SEC Launches Cybersecurity Examination Initiative – Promoting Cyber Preparedness

On April 15, 2014 the Securities and Exchange Commission (SEC) Office of Compliance Inspections and Examinations (OCIE) released a Risk Alert announcing that the agency will be examining 50 registered broker-dealers and investment advisers in order to assess cybersecurity preparedness in the securities industry.¹ The announcement was accompanied by a sample request for information and documents. According to OCIE, the examinations will focus on “cybersecurity governance, identification and assessment of cybersecurity risks, protection of networks and information, risks associated with remote customer access and funds transfer requests, risks associated with vendors and other third parties, detection of unauthorized activity, and experiences with certain cybersecurity threats.”

Cybersecurity; Data Breaches; Enforcement; Financial Privacy; Identity Theft; Information Security

Significant Impact of New EU Data Protection Regulation on Financial Services

Apr 18 2014

William RM Long

Global Banking & Finance Review

Over two years ago, in January 2012, the European Parliament published a proposal for an EU Regulation on Data Protection (the Regulation) to replace the current European Data Protection Directive. Whilst the Regulation raises significant issues for all industries, the financial services sector has been particularly concerned given the billions of financial records and transitions handled yearly. Due to its potential impact, the proposed Regulation has been one of the most lobbied pieces of European legislation in European Union history. According to reports, the European Parliament’s Civil Liberties Committee, which has been negotiating the Regulation, has received over 4,000 amendments.

View Article

European Union; Financial Privacy; International

European Parliament Votes to Approve New EU Data Protection Regulation and Immediate Suspension of Safe Harbor

Mar 17 2014

Sidley Data Matters Contributors

The European Parliament has voted in a plenary session on March 12, 2014 to fully endorse the draft EU Data Protection Regulation (the Regulation) and the draft EU resolution calling for the immediate suspension of Safe Harbor (the Resolution), both of which were adopted previously by the European Parliament’s Civil Liberties Committee (the LIBE Committee).

According to the European Commission’s press release “today’s plenary vote means the position of the Parliament is now set in stone and will not change even if the composition of the Parliament changes following the European elections in May.”

Binding Corporate Rules/BCR; Enforcement; European Union; General; International; Legislation; Model Contracts; National Security; Safe Harbor/Privacy Shield; Surveillance

CIOs and the changing legal landscape

Mar 01 2014

William RM Long and Geraldine Scali

CIO Today UK

The European Commission wishes to ensure a competitive and growing share of the global digital economy. It is, therefore, working on a number of key proposals that will directly impact CIOs and information security departments throughout this current digital decade.

View Article

Cybersecurity; European Union; Information Security; International

Broker-Dealers Need to Respond to Recent Focus on Cybersecurity Threats

Feb 20 2014

Sidley Data Matters Contributors

Recent data breaches at retailers like Target have increased awareness about growing cybersecurity threats. Broker-dealers in particular need to reevaluate their own cybersecurity preparedness in light of several recent events:

FINRA’s launch of a cybersecurity sweep, publicly announced on the FINRA website on February 6, 2014;
The inclusion of cybersecurity as a priority in the SEC’s National Examination Program for 2014 and FINRA’s 2014 Annual Regulatory and Examination Priorities Letter;
The White House’s February 12, 2014 release of the much-anticipated Framework for Improving Critical Infrastructure Cybersecurity; and
An upcoming SEC public roundtable on cybersecurity issues, to be held in Washington, DC on March 26, 2014.

Cybersecurity; Data Breaches; Enforcement; Financial Privacy; Identity Theft; Information Security; Online Privacy

Advisory Guidelines on the Singapore Do Not Call Provisions: The Personal Data Protection Act

Feb 18 2014

Sidley Data Matters Contributors

On December 26, 2013, Singapore’s Personal Data Protection Commission (the “Commission”) issued advisory guidelines on the “Do Not Call” Provisions (“DNC Guidelines”) of the Personal Data Protection Act 2012 (Act 26 of 2012) (“the Act”). The DNC Guidelines supplement the Commission’s earlier issued Advisory Guidelines¹ on the Act. The DNC Provisions came fully into effect on January 2, 2014, and the DNC Guidelines serve to illustrate particular aspects of the DNC Provisions, though “they are not meant to exhaustively address every obligation in the Act.”²

AdTech; APEC; Asia; Enforcement; Legislation; Marketing

White House Releases NIST Cybersecurity Framework

Feb 13 2014

Sidley Data Matters Contributors

On February 12, the White House released the widely anticipated Framework for Improving Critical Infrastructure Cybersecurity (“the Framework”). Developed pursuant to Executive Order 13636 (issued in February 2013), the Framework strongly encourages companies across the financial, communications, chemical, transportation, healthcare, energy, water, defense, food, agriculture, and other critical infrastructure sectors to implement and comply with its voluntary standards. The provisions set forth in the Framework may establish a new baseline for industry standard practices, and may impact or guide FTC enforcement actions and plaintiff data breach lawsuits.

Cybersecurity; Data Breaches; General; Identity Theft; Information Security; National Security

Cybersecurity Developments: SEC, FINRA, NIST, DOJ/FTC

Significant Impact of New EU Data Protection Regulation on Financial Services

European Parliament Votes to Approve New EU Data Protection Regulation and Immediate Suspension of Safe Harbor

CIOs and the changing legal landscape

Broker-Dealers Need to Respond to Recent Focus on Cybersecurity Threats

Advisory Guidelines on the Singapore Do Not Call Provisions: The Personal Data Protection Act

White House Releases NIST Cybersecurity Framework

Categories

Archives

Contacts

Upcoming Events

Data Protection in Financial Services Week 2021