Financial firms covered under new regulations will be required to establish a clear response and communications plan for customer data breaches.