The Canadian Securities Administrators (CSA) has announced that, as part of its continuing oversight, it will review the Investment Industry Regulatory Organization of Canada’s (IIROC) policies, procedures and controls as a result of the recent accidental loss of a portable device containing personal information about clients of some IIROC member firms. "The CSA is reviewing the facts surrounding this incident, including a review of IIROC’s current policies, procedures and controls relating to information security, the encryption of data, and the collection and storage of personal information for regulatory purposes," the regulator said in a statement As Canada's top securities regulation council, the CSA is responsible for the oversight of IIROC, which is a self-regulatory organization that regulates investment dealers and trading activities on debt and equity marketplaces in Canada. IIROC must, subject to applicable legislation, collect, use and disclose personal information only
↧