All legislation
Enacted·regulation

SEC Cybersecurity Disclosure Rules (Final Rule)

United StatesEnacted Dec 18, 2023

Requires public companies to disclose material cybersecurity incidents within four business days, and to annually disclose cybersecurity risk management, strategy, and governance. Designed to improve investor information about corporate data breaches and cyber risks. Effective December 18, 2023.

Privacy & SurveillanceFraud & Financial
View full text