Company: WLTH
Filing Date: 2025-12-12
Form Type: 424B4
Source: 0001628280-25-056780
Chunk: 242

Company: WEALTHFRONT CORP
Filing Date: 2025-12-12
Form: 424B4
Chunk 242
---
 non-public personal information, requires notice to individuals of privacy practices, and provides individuals with some rights to prevent the use and disclosure of nonpublic or otherwise legally protected information. The GLBA also imposes requirements for the safeguarding and proper destruction of personal information through the issuance of data security standards or guidelines. Further, with respect to federal securities regulations, Wealthfront Brokerage LLC, Wealthfront Advisers LLC, and Wealthfront Strategies LLC are subject to SEC Regulation S-P, which implements the GLBA and requires covered financial institutions to, among other things, adopt written policies and procedures that address administrative, technical, and physical safeguards for the protection of customer information. In May 2024, the SEC approved amendments to Regulation S-P, which apply to broker-dealers, registered investment advisers, and funds, and add new requirements for incident response, service provider oversight and recordkeeping, among other changes. Additionally, we are subject to the laws and regulations promulgated under the authority of the Federal Trade Commission, which regulates unfair or deceptive acts or practices, including with respect to privacy, data protection, and data security.

At the state level, numerous states have enacted, or are in the process of enacting, state-level financial privacy laws, as well as comprehensive consumer data privacy laws and regulations, governing the collection, use, and processing of state residents’ personal information. Many of these laws broadly exempt entities covered by the GLBA; other laws such as the California Consumer Privacy Act (as amended, the “CCPA”), exempt only personal information that is subject to the GLBA. The CCPA applies to the personal information of California residents collected in the employment, job applicant, and business-to-business settings. The CCPA requires covered businesses to, among other things, provide certain disclosures to individuals in California, and affords such individuals data privacy rights such as opting out of the sale or sharing of personal information, accessing personal information, deleting personal information, correcting personal information, limiting the use and disclosure of sensitive personal information, and receiving detailed information about how personal information is collected, used, sold, and shared. In the future, additional states could also adopt data privacy legislation, which may include more stringent data privacy requirements. In addition to these state level comprehensive consumer data privacy laws, all 50 states have enacted breach notification laws, which include obligations to provide notification of security breaches that impact certain personal information to affected individuals, state regulators, and others.

This existing and new legislation, as well as their amendments, interpretations, and applications, may add additional complexity