The SEC and CFTC Jointly Approve New Identity Theft Rules
Recently, the Securities and Exchange Commission (“SEC”), in tandem with the Commodity Futures Trading Commission (CFTC), jointly adopted Final Rulesrequiring certain entities to implement programs to detect red flags and prevent identity theft. These rules were developed in response to the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (“Dodd-Frank”) which shifted responsibility for identify theft rules and enforcement of such rules from the Federal Trade Commission to the SEC and the CFTC for those entities under their respective jurisdiction. Specifically, the SEC’s rules will apply to those entities under its jurisdiction, including broker-dealers, investment companies, and investment advisers; while the CFTC’s rules will apply to futures commission merchants, commodity trading advisors and commodity pool operators. However, both the SEC and CFTC rules will only apply to “financial institutions” and “creditors” as those terms are defined in the Fair Credit Reporting Actthat offer and maintain “covered accounts.”The new rules require those covered entities to develop and implement written policies and procedures designed to detect, prevent and mitigate identity theft in connection with certain existing accounts or the opening of new accounts. Specifically, these policies and procedures must: (1) identify relevant red flags; (2) detect the red flags; (3) respond appropriately to red flags that have been detected; and (4) periodically update the identity theft policies and procedures. The Final Rulesprovide additional guidance, including examples, to help determine which entities qualify and, if so, how to comply with the new rules.The new rules also require that covered entities provide staff training and appoint a “senior management employee” (most likely the entity’s Chief Compliance Officer) to be responsible for the program. Furthermore, those entities not initially subject to the new rules are required to periodically reassess whether or not they are required to develop such policies and procedures in light of changes in the accounts they offer or maintain.The Final Ruleswill become effective 30 days after publication in the Federal Register. Once effective, those subject to the new rules will have six months to implement their red flag programs.For further information about this, or other related topics, please contact us at (619) 298-2880 or at info@jackolg.com.
Add a comment
Recent Posts
- New SEC Climate Change and ESG Task Force to Enhance Investor Protection by Red Flagging Examples of Corporate Greenwashing
- What Investment Advisers Must do to Qualify for the DOL’s Prohibited Transaction Exemption for IRA Rollovers
- SEC Division of Examinations Cites Enhanced Focus on Business Continuity Processes, Protection of Retail Investors and ESG-Related Risks Among its 2021 Priorities
- FINRA Report Suggests Growing Need for Enhanced Risk Management in Cybersecurity and Outside Business Activities
- Deadline Approaching: Considerations for Your Form ADV
- Leveraging JLG's Latest Service: Real Estate
- Safeguarding Your Firm Against Fraudulent or Improper Recognition of Revenue
- New Advisers Act Advertising Rule to Undergo Further Review
- Investors, Advisers Must be Mindful to Comply with New U.S. Ban on Estimated $1 Trillion of Chinese Securities
- Your First Meeting on the SEC’s New Investment Adviser Marketing Rule Should Address These Topics
Topics
- Securities and Exchange Commission (SEC)
- Investment Advisers
- FINRA
- Cybersecurity
- Regulatory Examinations
- Advertising
- Broker-Dealers
- Policies and Procedures
- Investors
- Social Media Marketing
- Privacy Policy
- Due Diligence
- Transition Services
- California Consumer Privacy Act (CCPA)
- Cryptocurrency
- Disclosures
- Aging Clients
- Advisers Act
- ICOs
- Defraud
- Virtual Currency
- Dodd-Frank Act
- Ponzi Scheme
- FAQs
- Office of Compliance Inspections and Examinations (OCIE)
- Broker Protocol
- Securities Law
- Whistleblower
- Form U5
- Private Equity
- Private Funds
- Hedge Funds
- churning
- Regulation Best Interest
- Personally Identifiable Information (PII)
- Government Shutdown
- Risk Alert
- Exchange-Traded Funds (ETFs)
- Investment Company Act
- Rule 6c
- Wells Fargo