SEC amends Reg S-P to require data breach notification within 30 days
By 
Aaron Nicodemus2024-05-16T19:10:00
The Securities and Exchange Commission (SEC) will require broker-dealers and registered investment advisers to adopt written policies and procedures for handling data breaches of customer data and notify affected customers within 30 days.
On Thursday, the SEC approved amendments to Regulation S-P, known as the safeguards rule. The rule requires covered entities to have policies and procedures in place to safeguard and dispose of sensitive customer data, as well as provide privacy notices and opt out procedures.
The amendments widen obligations for broker-dealers, funding portals, registered investment advisers, investment companies, and transfer agents to create and implement a data breach incident response program.
Related articles
-
News BriefSEC official clarifies material incident reporting under new cyber rule
Erik Gerding, director of the Securities and Exchange Commission’s Division of Corporation Finance, issued a statement addressing early inconsistencies observed under the agency’s new cybersecurity incident disclosure rule.
-
News BriefSEC risk alert flags branch office cybersecurity controls
The protection of customer personal data by branch offices of broker-dealers and investment advisers should be just as robust—and as well-coordinated—as protocols used by the firm’s home office, according to the Securities and Exchange Commission.
-
News Brief
SEC proposes Reg S-P updates on incident response, breach notifications
The Securities and Exchange Commission proposed amendments to its regulation requiring broker-dealers, investment companies, and registered investment advisers to establish policies and procedures to safeguard customer records and information.
More from Regulatory Policy
-
News BriefFHFA chief orders Fannie and Freddie to consider crypto assets in mortgage assessments
In another sign of President Donald Trump’s focus on cryptocurrency, the head of the U.S. Federal Housing Finance Agency (FHFA) ordered Fannie Mae and Freddie Mac to create proposals to consider crypto assets for a single-family home mortgage.
-
ArticleEU, UK agree to reset rules on agrifoods, mergers and carbon trading as part of post-Brexit reset
Four years after Brexit, the U.K. and EU announced a “reset” that will ease barriers to importing and exporting food, drink, and agricultural produce. It may also harmonize rules around carbon emissions trading systems, simplifying compliance for multinational organizations that are large emitters, and enable more young people to gain ...
-
News BriefSenate confirms Olivia Trusty to FCC, handing Trump majority control
The U.S. Senate confirmed Olivia Trusty as commissioner for the Federal Communications Commission on Tuesday, marking a shift in agency staffing that gave commissioners nominated by President Donald Trump a majority of decision-making power. The move followed resignations of two commissioners earlier this month, each of whom had been nominated ...