Though the SEC's primary purpose is to regulate transactions involving securities, the Gramm–Leach–Bliley Act gave it authority to oversee the data security practices of investment intermediaries (brokers, dealers, investment companies, and investment advisers). It used this authority to...