Privacy Data Security

If you're building or reviewing privacy programs for SEC-registered firms, this walks you through Reg S-P privacy notices, the Safeguards Rule's written information security requirements, and Reg S-ID identity theft prevention. It covers the practical stuff like vendor risk assessments, breach notification triggers across state lines, and whether you qualify for the FAST Act annual notice exception. The source material gets into serious detail on what administrative, technical, and physical safeguards actually mean and how the Red Flags Rule applies to covered accounts. Honestly most useful when you're prepping for a cybersecurity exam or responding to an actual incident and need to know exactly what the regulations require, not just best practices.

skills.sh installs: 731
GitHub stars: 224
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add joellewis/finance_skills --skill privacy-data-security --agent claude-code

Installs into .claude/skills of the current project.

Files

Privacy and Data Security

Regulatory status current as of June 2026 — verify effective dates, dollar thresholds, and pending rulemakings against current SEC/FINRA/FinCEN sources before advising.

Core Concepts

Regulation S-P (Privacy of Consumer Financial Information)

Regulation S-P (17 CFR Part 248, Subparts A and B) implements Title V of the Gramm-Leach-Bliley Act (GLBA) for entities registered with the SEC. It applies to SEC-registered investment advisers, broker-dealers, investment companies, and transfer agents. The regulation has three core components:

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthly Promote your product hereReach 125k+ visitors monthly