SEC amends Reg S-P to require data breach notification within 30 days

SEC

The Securities and Exchange Commission (SEC) will require broker-dealers and registered investment advisers to adopt written policies and procedures for handling data breaches of customer data and notify affected customers within 30 days.

On Thursday, the SEC approved amendments to Regulation S-P, known as the safeguards rule. The rule requires covered entities to have policies and procedures in place to safeguard and dispose of sensitive customer data, as well as provide privacy notices and opt out procedures.

The amendments widen obligations for broker-dealers, funding portals, registered investment advisers, investment companies, and transfer agents to create and implement a data breach incident response program.

lock iconTHIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.