Division 3—Responsible entity’s notification obligations impacting their security obligations