Regulation S-P (Privacy)
The SEC's privacy rule: firms must deliver a privacy notice at account opening and annually, give customers the right to OPT OUT of sharing nonpublic personal information with nonaffiliated third parties, and safeguard customer records.
Reg S-P’s safeguard rule drives firms’ data-security programs, and its disposal rule governs shredding consumer report information. Identity-theft red-flag programs (Regulation S-ID) ride alongside it.