17 CFR § 248.30

17 CFR § 248.30
Short Title	The Securities and Exchange Commission (SEC) Safeguards Rule (Rule 30 of Regulation S-P)
Official Text	17 CFR § 248.30
Country/Jurisdiction	United States
State or Province
Regulatory Bodies	United States Congress
Date Enacted	2000
Scope of the Law	Customers, Dealers, Brokers
Information
Taxonomy	Insecurity
Strategies

Template:Ad

Template:United StatesAd

17 CFR § 248.30 provides procedures how to make secure customer records and information. This provision also addresses protecting customers from unauthorized access to or use of the information in connection with its disposal. In other words, it protects carelessness in protecting information from leaks or improper access.

Text of the law

§248.30 Procedures to safeguard customer records and information; disposal of consumer report information. ^Insecurity

(a) Every broker, dealer, and investment company, and every investment adviser registered with the Commission must adopt written policies and procedures that address administrative, technical, and physical safeguards for the protection of customer records and information. These written policies and procedures must be reasonably designed to:

(1) Insure the security and confidentiality of customer records and information;

(2) Protect against any anticipated threats or hazards to the security or integrity of customer records and information; and

(3) Protect against unauthorized access to or use of customer records or information that could result in substantial harm or inconvenience to any customer.

(b) Disposal of consumer report information and records—(1) Definitions (i) Consumer report has the same meaning as in section 603(d) of the Fair Credit Reporting Act (15 U.S.C. 1681a(d)).

(ii) Consumer report information means any record about an individual, whether in paper, electronic or other form, that is a consumer report or is derived from a consumer report. Consumer report information also means a compilation of such records. Consumer report information does not include information that does not identify individuals, such as aggregate information or blind data.

(iii) Disposal means:

(A) The discarding or abandonment of consumer report information; or

(B) The sale, donation, or transfer of any medium, including computer equipment, on which consumer report information is stored.

(iv) Notice-registered broker-dealers means a broker or dealer registered by notice with the Commission under section 15(b)(11) of the Securities Exchange Act of 1934 (15 U.S.C. 78o(b)(11)).

(v) Transfer agent has the same meaning as in section 3(a)(25) of the Securities Exchange Act of 1934 (15 U.S.C. 78c(a)(25)).

(2) Proper disposal requirements—

(i) Standard. Every broker and dealer other than notice-registered broker-dealers, every investment company, and every investment adviser and transfer agent registered with the Commission, that maintains or otherwise possesses consumer report information for a business purpose must properly dispose of the information by taking reasonable measures to protect against unauthorized access to or use of the information in connection with its disposal.

(ii) Relation to other laws. Nothing in this section shall be construed:

(A) To require any broker, dealer, or investment company, or any investment adviser or transfer agent registered with the Commission to maintain or destroy any record pertaining to an individual that is not imposed under other law; or

(B) To alter or affect any requirement imposed under any other provision of law to maintain or destroy any of those records.

Disclaimer: The text of this law may not be the most recent version. We make no warranties or representations about the accuracy, completeness, or adequacy of the information contained on this site. Please check official sources.