FTC within 30 days of a notification event affecting 500 or more consumers

What does 314.4(j)(1) require?

On discovering a notification event (the unauthorised acquisition of unencrypted customer information) involving the information of at least 500 consumers, the institution notifies the FTC as soon as possible and no later than 30 days after discovery, electronically on the form on the FTC's website, giving its name and contact information, a description of the types of information involved, the date or date range if determinable, the number of consumers affected or potentially affected, a general description of the event, and whether a law enforcement official has provided a written determination that public notification would impede a criminal investigation or damage national security, with a means for the FTC to contact that official.