SEC Commissioner Uyeda likes changes to final Reg S-P rule

"The final amendments do not require a financial institution to enter into a contract with its service providers to deliver data breach notices .... This is a good change: the Commission should not be mandating or micro-managing contracts between private parties in such instances"