On Nov. 12, 2024, the Consumer Financial Protection Bureau (CFPB) released a report examining federal and state privacy protections for consumers’ financial data. In the report, the CFPB “critiques” the privacy protections available under the Gramm-Leach-Bliley Act (GLBA) and the Fair Credit Reporting Act (FCRA), asserting that the federal framework has “limitations.” The CFPB then
On Oct. 22, 2024, the CFPB issued a final rule that will require covered financial institutions to provide consumers and authorized third parties with access and portability options for their financial data. The CFPB’s final rule, called the “Personal Financial Data Rights Rule,” implements Section 1033 of Title X of the Dodd-Frank Act, a to-date
![cybersecurity[1]](https://gtlawfinancialservicesobserver.gtlawplatform.com/wp-content/uploads/sites/37/2022/02/cybersecurity1.jpg)
On Oct. 22, 2024, the SEC announced settled administrative actions against four current or formerly public technology companies, finding that the companies all made materially misleading disclosures to investors in their periodic filings concerning the impact of the 2020 SolarWinds breach on their businesses.
On May 16, 2024, the U.S. Securities and Exchange Commission finalized amendments to Regulation S-P (the Amendments) that largely adopt the proposed amendments the SEC issued in 2023. As discussed in further detail below, the Amendments will require broker-dealers, investment companies, SEC-registered investment advisers, funding portals, and transfer agents registered with the SEC or other
On March 13, at the Financial Data Exchange Global Summit, CFPB Director Rohit Chopra delivered a keynote address that focused on “the role of standard setters and standard-setting” as the CFPB pushes towards finalizing is its proposed Personal Financial Data Rights Rule.
Continue Reading Setting the Standard: CFPB to Codify Attributes for Standard-Setters Before Finalizing Personal Financial Data Rights Rule
On July 26, 2023, the Securities and Exchange Commission (SEC) adopted the long-awaited final rule requiring that public companies disclose information about cybersecurity incidents within four business days of determining the incident is material. GT wrote about the proposed rule shortly after it was released in March 2022. For context, Commissioner Caroline Crenshaw noted, in
On Aug. 11, 2022, the U.S. Consumer Financial Protection Bureau issued guidance indicating that financial institutions and service providers that fail to adopt sufficient data security measures to protect consumer financial data may violate the Consumer Financial Protection Act provision prohibiting unfair acts and practices.
Greenberg Traurig is proud to host and participate in the Asia Cloud Computing Association (ACCA) and the Futures Industry Association of Japan (FIAJ) program “Cloud Computing Services Usage by the Financial Services Industry – Business Models and Regulatory Approach” in the GT Tokyo office on Nov. 1, 2016. GT Shareholders Koichiro Ohashi and Lori Nugent