The SEC Adopts Significant Cybersecurity Amendments to Reg S-P
Debevoise Data Blog
MAY 17, 2024
On May 16, 2024, the SEC adopted amendments to Regulation S-P (“Reg S-P”) one year after its proposed amendments (the “Proposed Amendments”). The finalized amendments (“Amended Reg S-P”) largely track the Proposed Amendments and include significant requirements related to (1) incident response programs, (2) 30-day customer notifications of data breaches, (3) service provider oversight, (4) the scope of the Safeguards and Disposal Rules, (5) recordkeeping, and (6) an exception to the annual priva
Let's personalize your content