Data breach notification
Data breach notification obligations for Financial & Capital Markets firms now run through at least three overlapping federal frameworks, with the U.S. Securities and Exchange Commission's Regulation S-P amendments (effective June 2024) setting a 30-day clock for notifying affected individuals after a covered data breach. The U.S. Federal Trade Commission's updated Safeguards Rule and the Office of the Comptroller of the Currency's 36-hour computer-security incident notification rule add parallel timelines that do not always align. Compliance teams at broker-dealers, investment advisers, and banks are currently reconciling these deadlines against their incident response playbooks and vendor notification chains.
Watch
- SEC Regulation S-P amended incident response and notification deadlines take effect 2024
- OCC 36-hour notification rule: which incidents actually trigger the clock
- State-level breach laws in New York and California diverge from federal timelines
- Vendor and third-party processor contracts: do they meet the new disclosure standard
- European Banking Authority guidance on ICT incident reporting under DORA, applicable to EU-licensed entities
Recent material activity in Financial & Capital Markets
A selection of recent published briefs; this is not a complete archive.
Federal Reserve approves Peoples Bancorp merger with Citizens National Corporation and Citizens Bank of Kentucky
The Federal Reserve Board approved Peoples Bancorp Inc. of Marietta, Ohio, to merge with Citizens National Corporation and indirectly acquire Citizens Bank of Kentucky, Inc., both of Paintsville, Kentucky. The approval a…
Read a full sample brief →NYSE files immediate-effectiveness rule change amending Rule 7.18 governing Disaster Recovery trading sessions
NYSE filed a proposed rule change on September 25, 2026 to amend Rule 7.18, which governs the exchange's Disaster Recovery trading facility and session procedures. The filing took effect immediately upon submission under…
Read a full sample brief →CFTC files $950 million fraud complaint against Cash FX Group and four co-defendants over Ponzi scheme
The CFTC filed a federal complaint on September 25, 2026 against Cash FX Group S.A., its CEO, and three co-defendants for operating a multilevel marketing Ponzi scheme. The complaint alleges fraudulent solicitation of ov…
Read a full sample brief →FDIC releases August 2026 enforcement actions covering nine orders against banks and individuals
The FDIC published its August 2026 enforcement action list on September 25, 2026, comprising nine orders: two consent orders, one amended consent order, one order terminating a consent order, four orders of prohibition, …
Read a full sample brief →NYSE Texas files immediately effective rule change amending Article 6, Rule 13 order-handling provisions
The SEC granted immediate effectiveness to a NYSE Texas proposed rule change on September 25, 2026, amending Article 6, Rule 13. The filing modifies order-handling rules without a standard comment period. This procedura…
Read a full sample brief →NYSE National files immediately effective rule change amending equity trading membership standards under Rule 2.1210
NYSE National's amendment to Rule 2.1210 took effect immediately on September 25, 2026, bypassing the standard comment period under the self-regulatory organization immediate-effectiveness procedure. The SEC received and…
Read a full sample brief →NYSE files immediately effective rule change amending NYSE Rule 1210 governing registered representative qualifications
NYSE filed a proposed amendment to Rule 1210 on September 25, 2026, altering registration and qualification requirements for associated persons. The filing took immediate effect upon submission, bypassing the standard 19…
Read a full sample brief →NYSE American files immediately effective rule change amending equity options margin rule 2.1210
NYSE American LLC filed a proposed rule change on September 25, 2026, amending Rule 2.1210, which governs margin requirements for equity options positions. The filing took effect immediately upon submission under the sel…
Read a full sample brief →NYSE Arca amends options fee schedule to modify Broker QCC Credit and Manual Billable Rebate Program
NYSE Arca has filed a proposed rule change, effective immediately upon filing, to amend its options fee schedule. The amendment modifies both the Broker Qualified Contingent Cross Credit and the Manual Billable Rebate Pr…
Read a full sample brief →NYSE Arca files immediately effective rule change amending equity trading Rule 2.1210
NYSE Arca filed a proposed rule change to amend Rule 2.1210, published in the Federal Register on September 25, 2026. The filing took effect immediately under the self-regulatory organization immediate-effectiveness proc…
Read a full sample brief →