The U.S. Securities and Exchange Commission is looking at extending cyber risk management rules to third-party providers and requiring more public company disclosure when there is a security breach. These rules could extend to registered firms’ third-party providers such as index providers, custodians, fund administrators and others.
Automated Decision-Making and Transparency: Insights from the CJEU Ruling in Case C 203/22
Introduction On 27 February 2025, the Court of Justice of the European Union