View Rule

The Division of Investment Management and Division of Trading and Markets are considering recommending that the Commission adopt amendments to Regulation S-P. The Commission proposed rule amendments that would require brokers and dealers, investment companies and investment advisers registered with the Commission to adopt written policies and procedures for incident response programs to address unauthorized access to or use of customer information, including procedures for providing timely notification to individuals affected by an incident involving sensitive customer information with details about the incident and information designed to help affected individuals respond appropriately.  The Commission also proposed to broaden the scope of information covered by amending requirements for safeguarding customer records and information, and for properly disposing of consumer report information.  In addition, the proposed amendments would extend the application of the safeguards provisions to transfer agents.  The proposed amendments would also include requirements to maintain written records documenting compliance with the proposed amended rules. Finally, the proposed amendments would conform annual privacy notice delivery provisions to the terms of an exception provided by a statutory amendment to the Gramm-Leach-Bliley Act.