The compliance deadlines for the SEC’s amendments to Regulation S-P, adopted on May 15, 2024, are approaching. For investment advisers with $1.5 billion or more in assets under management, the compliance deadline is December 3, 2025. Advisers with fewer than $1.5 billion in AUM have six more months, with a compliance deadline of June 3, 2026.
Critically, Reg S-P now requires RIAs to notify clients in the event of certain data breaches. Under the amended rule, RIAs must notify clients of any event that could endanger their personal data, unless the RIA has determined, after reasonable investigation, that sensitive client information has not been, and is not reasonably likely to be, used for substantial harm or inconvenience. Such notice must be sent as soon as practicable, and no later than 30 days after learning of the breach, to any affected or potentially affected clients. If the RIA cannot identify which clients may be affected, the RIA must notify all of its clients. Substantively, any such notification must: Continue reading ›
							RIA Compliance Blog

