Our compliance rules dictate a 24hour window before we must share the data breach, in what world does the top personal data overlords have no obligation to disc

Our compliance rules dictate a 24hour window before we must share the data breach, in what world does the top personal data overlords have no obligation to disclose in a shorter window? Maybe had they done that, they wouldn't have had time to cash out their stocks before they tanked upon release.