Select Page

On February 20, 2025, the Securities and Exchange Commission (SEC) announced the formation of the Cyber and Emerging Technologies Unit (CETU), which replaces the former Crypto Assets and Cyber Unit. The CETU’s mandate is to “combat cyber-related misconduct and protect retail investors from bad actors in the emerging technologies space.” For publicly traded companies, this development signals the SEC’s intensified focus on ensuring that technological advancements do not compromise investor protection or market integrity. 

Key takeaways for executives include:

  • Enhanced Oversight: The CETU will scrutinize misconduct in areas such as artificial intelligence, machine learning, social media misuse, dark web activities, and fraudulent websites.

  • Cybersecurity Compliance: There will be a heightened emphasis on regulated entities’ adherence to cybersecurity rules and regulations.

  • Disclosure Accuracy: The unit will focus on public issuers’ disclosures related to cybersecurity, underscoring the importance of accurate and transparent reporting.

Acting Chairman Mark T. Uyeda emphasized that the CETU aims to “root out those seeking to misuse innovation to harm investors and diminish confidence in new technologies.” Executives should proactively assess and bolster their company’s cybersecurity measures, ensure compliance with relevant regulations, and maintain transparency in disclosures to align with the SEC’s reinforced enforcement landscape.

*Original Article Title: “SEC Announces Cyber and Emerging Technologies Unit to Protect Retail Investors”

*Publication: U.S. Securities and Exchange Commission

*Date of Publication: February 20, 2025

*Link to Article: https://www.sec.gov/newsroom/press-releases/2025-42

Warby Parker’s $1.5 Million HIPAA Penalty Highlights Critical Cybersecurity Obligations for Healthcare Entities

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has imposed a $1,500,000 civil money penalty against Warby...

Texas Data Privacy and Security Act – Part 1: Applicability 

In a digital era marred by big data monetization and weaponization and culminating in a renewed privacy awakening, Texas has taken a substantial...

New Jersey Enacts Privacy Law

On January 16, 2024, New Jersey became the first state in 2024 to join a growing list of states implementing comprehensive consumer data privacy...

FTC Settles Data Broker Settlement Banning Sale of Sensitive Location Data

Organizations that collect, use, purchase, or sell sensitive location data should remain cautious of its data practices and the recent FTC...

HHS Office for Civil Rights Resolves Medical Practice Ransomware Cyberattack

The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently issued its second-ever settlement for a ransomware...