SEC loses investor-identity data in market-surveillance carve-out
H.R. 1483 — Protecting Investors’ Personally Identifiable Information Act · Filed by Barry Loudermilk (R-GA) · 5 cosponsors · Introduced Feb 21, 2025 · Reported out
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill prohibits the SEC from requiring securities exchanges and brokers to collect and report personally identifiable information (names, addresses, Social Security numbers, IP addresses, biometric data, etc.) as part of the consolidated audit trail (CAT) reporting system. The CAT is a regulatory database designed to track market orders and trades for surveillance and enforcement purposes; this bill carves out a privacy exception for personal data within that system.
Why we flagged it
The bill's operative mechanism is a privacy exemption—it removes a category of data (PII) from an existing regulatory reporting mandate. While framed as investor privacy protection, it functionally narrows the SEC's surveillance toolkit for detecting market abuse.
What the text implies
- Removes SEC's ability to cross-reference investor identity with trading patterns, potentially hampering detection of insider trading, layering schemes, and coordinated market manipulation that rely on tracing WHO placed orders.
- May reduce SEC enforcement effectiveness against retail-investor fraud schemes where identity tracing is critical to proving coordination or deception.
The full analysis lists 4 implications of this text.
Who stands to gain
securities exchanges and brokers (reduced compliance burden and data-reporting cost); high-frequency traders and sophisticated market participants (reduced traceability of their trading