ot forgo notifying its customers of an incident because the IBE believes that it may be potentially embarrassed or inconvenienced by doing so. (1) Standard for Providing Notice. When an IBE becomes aware of an incident of unauthorized access to sensitive customer information, the IBE should conduct a reasonable investigati