This bill amends the Securities Exchange Act and the Commodity Exchange Act to codify two existing innovation offices: the SEC’s Strategic Hub for Innovation and Financial Technology (FinHub) and the CFTC’s LabCFTC. It prescribes FinHub’s composition and duties, makes LabCFTC a statutory office with a Director who reports directly to the Commission, and sets out annual reporting, recordkeeping, and confidentiality rules.
Why it matters: the text moves two informal labs from practice into statute, creating predictable deadlines (180 days for implementation), formal reporting lines and fixed deliverables (annual reports due Oct. 31 after 2025), and explicit data-retention and confidentiality obligations. That statutory permanence will change expectations for fintech firms, agency operations, and congressional oversight, and will create new operational and compliance costs for the agencies and some market participants.
At a Glance
What It Does
The bill amends 15 U.S.C. §78d and 7 U.S.C. §22 to create a statutory SEC FinHub committee and to establish LabCFTC within the CFTC with a Director, enumerated duties, annual reporting obligations, and recordkeeping requirements. It sets 180-day deadlines for agency implementation and requires annual reports by Oct. 31 each year after 2025.
Who It Affects
The SEC and CFTC as agencies (their divisions and staff), fintech startups and vendors who seek regulatory engagement, regulated market participants (securities and derivatives firms), and the House and Senate agriculture committees that will receive LabCFTC’s reports.
Why It Matters
Codification converts voluntary engagement channels into formal regulatory features: that raises expectations for timely agency responses, creates statutory obligations for records and confidentiality, and gives Congress a steady source of information on fintech activity — all of which change how innovators and lawyers plan regulatory outreach and compliance.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The bill takes two informal innovation-focused units—the SEC’s FinHub and CFTC’s LabCFTC—and writes them into statute. For the SEC, it inserts a new subsection into section 4 of the Securities Exchange Act directing the Commission to establish a FinHub committee within 180 days.
The statute leaves membership and exact structure to the Commission but specifically contemplates drawing staff from the Division of Trading and Markets, Division of Corporate Finance, and Division of Investment Management. FinHub’s statutorily assigned tasks are narrow: serve as an internal resource on emerging financial technologies, engage externally with market participants, and act as a communications bridge about the Commission’s rules and practices.
The bill requires FinHub to produce an annual summary of its engagement activities to be included in the SEC’s annual report to Congress, and that summary may not contain confidential information.
For the CFTC, the bill amends section 18 of the Commodity Exchange Act to create LabCFTC as an institutional office with a Director appointed by the Commission who reports directly to the Commission. LabCFTC’s statutory purposes include promoting responsible fintech innovation, serving as an informational platform for the Commission, and conducting outreach.
The text lists specific duties such as advising on rulemakings, providing internal education, recommending regulatory changes, and encouraging innovators to seek Commission feedback.The bill prescribes operational and transparency mechanisms. LabCFTC must submit an annual report to the House and Senate agriculture committees by Oct. 31 each year after 2025, and the statute specifies required report elements: the total number of people met, summaries of issues discussed, steps taken to improve Commission services, recommendations to the Commission, and any other items the Director deems appropriate.
The CFTC must also maintain systems of records to track public engagements, store communications per Commission data-retention and confidentiality policies, and "take reasonable steps" to protect confidential or proprietary information. The legislation contains conforming amendments and an explicit 180-day implementation requirement for the CFTC to comply with the new statutory obligations.
The Five Things You Need to Know
FinHub: The SEC must establish the Strategic Hub for Innovation and Financial Technology within 180 days and may staff it from divisions including Trading and Markets, Corporate Finance, and Investment Management.
FinHub reporting: FinHub must provide an annual summary of engagement activities by Oct. 31 each year after 2025 to be included in the SEC’s annual report to Congress, and those summaries must exclude confidential information.
LabCFTC Director: LabCFTC is established as a CFTC office led by a Director appointed by the Commission who reports directly to the Commission and serves at its pleasure.
LabCFTC reporting specifics: LabCFTC must submit an annual Oct. 31 report to the House and Senate agriculture committees that enumerates number of meetings, summaries of issues discussed, steps taken to improve services, recommendations to the Commission, and any other Director-determined information.
Records and confidentiality: The CFTC must maintain systems of records to track LabCFTC engagements, store communications under Commission retention/confidentiality policies, and "take reasonable steps" to protect any confidential or proprietary information received.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Short title
Designates the statute as the "Securing Innovation in Financial Regulation Act." This is purely titular but signals Congressional intent to focus on fintech and regulatory modernization.
Creates statutory FinHub committee at the SEC
Adds subsection (k) to section 4 of the Securities Exchange Act requiring the SEC to establish a Strategic Hub for Innovation and Financial Technology (FinHub) within 180 days. The provision gives the Commission discretion to determine FinHub’s composition but explicitly contemplates pulling staff from core divisions. It defines FinHub’s core activities—internal resource, external engagement, and communications—and requires an annual, non-confidential summary for inclusion in the SEC’s annual congressional report. Practically, the section formalizes an internal coordination function and locks in an annual disclosure cadence while preserving the Commission’s control over operations.
