SEC gets new data-protection mandate—but scope of 'proprietary' stays vague

What it does

This bill requires the SEC to adopt data protection policies within one year to safeguard sensitive, nonpublic proprietary information it receives from investment advisers. The SEC must establish procedures addressing when it requests such information, how it safeguards it based on sensitivity level, who can access it, and how it prevents unlawful use or disclosure.

Why we flagged it

The bill is a narrow procedural mandate requiring the SEC to establish internal data protection standards for information it receives from regulated entities. It is not a substantive policy change but a governance requirement focused on information security and confidentiality protocols.

What the text implies

• The bill does not define 'proprietary information' or 'sensitive, nonpublic' data, leaving the SEC broad discretion to determine scope—potentially shielding adviser misconduct evidence from disclosure if classified as proprietary.
• No requirement that data protection policies balance confidentiality against transparency or public-interest disclosure; SEC could restrict FOIA access or whistleblower protections under a broad confidentiality umbrella.
• The bill applies only to adviser data held by the SEC, not to data advisers hold about clients—leaving retail investor information outside this protection framework.
• One-year implementation timeline may be insufficient for a federal regulator to build robust data governance; compliance may result in minimal procedural changes rather than substantive security improvements.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

Citizens benefit from stronger data governance at a federal regulator, reducing risk of sensitive financial-sector information leaking to competitors or bad actors. However, the bill does not address whether advisers' data protections extend to client information, and it may inadvertently shield adviser misconduct from public scrutiny if 'proprietary information' is interpreted broadly to include evidence of wrongdoing.

Who stands to gain

• investment advisers (reduced risk of proprietary information disclosure)
• large asset managers (competitive advantage if trade secrets are protected from regulatory leaks)

Named in the bill

Securities and Exchange Commission (SEC), investment advisers, Investment Advisers Act of 1940, Section 204

Where it stands

21 cosponsors: 12 Republicans, 9 Democrats.

• Nov 19, 2025 — Introduced · Congress.gov: “Introduced in House”
• Nov 19, 2025 — Referred to House Committee on Financial Services · Congress.gov: “Referred to the House Committee on Financial Services”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

1 lobbying clients named this bill on 1 disclosure filings across 1 quarter, Jun 2026 to Jun 2026. Those filings disclosed $1,100,000 in lobbying spend. A filing names 12 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 0% of bills with at least one filing.

David Scott, the sponsor, reported $287,500 in PAC receipts in the 2026 cycle.

• Managed Funds Association — $1,100,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.