ESG continues to be a hot topic for 2024 for investors and regulators alike. The specific concerns investors and regulators have – and what they expect to develop over the coming months – differ, however, across jurisdictions, including because of the different maturity of existing regulation between the EU/UK and the US.
President Biden has signaled a shift to a more assertive SEC Enforcement program with the nomination, and expected confirmation, of Gary Gensler as the next Chair of the SEC. Mr. Gensler previously served as the Chairman of the CFTC from 2009 to 2014, where he established a reputation as a forceful regulator. This reputation suggests that we should expect a significant increase in enforcement actions against private fund managers.
Under former Chairman Clayton, private fund advisers benefited indirectly from the SEC’s focus on ”Main Street” investors. More of the SEC’s limited resources were devoted to addressing retail fraud, leaving fewer resources available to focus on private funds. As former Enforcement Director Stephanie Avakian explained recently, the SEC relied more heavily on exams by OCIE (recently renamed the “Division of Examinations”) – through deficiency notices and remediation, rather than enforcement actions – to address perceived private fund compliance violations. Whether the SEC returns to the more assertive “broken windows” approach to regulation under prior administrations remains to be seen.
A cyber breach can have serious legal, financial, and reputational consequences for a fund sponsor, as described in our previous post. As such, cybersecurity threats must be treated as business risks, not just a potential IT problem. Senior management at fund sponsors should take the lead to ensure that the sponsor is taking appropriate actions to protect itself against cyber risks. There are several steps that senior management can guide the fund sponsor to take to prevent breaches from occurring and to mitigate the impact when they do occur.