New Focus and Compliance Approach Needed for Privacy and Cybersecurity

New Focus and Compliance Approach Needed for Privacy and Cybersecurity

In 2020, we saw an increased regulatory focus on cybersecurity. Though former SEC Chairman Clayton largely took the view that existing statutes and regulations were sufficient, the Division of Examinations increased exam activities in the space while agencies like FinCEN increased enforcement against violators. We can expect to see a continued focus on cybersecurity going forward, but it is unclear seen whether it will remain among the top priorities of the SEC. As set forth in Risk #1, we believe that the presumptive Chairman, Gary Gensler, will take a more active approach generally and, as part of that, we expect a heightened focus on cybersecurity. Sponsors are a theoretically high value target for attack because even relatively small sponsors often control billions of dollars (whether directly or indirectly) and have highly confidential information concerning their investors and partners. It is important that sponsors’ commitment to, and investment in, cybersecurity systems, policies, and procedures is commensurate with their risks and profile in fact. State voters have also increased their focus on cybersecurity and privacy. The California Consumer Privacy Act of 2018 (“CCPA”) became operative on January 1, 2020, requiring qualifying businesses to enable consumers to know about and control the information collected about them. In November 2020, California voters passed the California Privacy Rights Act of 2020 (“CPRA”) in an effort both to expand and strengthen the scope of the CCPA. (The CPRA will become operative on January 1, 2023.) Because both the CCPA and CPRA define consumers and businesses broadly, private investment funds and their sponsors and managers may be considered “qualifying businesses” and information they collect and use about their employees, job applicants, investors, and prospective investors (including KYC information) residing in California could be subject to either or both of the acts.


Overseas, now that the UK has left th ..

Support the originator by clicking the read the rest link below.