This is a list of United States Code sections, Statutes at Large, Public Laws, and Presidential Documents, which provide rulemaking authority for this CFR Part.
This list is taken from the Parallel Table of Authorities and Rules provided by GPO [Government Printing Office] .
It is not guaranteed to be accurate or up-to-date, though we do refresh the database weekly. More limitations on accuracy are described at the GPO site.
United States Code U.S. Code: Title 7 - AGRICULTURE Statutes at Large
Title 17 published on 06-Sep-2017 03:43
The following are ALL rules, proposed rules, and notices (chronologically) published in the Federal Register relating to 17 CFR Part 49 after this date.
2016-09-19; vol. 81 # 181 - Monday, September 19, 2016 81 FR 64272 - System Safeguards Testing Requirements
GPO FDSys XML | Text Additional Documents COMMODITY FUTURES TRADING COMMISSION Final rule. Effective date: This rule is effective September 19, 2016. Compliance dates: (1) Designated contract markets, swap execution facilities, and swap data repositories must be in full compliance with the vulnerability testing requirements of this rule within 180 calendar days after the effective date. (2) Designated contract markets, swap execution facilities, and swap data repositories must be in full compliance with the penetration testing requirements of this rule within one year after the effective date. Such compliance must include having conducted and completed penetration testing that complies with this rule within one year after the effective date. In the case of covered designated contract markets and swap data repositories, such compliance must include penetration testing conducted and completed by an independent contractor as required by this rule. (3) Designated contract markets, swap execution facilities, and swap data repositories must be in full compliance with the controls testing requirements of this rule within one year after the effective date. Covered designated contract markets and swap data repositories must have testing of key controls by an independent contractor as required by this rule completed within three years after the effective date. (4) Designated contract markets, swap execution facilities, and swap data repositories must be in full compliance with the security incident response plan testing requirements of this rule within 180 calendar days after the effective date. Such compliance must include having created and completed testing of a security incident response plan within 180 days after the effective date. (5) Designated contract markets, swap execution facilities, and swap data repositories must be in full compliance with the enterprise technology risk assessment requirements of this rule within one year after the effective date. Such compliance must include having completed an enterprise technology risk assessment that complies with this rule within one year after the effective date. (6) Designated contract markets, swap execution facilities, and swap data repositories must be in full compliance with the requirements of this rule for updating their business continuity-disaster recovery plans and emergency procedures within one year after the effective date. Such compliance must include having completed an update of such plans and procedures within one year after the effective date. (7) Designated contract markets must be in full compliance with the requirements of this rule respecting required production of annual total trading volume within 30 calendar days of the effective date. (8) Designated contract markets, swap execution facilities, and swap data repositories must be in full compliance with the system safeguards-related books and records requirements of this rule, which are part of such entities' current books and records requirements under current Commission regulations and statutory core principles, as of the effective date. (9) Designated contract markets, swap execution facilities, and swap data repositories must be in full compliance with all other provisions of these final rules within one year after the effective date. 17 CFR Parts 37, 38, and 49 Summary The Commodity Futures Trading Commission (“Commission” or “CFTC”) is adopting final rules amending its current system safeguards rules for designated contract markets, swap execution facilities, and swap data repositories, by enhancing and clarifying current provisions relating to system safeguards risk analysis and oversight and cybersecurity testing, and adding new provisions concerning certain aspects of cybersecurity testing. The final rules clarify the Commission's current system safeguards rules for all designated contract markets, swap execution facilities, and swap data repositories by specifying and defining the types of cybersecurity testing essential to fulfilling system safeguards testing obligations. These testing types are vulnerability testing, penetration testing, controls testing, security incident response plan testing, and enterprise technology risk assessment. The final rules also clarify current rule provisions respecting: The categories of risk analysis and oversight that statutorily-required programs of system safeguards-related risk analysis and oversight must address; system safeguards-related books and records obligations; the scope of system safeguards testing; internal reporting and review of testing results; and remediation of vulnerabilities and deficiencies. In addition, the final rules adopt new provisions set forth in the Commission's Notice of Proposed Rulemaking, applicable to covered designated contract markets (as defined) and all swap data repositories, establishing minimum frequency requirements for conducting certain types of cybersecurity testing, and requiring performance of certain tests by independent contractors.
