On May 16, 2024, the U.S. Securities and Exchange Commission finalized amendments to Regulation S-P (the Amendments) that largely adopt the proposed amendments the SEC issued in 2023. As discussed in further detail below, the Amendments will require broker-dealers, investment companies, SEC-registered investment advisers, funding portals, and transfer agents registered with the SEC or other appropriate regulatory agency agents (collectively, Covered Institutions) to adopt written policies and procedures for incident response programs to address unauthorized access to or use of “customer information.”
SEC Adopts Cybersecurity Amendments to Regulation S-P
