What are the Cybersecurity Requirements of SEC Regulation S-P? | UpGuard

## Executive Summary This document summarizes SEC Regulation S-P (Privacy of Consumer Financial Information), outlining required safeguards, disposal and privacy notice obligations for financial institutions, and highlights the SEC's March 2023 proposed amendments to expand requirements—most notably mandates for written incident response plans, breach notification to affected individuals, inclusion of transfer agents, third‑party risk controls, and enhanced recordkeeping.