Privacy Act of 1974; System of Records
The CFTC established a new Privacy Act system of records for its Insider Risk Program, affecting businesses that interact with the CFTC. This is a federal action, not a state law change, but it signals increased focus on insider risk data handling.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 5, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Low urgency. Businesses that have employees or contractors subject to CFTC jurisdiction (e.g., financial firms, trading platforms) and privacy consultants advising them. should confirm how it applies to their specific situation before acting. There is a time constraint attached: No immediate deadline; the system is effective upon publication. However, ongoing compliance with Privacy Act obligations is required.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
The CFTC created a new system of records (CFTC-59) to collect and maintain insider risk program data, including employee information, under the Privacy Act of 1974.
Who it affects
Businesses that have employees or contractors subject to CFTC jurisdiction (e.g., financial firms, trading platforms) and privacy consultants advising them.
What you must do
Review your data collection and sharing practices related to insider risk programs if you are a CFTC-regulated entity. Ensure compliance with Privacy Act requirements for notice and consent.
Deadline
No immediate deadline; the system is effective upon publication. However, ongoing compliance with Privacy Act obligations is required.
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- Louisiana Enacts Comprehensive Consumer Privacy Law - Hunton Andrews Kurth LLP
- Social Media Privacy Laws Take Effect Tuesday: Teen Ad Ban and Portability Rights - Tech Times
- Vermont Data Privacy Bill Signed into Law - Inside Privacy
- Vermont becomes 23rd state to enact consumer privacy law - IAPP
- Vermont Becomes 23rd State with Comprehensive Consumer Privacy Law - Hunton Andrews Kurth LLP