Company: WLTH
Filing Date: 2025-08-22
Form Type: DRS/A
Source: 0001628279-25-000564
Chunk: 199

Company: WEALTHFRONT CORP
Filing Date: 2025-08-22
Form: DRS/A
Chunk 199
---
 use, protection, and other processing of personal information, and compliance with such laws, rules, regulations, policies, standards, and obligations is core to our strategy and integral to the creation of trust in our platform. Our handling of data and personal information is also subject to contractual obligations.

In the United States, various federal and state laws and regulations apply to the collection, processing, disclosure, and security of personal information. Additionally, financial industry regulators apply particular scrutiny toward privacy and cybersecurity. The primary federal financial privacy law, the Gramm-Leach-Bliley Act of 1999 and its implementing regulations (the “GLBA”), restricts the collection, processing, storage, use, and disclosure of non-public personal information, requires notice to individuals of privacy practices, and provides individuals with some rights to prevent the use and disclosure of nonpublic or otherwise legally protected information. The GLBA also imposes requirements for the safeguarding and proper destruction of personal information through the issuance of data security standards or guidelines. Further, with respect to federal securities regulations, Wealthfront Brokerage LLC, Wealthfront Advisers LLC, and Wealthfront Strategies LLC are subject to SEC Regulation S-P, which implements the GLBA and requires covered financial institutions to, among other things, adopt written policies and procedures that address administrative, technical, and physical safeguards for the protection of customer information. In May 2024, the SEC approved amendments to Regulation S-P, which apply to broker-dealers, registered investment advisers, and funds, and add new requirements for incident response, service provider oversight and recordkeeping, among other changes. Additionally, we are subject to the laws and regulations promulgated under the authority of the Federal Trade Commission, which regulates unfair or deceptive acts or practices, including with respect to privacy, data protection, and data security.

At the state level, numerous states have enacted, or are in the process of enacting, state-level financial privacy laws, as well as comprehensive consumer data privacy laws and regulations, governing the collection, use, and processing of state residents’ personal information. Many of these laws broadly exempt entities covered by the GLBA; other laws such as the California Consumer Privacy Act (as amended, the “CCPA”), exempt only personal information that is subject to the GLBA. The CCPA applies to the personal information of California residents collected in the employment, job applicant, and business-to-business settings. The CCPA requires covered businesses to, among other things, provide certain disclosures to individuals in California, and affords such individuals data privacy rights such