SEC Privacy Risk Alert may Foreshadow Upcoming Reg S-P Enforcement Against Broker-Dealers, Investment Advisers

May 15, 2019

On April 16, 2019, the U.S. Securities and Exchange Commission’s Office of Compliance Inspections and Examinations issued a Risk Alert addressing all registered broker-dealers and investment advisers’privacy-related obligations under Regulation S-P.

The Risk Alert set out the most frequent Reg S-P deficiencies OCIE identified during examinations over the past two years, and encouraged registrants to review their written privacy policies and procedures as well as the consistency with which these policies and procedures have been implemented.  The Alert is the latest in a series of recent privacy and cybersecurity guidance documents issued by the SEC, including the February 2018 Commission Statement and Guidance on Public Company Cybersecurity Disclosures and October 2018 Report of Investigation on cyber-related frauds and public company accounting controls.

Click here, to continue reading on the Cleary Cybersecurity and Privacy Watch blog.