The FTC announced that prison communications provider Global Tel*Link Corp will now be required to disclose any future data breaches within 30 days.
https://www.securitymagazine.com/articles/100161-ftc-orders-communication-company-to-disclose-data-breaches