New SEC cyber rules to take effect in August for investment firms, broker-dealers

The Securities and Exchange Commission’s new cyber rules for investment firms will go into effect on Aug. 3, according to a Federal Register notice set for publication today with the full final rule that sets up requirements for creating incident response plans and notifying customers of breaches.

The final rule was issued on May 16 and amends the so-called “Regulation S-P,” which was originally established in 2000. Large entities will have 18 months following publication in the Federal Register...