Codifies LabCFTC and its purposes
Adds a new subsection to section 18 of the Commodity Exchange Act establishing LabCFTC and enumerating its statutory purposes: promote responsible innovation, inform the Commission about fintech developments, and conduct outreach. Making LabCFTC statutory converts an advisory/outreach function into a permanent office with a legislated mission, which changes expectations about access, continuity, and institutional memory.
LabCFTC Director, duties, and required reports
Specifies that LabCFTC will have a Director appointed by the Commission who reports directly to the Commission. The Director’s duties include advising on rulemakings and agency action, internal training, engagement with academia and industry, and outreach about registration and regulatory frameworks. It also prescribes an annual Oct. 31 report to the House and Senate agriculture committees with required line items (number of meetings, issue summaries, service-improvement steps, recommendations, and other Director-selected content). The statute restricts inclusion of confidential information in certain reports by cross-referencing confidentiality rules.
Recordkeeping and protection of proprietary information
Requires the CFTC to maintain records tracking LabCFTC engagements, to store related communications under Commission retention and confidentiality policies, and to take reasonable steps to protect confidential and proprietary information. That language creates an explicit statutory duty to preserve engagement records and a delegated, but vague, duty to protect sensitive information—both operationally consequential for CFTC IT, legal, and records-management teams.
Conforming amendments and implementation deadline
Makes two technical edits to section 2(a)(6)(A) of the Commodity Exchange Act to accommodate the new director reporting requirement, and requires the CFTC to implement the statutory changes (including complying with the records provision) within 180 days of enactment. The 180-day clock creates an immediate operational timeline for staffing, reporting, and records-system changes.
This bill is one of many.
Codify tracks hundreds of bills on Finance across all five countries.
Explore Finance in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Early-stage fintech companies that seek regulatory clarity — they gain a statutory, centralized channel for engagement and feedback, improving predictability around outreach and the potential for informal guidance.
- SEC and CFTC staff in technology and policy roles — codification creates formal platforms for cross-division coordination, institutional memory, and a clear mandate to develop internal training and expertise on emerging technologies.
- Academia and incubators — the bill explicitly encourages engagement with students and researchers, giving educational institutions a direct pathway to inform agency thinking and receive feedback.
- Market participants and regulated firms — clearer agency touchpoints and regular reporting can translate into better-informed compliance planning around new products and services.
- Congressional oversight committees — the House and Senate agriculture committees (for CFTC) and Congress generally (via the SEC annual report) receive regular, structured information on fintech engagement, aiding oversight and legislative drafting.
Who Bears the Cost
- The SEC and CFTC — agencies must allocate staff time, build or adapt records systems, and implement data-protection measures to comply with the new statutory duties, creating direct operational and budgetary demands.
- CFTC IT, records, and legal teams — the mandate to track engagements and store communications under retention/confidentiality policies requires system changes, governance rules, and ongoing maintenance.
- Fintech firms and innovators — while they gain access, they may face increased expectations to produce materials during engagements and bear risks if proprietary information is submitted without clear protection.
- Compliance and legal teams at regulated firms — more formalized interactions and advisory activity could increase the volume of regulatory communications to review and manage, driving higher legal costs.
- Congressional staff — reviewing the new, regular reports and following up on recommendations will consume committee resources and demand sustained oversight attention.
Key Issues
The Core Tension
The bill pits two legitimate goals against each other: it seeks to accelerate innovation by institutionalizing close regulator–innovator engagement, but that same closeness risks undermining even-handed enforcement and raises confidentiality and data-protection challenges; the statute asks agencies to be both collaborative guides and impartial enforcers without prescribing the guardrails that reconcile those roles.
The bill creates explicit duties but leaves important operational details undefined. For FinHub, the Commission retains discretion over composition and internal procedures, which means agencies will translate statutory language into practice through rulemaking, memos, or internal directives.
For LabCFTC, phrases such as "take reasonable steps to protect" confidential information impose a duty without specifying technical or procedural standards—leaving data-security obligations to agency policy rather than statute. That gap creates implementation variability and potential litigation risk if confidential materials are mishandled.
The reporting and recordkeeping requirements increase transparency but create competing pressures. Annual reports are confined to non-confidential material in some cases, which could incentivize agencies to sanitize or aggregate information and thereby limit the reports’ usefulness for granular oversight.
At the same time, mandating records of engagements produces a trove of sensitive materials that the agencies must secure; building that infrastructure is costly and raises privacy and trade-secret protection questions not spelled out in the bill. Finally, codification can change market perceptions: innovators may mistakenly treat engagement with a lab as a safe harbor or informal regulatory approval, but the statute does not create exemptions from substantive laws or enforcement actions.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.