Notice Requirements, Incident Response Plans, Cybersecurity

New SEC Cybersecurity Compliance Deadlines are Coming: What 5 Things Should Covered Institutions Do to Prepare?

Fisher Phillips on 6/30/2025

The SEC’s amended Regulation S-P, adopted last year, will soon enhance data privacy protections for broker-dealers, investment companies, registered investment advisors, and transfer agents. The updated rule requires these...more

SEC Revamps and Enhances Data Protections with Amendments to Regulation S-P

Foley Hoag LLP - Security, Privacy and the... on 5/30/2024

The Securities and Exchange Commission (“SEC”) has announced the adoption of amendments to Regulation S-P (“Amendments”) to modernize and enhance the rules that govern the treatment of consumers’ nonpublic personal...more

New Privacy and Cybersecurity Obligations for Private Fund Sponsors and Managers

Akin Gump Strauss Hauer & Feld LLP on 5/21/2024

Last week, the Securities and Exchange Commission imposed expanded privacy and cybersecurity obligations on fund managers and sponsors registered with the SEC as investment advisers. While many registered investment advisers...more

FTC Amends Safeguards Rule to Require Notification of Unauthorized Data Acquisitions to the Agency

BakerHostetler on 10/31/2023

Back in 2021, the FTC announced substantial changes to the Rule that imposed more detailed and rigorous security requirements for covered financial institutions and was largely based on the New York State Department of...more

Move it or Lose it – With Cyber Breach Response, Time is of the Essence

Epiq on 9/27/2023

There are so many factors that go into breach response. Determining the size of the breach, time limitations, legal requirements, notification needs, urgency for containment, and interrupted business operations are just a...more

NYDFS Releases Pre-Proposed Second Amendment to its Cybersecurity Regulations, 23 NYCRR 500

Faegre Drinker Biddle & Reath LLP on 9/2/2022

On July 29, 2022, the New York Department of Financial Services (NYDFS) published the pre-proposed second amendment to its Cybersecurity Regulations, 23 NYCRR 500 (Part 500), that if adopted, would likely require numerous...more

NYDFS Proposed Amendments to Its Cybersecurity Rules

BakerHostetler on 8/9/2022

On July 29, the New York Department of Financial Services (NYDFS) released Draft Amendments to its Part 500 Cybersecurity Rules that include a number of significant amendments to the rules, including notification...more

SEC Warns Registered Firms about Client Privacy and Data Security

Akin Gump Strauss Hauer & Feld LLP on 4/29/2019

• The SEC released a Risk Alert summarizing key areas in which it continues to see compliance deficiencies related to Regulation S-P, the primary SEC rule regarding privacy notices and safeguard policies of investment...more

The SEC Released A Risk Alert On Reg S-P, a/k/a How To Avoid A $1 Million Penalty

UB Greensfelder LLP on 4/24/2019

I am hardly saying that SEC Regulation S-P is the sexiest of regulations. I mean, has any customer is history actually read one of those exciting statement stuffers that discloses in some dense font a BD’s privacy policy?...more

GDPR's Most Frequently Asked Questions: What are a law firm’s obligations under the GDPR in the event of a data security breach?

BCLP on 10/29/2018

The European Union's General Data Protection Regulation ("GDPR") is arguably the most comprehensive - and complex - data privacy regulation in the world. Although the GDPR went into force on May 25, 2018, there continues to...more

Response Plan Rewind: The Essentials of Data Breach Response Plans

Spilman Thomas & Battle, PLLC on 10/22/2015

From the financial sector to the healthcare industry, and even the security business itself, hackers are creeping their way into business data systems and pilfering personal information. For financial institutions, security...more

Notice Requirements › Incident Response Plans › Cybersecurity

"My best business intelligence, in one easy email…"