Remove Due diligence Remove e-records Remove State law
article thumbnail

The SEC Adopts Significant Cybersecurity Amendments to Reg S-P

Debevoise Data Blog

Since its initial adoption in 2000, Reg S-P has required broker-dealers, investment companies and registered investment advisers (“Covered Institutions”) [1] to adopt written policies and procedures to safeguard customer records and information (the “Safeguards Rule”) and to properly dispose of consumer report information (the “Disposal Rule”).

article thumbnail

Treasury’s Post-2024 RFI Report on AI in Financial Services – Uses, Opportunities, and Risks

Debevoise Data Blog

Suggested mitigations: Respondents offered several potential mitigants, including strong third-party risk management (TPRM) frameworks and robust due diligence processes, a topic we have previously discussed. Inconsistent State Laws. The cover art used in this blog post was generated by DALL-E.