The SEC noted in its Exemptive Order that the evolving data security landscape must be considered when weighing the benefits and risks associated with collecting investors’ PII in CAT. Indeed, in 2020 ...