Cabinet yesterday finalized regulations allowing companies to forego individual notices to customers whose personal information is hacked or stolen. The rules take effect November 1: “To protect consumers, we avoid notifying consumers. It’s bizarre.”