SEC Data Protection Act

[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[H.R. 6161 Introduced in House (IH)]

<DOC>






119th CONGRESS
  1st Session
                                H. R. 6161

To amend the Investment Advisers Act of 1940 to require the Securities 
     and Exchange Commission to adopt data protection policies for 
 information the Commission receives from investment advisers, and for 
                            other purposes.


_______________________________________________________________________


                    IN THE HOUSE OF REPRESENTATIVES

                           November 19, 2025

 Mr. David Scott of Georgia (for himself, Mr. Loudermilk, Mr. Foster, 
Mrs. Wagner, Mr. Sherman, Mr. Meuser, Mr. Gottheimer, Mr. Davidson, Mr. 
 Cleaver, Mrs. Kim, Mr. Himes, Mr. Fitzgerald, Mr. Vicente Gonzalez of 
    Texas, Ms. Salazar, Ms. Bynum, Ms. De La Cruz, and Mr. Carson) 
 introduced the following bill; which was referred to the Committee on 
                           Financial Services

_______________________________________________________________________

                                 A BILL


 
To amend the Investment Advisers Act of 1940 to require the Securities 
     and Exchange Commission to adopt data protection policies for 
 information the Commission receives from investment advisers, and for 
                            other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``SEC Data Protection Act''.

SEC. 2. PROCEDURE FOR DATA PROTECTION.

    Section 204 of the Investment Advisers Act of 1940 (15 U.S.C. 80b-
4) is amended by adding at the end the following:
    ``(g) Data Protection Policies.--Not later than 1 year after the 
date of enactment of this subsection, the Commission shall adopt, after 
notice and comment, policies and procedures reasonably designed to 
protect sensitive, nonpublic proprietary information, as determined by 
the Commission, that the Commission obtains or receives from an 
investment adviser subject to this section, from unlawful use or 
disclosure. Such policies and procedures shall--
            ``(1) address circumstances when the Commission requests 
        such proprietary information;
            ``(2) safeguard the information, taking into consideration 
        the level of sensitivity of the information;
            ``(3) limit access to the information to appropriate staff, 
        as determined by the Commission; and
            ``(4) protect the information from unlawful use or 
        disclosure.''.
                                 <all>