Tr?id=566623520170033&ev=PageView&noscript=1

SEC Updates Regulation S-P to Enhance Customer Data Protection

Posted on October 4th, 2024 at 2:10 PM
SEC Updates Regulation S-P to Enhance Customer Data Protection

From the desk of Jim Eccleston at Eccleston Law

The SEC has introduced long-awaited updates to Regulation S-P, originally adopted in 2000, to improve the protection of customer records and information for broker-dealers, investment companies, and RIAs. According to WealthManagement, these updates focus on strengthening cybersecurity measures and improving the procedures for notifying customers in the event of data breaches.

Under the amended rules, financial institutions are now required to maintain written procedures for responding to cyber breach incidents. These procedures must include steps to detect the extent of a breach and to prevent further data leaks. Companies must inform affected customers as soon as possible, but no later than 30 days after discovering a breach. SEC Chair Gary Gensler emphasized the importance of these updates, noting the significant transformation in the nature, scale, and impact of data breaches over the past 24 years.

Michael Cocanower, founder and CEO of AdviserCyber, highlighted the SEC's increasing focus on cybersecurity, adding that the 30-day notification window allows sufficient time for investigation and customer notification. However, he acknowledged that complying may still present challenges to some firms.

While the updated regulations mandate written response policies and customer reporting, they do not require companies to have separate cyber insurance policies. Cocanower recommended that firms consider purchasing such policies, as they can provide critical resources for technical mitigation, investigation, legal counsel, customer notification, and credit monitoring services in the event of a breach.

The SEC’s amendments to Regulation S-P will take effect 60 days after their publication in the Federal Register. Larger entities will have 18 months to comply with the new rules, while smaller entities will have 24 months.

 

Eccleston Law LLC represents investors and financial advisors nationwide in securities, employment, transition, regulatory, and disciplinary matters.

Tags: eccleston, eccleston law, sec

Return to Archive

TESTIMONIALS

Previous
Next
Quotes Bigger

Thank You from the bottom of our hearts for all you have done for us. When we realized this was a very bad investment - we did not know where to turn for help. Then we received your name. When we called you - you were so kind to us and then agreed to help us. For this we are so very grateful. The world would be a much nicer place if there were more people like the two of you in it. We will always remember all the help and kindness you have shown us. Thank you so very very much for everything.

Wayne and Judy S.

LATEST NEWS AND ARTICLES

1780676353 Law
June 5, 2026
Redemption Pressure Mounts Across Private Credit and Non-Traded BDC Market

Investors continued pulling money from private credit and nontraded business development companies ("BDCs") during the first quarter of 2026 as concerns about liquidity and portfolio valuations intensified across the sector, according to reporting by InvestmentNews.

1780588152 Law
June 4, 2026
Former Wells Advisor Alleges Age Discrimination

A former Wells Fargo senior private client financial advisor in Wisconsin has filed a federal lawsuit alleging the firm terminated him because of his age rather than an alleged workplace profanity incident.

1780507151 Law
June 3, 2026
Starwood REIT Suspends Most Redemptions Amid Liquidity Pressure

Starwood Real Estate Income Trust (SREIT) has announced a temporary suspension of its share repurchase program for most investors.