Check out our Flash Reports for the latest SEC- and compliance-related news, trends, and insights.
The SEC adopted amendments to Regulation S-P requiring broker-dealers, investment companies, registered investment advisors, and transfer agents to implement and maintain policies and procedures regarding an incident response program that are designed to detect, respond, and recover from unwarranted access or use of client information.
Read MoreOn September 14, the Private Fund Adviser Rules were published in the Federal Register. According to the Federal Register, the rules are effective Nov. 13, 2023, and comments regarding the collection of information requirements within the meaning of the Paperwork Reduction Act of 1995 should be received on or before October 16, 2023.
On September 11, 2023, the SEC announced charges against nine registered investment advisers for advertising hypothetical performance to a mass audience on their websites without meeting the requirements of the Marketing Rule. All nine firms have agreed to settle and will pay penalties ranging from $50,000 to $175,000.
On September 5, 2023, the SEC charged five investment firms who failed to comply with requirements regarding safekeeping of client assets, and/or to timely update disclosures relating to audits of financial statements for private fund’s they advise.
On September 5, 2023, the SEC charged private equity firm Prime Group Holdings LLC with “failing to disclose millions of dollars of real estate brokerage fees” that a fund managed by the firm paid to the firm’s affiliate.
On September 1, 2023, six private equity and hedge fund trade groups sued the SEC to block new private fund reforms adopted in August. The suit was filed in the Fifth Circuit Court of Appeals and argued that the SEC overstepped its statutory authority by adopting sweeping changes with these new rules for private funds.
On Saturday, August 19, 2023, a Kroll employee fell victim to a sophisticated “SIM swapping” cyber-attack, targeting their T-Mobile US., Inc. account. This attack involved the transfer of the Kroll employee’s phone number by T-Mobile to the threat actor’s device at their request.