On May 15, 2024, the US Securities and Exchange Commission ("SEC") adopted amendments (the "Amendments") to Regulation S-P under the Securities Exchange Act of 1934 (the "Exchange Act"), which governs the treatment of nonpublic personal information about consumers by certain financial institutions, to modernize and enhance the protections under the regulation.
The Amendments require broker-dealers, investment companies, SEC-registered investment advisers, funding portals, and transfer agents registered with the SEC or another appropriate regulatory agency as defined in Section 3(a)(34)(B) of the Exchange Act ("transfer agents) to adopt written policies and procedures for incident response programs to address unauthorized access to or use of customer information. Notably, the Amendments create one of the first broad federal consumer notification requirements by mandating timely notification to individuals affected by an information security incident involving sensitive customer information with details about the incident and information designed to help affected individuals respond appropriately.
The Amendments also extend the application of Regulation S-P's requirements to safeguard customer records and information to transfer agents, broaden the scope of information covered by the requirements for safeguarding customer records and information and for properly disposing of consumer report information, impose requirements to maintain written records documenting compliance with the Amendments, and conform annual privacy notice delivery provisions to the terms of an exception provided by a statutory amendment to the Gramm-Leach-Bliley Act in December 2015.
In this Legal Update, we provide an overview of certain aspects of the Amendments and guidance in the Adopting Release thereto.
Visit us at mayerbrown.com
Mayer Brown is a global services provider comprising associated legal practices that are separate entities, including Mayer Brown LLP (Illinois, USA), Mayer Brown International LLP (England & Wales), Mayer Brown (a Hong Kong partnership) and Tauil & Chequer Advogados (a Brazilian law partnership) and non-legal service providers, which provide consultancy services (collectively, the "Mayer Brown Practices"). The Mayer Brown Practices are established in various jurisdictions and may be a legal person or a partnership. PK Wong & Nair LLC ("PKWN") is the constituent Singapore law practice of our licensed joint law venture in Singapore, Mayer Brown PK Wong & Nair Pte. Ltd. Details of the individual Mayer Brown Practices and PKWN can be found in the Legal Notices section of our website. "Mayer Brown" and the Mayer Brown logo are the trademarks of Mayer Brown.
© Copyright 2024. The Mayer Brown Practices. All rights reserved.
This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.