2015-12-23; vol. 80 # 246 - Wednesday, December 23, 2015 80 FR 80140 - System Safeguards Testing Requirements
GPO FDSys XML | Text Additional Documents COMMODITY FUTURES TRADING COMMISSION Proposed rulemaking; advanced notice of proposed rulemaking. Comments must be received on or before February 22, 2016. 17 CFR Parts 37, 38, and 49 Summary The Commodity Futures Trading Commission (“Commission” or “CFTC”) is amending its system safeguards rules for designated contract markets, swap execution facilities, and swap data repositories, by enhancing and clarifying existing provisions relating to system safeguards risk analysis and oversight and cybersecurity testing, and adding new provisions concerning certain aspects of cybersecurity testing. The Commission is clarifying the existing system safeguards rules for all designated contract markets, swap execution facilities, and swap data repositories by specifying and defining the types of cybersecurity testing essential to fulfilling system safeguards testing obligations, including vulnerability testing, penetration testing, controls testing, security incident response plan testing, and enterprise technology risk assessment. The Commission is also clarifying rule provisions respecting the categories of risk analysis and oversight that statutorily-required programs of system safeguards-related risk analysis and oversight must address; system safeguards-related books and records obligations; the scope of system safeguards testing; internal reporting and review of testing results; and remediation of vulnerabilities and deficiencies. The new provisions concerning certain aspects of cybersecurity testing, applicable to covered designated markets (as defined) and all swap data repositories, include minimum frequency requirements for conducting the essential types of cybersecurity testing, and requirements for performance of certain tests by independent contractors. In this release, the Commission is also issuing an Advance Notice of Proposed Rulemaking requesting public comment concerning whether the minimum testing frequency and independent contractor testing requirements should be applied, via a future Notice of Proposed Rulemaking, to covered swap execution facilities (to be defined).
2014-03-26; vol. 79 # 58 - Wednesday, March 26, 2014 79 FR 16672 - Swap Data Repositories—Access to SDR Data by Market Participants
GPO FDSys XML | Text Additional Documents COMMODITY FUTURES TRADING COMMISSION Interim final rule; request for comment. Effective date: This interim final rule is effective March 26, 2014. Comment date: Comments on this interim final rule must be submitted on or before April 25, 2014. 17 CFR Part 49 Summary The Commodity Futures Trading Commission (“Commission” or “CFTC”) is adopting an interim final rule to clarify the scope of permissible access by market participants to swap data and information maintained by a registered swap data repository (“SDR”). Specifically, the interim final rule clarifies that, for a swap that is executed anonymously on a swap execution facility or designated contract market, and then cleared in accordance with the Commission's straight-through processing requirements, the data and information maintained by a registered SDR that may be accessed by either counterparty to the swap does not include the identity of the other counterparty to the swap, the identity of the other counterparty's clearing member for the swap, or such counterparty's or clearing member's legal entity identifier.
2012-05-07; vol. 77 # 88 - Monday, May 7, 2012 77 FR 26709 - Swap Data Repositories: Interpretative Statement Regarding the Confidentiality and Indemnification Provisions of Section 21(d) of the Commodity Exchange Act
GPO FDSys XML | Text Additional Documents COMMODITY FUTURES TRADING COMMISSION Proposed interpretative statement. Comments must be received on or before June 6, 2012. 17 CFR Part 49 Summary The Commodity Futures Trading Commission (“Commission” or “CFTC”) is proposing this interpretative statement to provide guidance regarding the applicability of the confidentiality and indemnification provisions set forth in new section 21(d) of the Commodity Exchange Act (“CEA”) added by section 728 of the Dodd-Frank Wall Street Reform and Consumer Protection Act (“Dodd-Frank Act”). The Commission requests comment on all aspects of the proposed interpretative statement. The proposed interpretative statement clarifies that the provisions of section 21(d) should not operate to inhibit or prevent foreign regulatory authorities from accessing data in which they have an independent and sufficient regulatory interest, even if that data also has been reported pursuant to the CEA and Commission regulations.
