HIPAA privacy and security
Financial and capital markets firms are sitting at an under-mapped intersection: HIPAA applies wherever they handle protected health information, including through employee benefit plans, fintech health-linked products, and certain data-sharing arrangements with covered entities. The U.S. Department of Health and Human Services Office for Civil Rights and the U.S. Federal Trade Commission have both taken enforcement positions that reach financial sector actors holding health data, and the 2024 HIPAA Security Rule proposed update from HHS would impose materially stricter technical safeguard requirements than the 2003 baseline most firms quietly inherited. Compliance teams are reviewing business associate agreements and third-party data vendor contracts now, not after a breach.
Watch
- HHS proposed HIPAA Security Rule update: new technical safeguard minimums pending finalization
- FTC health breach notification enforcement: penalties extending to non-HIPAA-covered data holders
- Business associate agreement gaps in fintech and embedded finance product structures
- State-level health data privacy laws (Washington My Health MY Data Act) layering onto federal baseline
Recent material activity in Financial & Capital Markets
-
Australia ASIC Securities & Investments release pending Cresthaven Analytics full analysis: 26-166MR Federal Court finds former Noumi CEO breached directors’ duties and financial reporting obligations
Australia ASIC Securities & Investments published a regulatory release titled '26-166MR Federal Court finds former Noumi CEO breached directors’ duties and financial reporting obligations'. Cresthaven Analytics' full int…
Read a full sample brief → -
SEC seeks public comment on extending Rule 13f-2 short position reporting collection under institutional investment manager regime
The SEC published a proposed collection extension notice on July 27, 2026 for the information collection requirements under Rule 13f-2, which governs short position and short activity reporting by institutional investmen…
Read a full sample brief → -
RBI extends supervisory directions over Sonpeth Nagari Sahakari Bank Maryadit by three months to October 30, 2026
The Reserve Bank of India has extended its binding supervisory directions over Sonpeth Nagari Sahakari Bank Maryadit, Sonpeth, Maharashtra. The extension runs from July 30, 2026 to October 30, 2026, subject to review, wi…
Read a full sample brief → -
RBI extends supervisory directions over Irinjalakuda Town Co-operative Bank by three months to October 30, 2026
The Reserve Bank of India extended its supervisory directions over The Irinjalakuda Town Co-operative Bank Ltd., Kerala on July 24, 2026. The extension runs three months, from close of business on July 30, 2026 to close …
Read a full sample brief → -
SEBI issues final quasi-judicial order against front-running of Axis Mutual Fund trades
SEBI's Enforcement Division issued a final order on July 24, 2026 concluding proceedings against parties who front-ran trades of Axis Mutual Fund. The order resolves a named enforcement action and establishes a concluded…
Read a full sample brief → -
SEBI issues ex parte interim order against Stark Investments and associates for unregistered investment advisory and portfolio management operations
SEBI issued an ex parte interim order on July 24, 2026 against Stark Investments and associated persons for conducting unregistered investment advisory and portfolio management services. The order reflects SEBI's sustain…
Read a full sample brief → -
SEBI issues quasi-judicial enforcement order against Nalwa Sons Investments Limited
SEBI's Enforcement Division issued a quasi-judicial order on July 24, 2026 against Nalwa Sons Investments Limited. The specific findings, charges, and remedial directions are not disclosed in the available source text.
Read a full sample brief → -
SEBI issues quasi-judicial enforcement order against Hexa Tradex Limited
SEBI's Enforcement Division issued a quasi-judicial order against Hexa Tradex Limited on July 24, 2026. The order originates from SEBI's enforcement directorate, confirming a formal adjudicatory proceeding against the na…
Read a full sample brief → -
SEBI issues final order against Madhav Stock Vision and associates for front-running violations
On July 24, 2026, SEBI's Chairperson or a Member issued a final order against Madhav Stock Vision Pvt. Ltd. and associated parties for front-running conduct. The order concludes an enforcement proceeding and carries bind…
Read a full sample brief → -
SFC issues binding circular restructuring compliance baseline for listed structured funds in Hong Kong
On July 24, 2026, the Securities and Futures Commission issued a circular setting out conduct, disclosure, and structural requirements for listed structured funds operating in Hong Kong.
Read a full sample brief →