SEC & Open for Comment Alert! SEC Proposes Improvements to better secure EDGAR access. Current requirements see one login per company shared for access.
TLDRS:
- SEC Proposes Improvements to better secure EDGAR access. Current requirements see one login per company shared for access.
- Today's actions would require individual credentials and multi-factor authentication in order to update financial disclosures.
- Open for comment
Source: https://www.sec.gov/files/rules/proposed/2023/33-11232.pdf
Background Gary Gensler Statement:
Today, the Commission voted to propose amendments regarding login, password, and other account access protocols for filers and other registrants using the Electronic Data Gathering, Analysis, and Retrieval System, commonly known as EDGAR. I am pleased to support these proposed amendments because, if adopted, they would enhance EDGAR’s security and further improve filers’ access to the EDGAR system.
The public and the SEC long have benefitted from the EDGAR electronic disclosure system. Today, EDGAR is a rich and accessible library for investors and filers alike. Unlike streaming platforms and other subscription platforms, EDGAR is available to the public free of charge. I think it’s one of the great innovations of the SEC.
A lot has changed in the three decades since the Commission first required mandatory EDGAR filings in 1993. EDGAR has lived through the rise of the internet, social media, and streaming content. We also have had to learn a great deal about data security and password protection in that time. To keep pace with ever-evolving markets, technology, and business models, we’ve updated EDGAR over the years. Our most recent meaningful update, though, to EDGAR login, password, and other account access protocols was more than a decade ago.
Today’s proposed amendments are an important next step for EDGAR account access protocols. Under current requirements, registrants have one login per company. This is like having a family passing around one shared login and password for a movie streaming app. You know where that can lead. That’s simply not the most secure system—for filers and the Commission alike—when it comes to information relating to financial disclosure. By contrast, today’s actions would further secure login protocols by requiring every person filing something into EDGAR to login with individual credentials and to use multi-factor authentication.
Concurrent to this proposal, the SEC’s EDGAR Business Office soon will roll out a Beta version of a new EDGAR user interface, which will include a set of optional Application Program Interfaces (APIs). These APIs will help enhance how filers, including registrants and their agents, can access EDGAR, retrieve information, and submit bulk filings. These changes would promote efficiency for filers and the Commission alike.
In formulating today’s updates, we benefitted greatly from public input in response to our September 2021 request for information regarding EDGAR.[1] I encourage interested members of the public to share feedback with the Commission.
Taken together, these proposed amendments would benefit the Commission, filers, and investors alike.
How to comment:
- Use the Commission’s internet comment form (https://www.sec.gov/rules/submitcomments.htm); or
- Send an email to r[email protected]. Please include File Number S7-15-23 on the subject line.
- Only use 1 method
