H.R. 6161 — SEC Data Protection Act

This section requires the Securities and Exchange Commission (SEC), not later than one year after the date of enactment, to adopt policies and procedures—after notice and comment—reasonably designed to protect sensitive, nonpublic proprietary information, as determined by the SEC, obtained from investment advisers from unlawful use or disclosure. Such policies and procedures must (1) address circumstances when the SEC requests such information; (2) safeguard the information taking into consideration its sensitivity level; (3) limit access to appropriate SEC staff; and (4) protect the information from unlawful use or disclosure.