On January 20, a new administration took office. This will inevitably bring regulatory change. Under SEC Chair Gary Gensler’s leadership, the SEC issued numerous penalties and proposed many overlapping rules. Under incoming SEC Chair Paul Atkins’ leadership, the SEC will likely have a more practical approach. Atkins is not anti-regulation, nor will the SEC turn from its mission to protect investors; maintain fair, orderly, and efficient markets; and facilitate capital formation.
So, what does this mean for registered investment advisers? Will certain proposed rules be finalized? Will artificial intelligence (“AI”) still be a priority? Will advisers really have to comply with heightened vendor due diligence requirements?
While we do not have a crystal ball, we have broken down our top 2025 SEC predictions, including what we believe will change, what will remain consistent, and how you can prepare.
- Compliance programs will remain a priority. SEC Chair nominee Paul Atkins has an extensive background supporting compliance. He was a Commissioner at the SEC from 2002-2008, and before his appointment as Commissioner, he assisted financial services firms with improving their compliance with SEC regulations and worked with law enforcement agencies to investigate and rectify situations where investors had been harmed.[1] While we do anticipate a shift in focus areas, we still expect compliance programs to remain a top priority.
- 2025 EXAM priorities will likely remain unchanged. Unlike some of the proposed rules, the 2025 Examination Priorities[2] published by the SEC’s Division of Examinations (“EXAMS”) will remain in place. Priorities tend to stay consistent, even when there is a change in administrations. For example, cybersecurity has been a priority since 2014[3], and we expect that to remain, given the heightened cybersecurity risks posed by new and different forms of technology. Nevertheless, new guidance and focus areas may emerge. For more details on the SEC’s 2025 exam priorities, click here.
- Regardless of whether the proposed Cybersecurity Risk Management Rule (“Cyber Rule”), or the proposed Outsourcing by Investment Advisers Rule (“Outsourcing Rule”) are adopted, certain components of these proposals would still be viewed as best practices. Of the remaining proposed rules, we think the Cyber Rule, or an iteration thereof, is most likely to be adopted. Many elements of the Cyber Rule are already seen as best practice, as evidenced by recent SEC examinations. Some parts of the proposed Outsourcing Rule are now addressed in the recently adopted amendment to Regulation S-P, so we think the Outsourcing Rule proposal is less likely to be adopted as a final rule.
- Amended Regulation S-P will remain intact. Regulation S-P is part of the Gramm-Leach-Bliley Act (GLBA), which covers a broad group of financial institutions. Given the threat cybersecurity poses to the financial services industry, we do not expect any changes to Amended Regulation S-P, which requires covered entities to adopt policies and procedures to: 1) govern disposal of customer information; 2) conduct due diligence and monitor service providers; 3) establish an incident response program; 4) meet certain customer notification requirements; and 5) comply with the expansion of the safeguards and disposal rules to include nonpublic personal information that a covered institution obtains about its own clients, along with nonpublic personal information received from other financial institutions about clients. Covered institutions (except funding portals) must also maintain written records evidencing compliance with the safeguards and disposal rules. Advisers would be wise to start preparing to fulfill these requirements, particularly the vendor due diligence requirement, which will require a significant amount of time and resources for many firms to implement.
- We expect a softer approach to AI under Atkins. The proposed Predictive Data Analytics Rule ( the “AI Rule”) could be scrapped, or overhauled. Atkins will likely share President-elect Donald Trump’s view of AI, which supports expanded AI innovation and advancement.[4] Accordingly, we expect a business and technology-friendly approach to regulation. This could also mean more attention to data protection as well as other perennial focus areas, such as the handling of material nonpublic information (MNPI).
- Speaking of crypto, cryptocurrency, and other digital assets could take center stage. While Gensler viewed these new financial technologies as overly risky, Atkins is widely viewed as crypto-friendly (as evidenced by his position on the Board of Advisors of Token Alliance, also known as the Chamber of Digital Commerce)[5]. Since 2017, Atkins has been a member of Token Alliance, whose mission is to promote the acceptance and use of digital assets and blockchain-based technologies. Atkins has been involved in the development of regulatory frameworks and best practices with regard to the use of digital assets and cryptocurrencies. Atkins has also voiced support for Commissioner Hester Peirce’s Token Safe Harbor Proposal, which proposes a grace period for crypto developers before requiring SEC registration. Peirce released an updated version of the Token Safe Harbor Proposal in 2021 when Gensler came into the chairmanship. Now may be the perfect time to try again under a new chairman.
- MNPI, client protection, and investor protection will continue to be key priorities under incoming Chair Atkins. Atkins has a long track record of enhancing client protection and investor protection. When he was an SEC commissioner under Chairman Arthur Levitt, he was responsible for organizing the SEC’s individual investor program, including the first investor town hall meetings, an SEC consumer affairs advisory committee, and other investor education efforts, including the original Invest Wisely brochures regarding the fundamentals of the retail brokerage relationship and mutual fund investment. Under SEC Chairman Richard Breeden, he assisted in efforts to enhance shareholder communications and to strengthen management accountability through proxy reform. We can expect to see investor protection and protection of MNPI to be consistent themes of the SEC under Atkins’ leadership.[6]
What does this mean for me?
While Atkins will have a different approach to leading the SEC, it is unlikely that he will totally reform it or make significant changes to its current priorities. Also, with his background, the transition into his role as Chair will be much smoother since he is already familiar with how the SEC and the federal regulatory landscape. Firms would be wise to continue strengthening their compliance programs, preparing for new rules that have been finalized, such as Amended Regulation S-P, and addressing the 2025 Examination Priorities published by the Division of Examinations.