Information Security and Privacy: SEC Regulation S-P

What this video covers

• The distinction between a consumer and a customer, and why someone who only requests a brochure is neither
• The timing and content of the initial privacy notice, and why it must arrive before the customer relationship is established
• The opt-out notice requirements, including the 30-day reasonable opportunity window and the validity of partial opt-outs
• The two-part exception that allows a firm to skip the annual privacy notice entirely
• The five specific situations where opt-out rights disappear entirely, including service providers, transaction processing, risk control, legal compliance, and consumer reporting agencies
• The three mandatory pillars of the Safeguards Rule: physical, administrative, and technical safeguards
• The breach notification deadlines: 72 hours for a service provider to notify the firm, and 30 days for the firm to notify affected customers