On 26 July 2023, the US Securities and Exchange Commission (SEC) approved the final rules for Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure. The SEC first proposed amendments to its rules on disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies on 9 March 2022.

On 3 May 2023, the Securities and Exchange Commission adopted new rules to modernize and enhance the disclosure requirements for repurchases of equity securities by publicly listed companies, often referred to as stock buybacks. Among other changes, the amendments will require issuers to disclose in their periodic reports their daily share repurchase activity for each quarter (replacing the proposed rule that issuers would have to make daily filings of share repurchase activity) and provide certain additional narrative disclosure about their share repurchase programs in periodic reports. The SEC also adopted new Item 408(d), which will require disclosure in issuers’ periodic reports regarding the adoption and/or termination of 10b5-1 trading arrangements during the reporting period.