From another reply here: U.S. Code § 1505 mandates that you do not obstruct procedures of departments, agencies, and committees of the US government. In this ca

From another reply here: U.S. Code § 1505 mandates that you do not obstruct procedures of departments, agencies, and committees of the US government. In this case, if you've just testified before the FTC on your data protection practices and a past data breach you do not keep quiet on a current breach but Give Them A Call. I cannot imagine how doing business in the US is like given that I feel there are many more laws they can throw at you than where I live, but I know that in my firm have we many meetings on all kinds of levels with supervisors that are frankly quite open. You need good relationships with supervisors and good relationships build on openness. If we were ever to have a serious data breach the first call would be an impact assessment and notification under GDPR, the second call nearly at the same moment would be reaching out to our other (mostly financial) supervisors.