Tracker record · Federal · Final rule
SEC Regulation S-P amendments
The SEC's amendments to Regulation S-P requiring covered institutions to adopt incident-response programs and notify affected individuals of certain data breaches, with phased compliance dates.
Status
- Legal status
- In effect; both compliance dates passed (Effective August 2, 2024; compliance December 3, 2025 (larger entities) and June 3, 2026 (smaller))
- Allegation or finding
- Operative law
- Applicability
- Broker-dealers (including funding portals), investment companies, SEC-registered investment advisers, and transfer agents registered with the SEC or another appropriate regulatory agency
- Enforceability
- Binding on parties within scope
- Law checked through
- October 12, 2026
- Primary-source pinpoint
- 17 C.F.R. part 248, subpart A
- Citation
- 17 C.F.R. part 248, subpart A
- Source
- 17 C.F.R. part 248, subpart A