With data security and identity theft becoming a vital concern for businesses and individuals alike, a new regulation mandating how businesses protect data will come into effect next month. Because the scope of the rule is so sweeping, corporate risk managers need to know whether their organizations are subject to it and, if so, what they must do in order to comply.