Data breach notification
Data breach notification obligations for Financial & Capital Markets firms now run through at least three overlapping federal frameworks, with the U.S. Securities and Exchange Commission's Regulation S-P amendments (effective June 2024) setting a 30-day clock for notifying affected individuals after a covered data breach. The U.S. Federal Trade Commission's updated Safeguards Rule and the Office of the Comptroller of the Currency's 36-hour computer-security incident notification rule add parallel timelines that do not always align. Compliance teams at broker-dealers, investment advisers, and banks are currently reconciling these deadlines against their incident response playbooks and vendor notification chains.
Watch
- SEC Regulation S-P amended incident response and notification deadlines take effect 2024
- OCC 36-hour notification rule: which incidents actually trigger the clock
- State-level breach laws in New York and California diverge from federal timelines
- Vendor and third-party processor contracts: do they meet the new disclosure standard
- European Banking Authority guidance on ICT incident reporting under DORA, applicable to EU-licensed entities
Recent material activity in Financial & Capital Markets
-
SEC seeks public comment on extending Rule 13f-2 short position reporting collection under institutional investment manager regime
The SEC published a proposed collection extension notice on July 27, 2026 for the information collection requirements under Rule 13f-2, which governs short position and short activity reporting by institutional investmen…
Read a full sample brief → -
RBI extends supervisory directions over Sonpeth Nagari Sahakari Bank Maryadit by three months to October 30, 2026
The Reserve Bank of India has extended its binding supervisory directions over Sonpeth Nagari Sahakari Bank Maryadit, Sonpeth, Maharashtra. The extension runs from July 30, 2026 to October 30, 2026, subject to review, wi…
Read a full sample brief → -
RBI extends supervisory directions over Irinjalakuda Town Co-operative Bank by three months to October 30, 2026
The Reserve Bank of India extended its supervisory directions over The Irinjalakuda Town Co-operative Bank Ltd., Kerala on July 24, 2026. The extension runs three months, from close of business on July 30, 2026 to close …
Read a full sample brief → -
SEBI issues final quasi-judicial order against front-running of Axis Mutual Fund trades
SEBI's Enforcement Division issued a final order on July 24, 2026 concluding proceedings against parties who front-ran trades of Axis Mutual Fund. The order resolves a named enforcement action and establishes a concluded…
Read a full sample brief → -
SEBI issues ex parte interim order against Stark Investments and associates for unregistered investment advisory and portfolio management operations
SEBI issued an ex parte interim order on July 24, 2026 against Stark Investments and associated persons for conducting unregistered investment advisory and portfolio management services. The order reflects SEBI's sustain…
Read a full sample brief → -
SEBI issues quasi-judicial enforcement order against Nalwa Sons Investments Limited
SEBI's Enforcement Division issued a quasi-judicial order on July 24, 2026 against Nalwa Sons Investments Limited. The specific findings, charges, and remedial directions are not disclosed in the available source text.
Read a full sample brief → -
SEBI issues quasi-judicial enforcement order against Hexa Tradex Limited
SEBI's Enforcement Division issued a quasi-judicial order against Hexa Tradex Limited on July 24, 2026. The order originates from SEBI's enforcement directorate, confirming a formal adjudicatory proceeding against the na…
Read a full sample brief → -
SEBI issues final order against Madhav Stock Vision and associates for front-running violations
On July 24, 2026, SEBI's Chairperson or a Member issued a final order against Madhav Stock Vision Pvt. Ltd. and associated parties for front-running conduct. The order concludes an enforcement proceeding and carries bind…
Read a full sample brief → -
SFC issues binding circular restructuring compliance baseline for listed structured funds in Hong Kong
On July 24, 2026, the Securities and Futures Commission issued a circular setting out conduct, disclosure, and structural requirements for listed structured funds operating in Hong Kong.
Read a full sample brief → -
SFC reprimands and fines Victory Securities $1.7 million for AML and supervision failures, suspends responsible officer
On July 24, 2026, the Securities and Futures Commission reprimanded Victory Securities Company Limited and imposed a HK$1.7 million fine for regulatory breaches. The action also suspends a responsible officer, reflecting…
Read a full sample brief →