The change we’re talking about is the new requirement for companies covered by the Rule – and that includes most dealers – to self-report certain data breaches or unauthorized disclosures of customer information to the FTC.