The U.S. Securities and Exchange Commission announced the adoption of new rules pertaining to how public companies report cybersecurity incidents. The SEC will now require disclosures related to "material cybersecurity incidents (companies) experience and to disclose on an annual basis material information regarding their cybersecurity risk management, strategy, and governance." SEC Chair Gary Gensler said the aim is to make disclosures "consistent, comparable, and decision-useful" for investors. Editor's note: The IAPP and KPMG released the Privacy Risk Study 2023 in June.
27 July 2023
SEC adopts rules to update cybersecurity incident reporting
Related stories
Addressing the most difficult issues facing a US federal privacy law
Notes from the IAPP Canada: OPC's data breach self-assessment tool is bold, helpful
Notes from the IAPP Europe: Welcoming the EHDS, CJEU opinion on EDPB decision challenges, and more
FTC commissioner removals in focus at US House children's online safety hearing
Notes from the Asia-Pacific region: Regulatory developments in full swing