SEC Approves Final Investor Privacy Rule


On April 10, the SEC voted unanimously to adopt a final rule requiring broker-dealers, mutual funds, investment advisers, and other regulated entities to implement programs designed to detect and prevent identity theft. The final rule applies to SEC-regulated entities that meet the definition of “financial institution” or “creditor” under the FCRA. The final rule will take effect 30 days after publication in the Federal Register and give covered firms six months from the effective date to comply. Under the final rule, covered firms must establish policies and procedures designed to (i) identify relevant types of identity theft red flags, (ii) detect the occurrence of those red flags, (iii) respond appropriately to the detected red flags, and (iv) periodically update the identity theft program. The rule requires covered firms to provide staff training and oversight of service providers, and provides guidelines and examples of red flags to help firms administer their programs. Further, the rule requires covered firms that issue debit cards or credit cards to take certain precautionary actions when they receive a request for a new card soon after notification of a change of address for a consumer’s account.

Written by:

Published In:


DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© BuckleySandler LLP | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »

All the intelligence you need, in one easy email:

Great! Your first step to building an email digest of JD Supra authors and topics. Log in with LinkedIn so we can start sending your digest...

Sign up for your custom alerts now, using LinkedIn ›

* With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name.