119 HR 6161 IH: SEC Data Protection Act U.S. House of Representatives 2025-11-19 text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.

I119th CONGRESS1st SessionH. R. 6161IN THE HOUSE OF REPRESENTATIVESNovember 19, 2025Mr. David Scott of Georgia (for himself, Mr. Loudermilk, Mr. Foster, Mrs. Wagner, Mr. Sherman, Mr. Meuser, Mr. Gottheimer, Mr. Davidson, Mr. Cleaver, Mrs. Kim, Mr. Himes, Mr. Fitzgerald, Mr. Vicente Gonzalez of Texas, Ms. Salazar, Ms. Bynum, Ms. De La Cruz, and Mr. Carson) introduced the following bill; which was referred to the Committee on Financial ServicesA BILLTo amend the Investment Advisers Act of 1940 to require the Securities and Exchange Commission to adopt data protection policies for information the Commission receives from investment advisers, and for other purposes.

1.

Short title

This Act may be cited as the SEC Data Protection Act.

2.

Procedure for data protection

Section 204 of the Investment Advisers Act of 1940 (15 U.S.C. 80b–4) is amended by adding at the end the following:(g)

Data protection policies

Not later than 1 year after the date of enactment of this subsection, the Commission shall adopt, after notice and comment, policies and procedures reasonably designed to protect sensitive, nonpublic proprietary information, as determined by the Commission, that the Commission obtains or receives from an investment adviser subject to this section, from unlawful use or disclosure. Such policies and procedures shall—(1)address circumstances when the Commission requests such proprietary information;(2)safeguard the information, taking into consideration the level of sensitivity of the information;(3)limit access to the information to appropriate staff, as determined by the Commission; and(4)protect the information from unlawful use or disclosure..