View Information Collection Request (ICR) Package

OMB Control No: 1505-0286	ICR Reference No: 202607-1505-002
Status: Active	Previous ICR Reference No:
Agency/Subagency: TREAS/DO	Agency Tracking No:
Title: Information-Sharing Initiative: Digital Assets Criteria Form
Type of Information Collection: New collection (Request for a new OMB Control Number)	Common Form ICR: No
Type of Review Request: Emergency	Approval Requested By: 07/31/2026
OIRA Conclusion Action: Approved with change	Conclusion Date: 08/05/2026
	Date Received in OIRA: 07/28/2026
Terms of Clearance: In response to the emergency request memorandum submitted by the Department of the Treasury, OIRA is approving Treasury's request for emergency consideration of the Information-Sharing Initiative: Digital Assets Criteria Form for a limited period. Prior to the expiration of this package, Treasury must undertake standard notice and comment procedures and describe in its next ICR submission all comments received and the extent to which commenters' recommendations were adopted.

	Inventory as of this Action	Requested	Previously Approved
Expiration Date	12/31/2026	6 Months From Approved
Responses	100	0	0
Time Burden (Hours)	300	0	0
Cost Burden (Dollars)	0	0	0

Abstract: The Department of the Treasury’s Office of Cybersecurity and Critical Infrastructure Protection (OCCIP) on April 9, 2026 announced a Cybersecurity Information Sharing Initiative to provide timely, actionable cybersecurity information to eligible U.S. digital asset firms and industry organizations. The initiative is intended to help such entities identify, prevent, and respond to cyber threats targeting their customers and networks and supports Executive Order 14178, Strengthening American Leadership in Digital Financial Technology. E.O. 14178 recognizes that the digital asset industry plays a crucial role in U.S. innovation, economic development, and international leadership, and establishes a policy of supporting responsible growth and use of digital assets, blockchain technology, and related technologies. Treasury has stated that digital asset firms are an increasingly important part of the U.S. financial sector, that their resilience is critical to the broader financial system, and that cyber threats targeting digital asset platforms are growing in frequency and sophistication. The collection is necessary for Treasury to fulfill its responsibilities as the Sector Risk Management Agency for the Financial Services Sector under 6 U.S.C. § 665d. To fulfill these responsibilities, Treasury must verify that a requesting entity is eligible to receive Treasury’s non-public cyber threat information before granting access. The Intake Form for Digital Asset Firms collects the minimum information required to confirm the applicant’s identity, U.S. legal status, organizational category, digital asset function, regulatory status, cybersecurity maturity, ability to protect non-public information, and cybersecurity purpose for requesting access. Without this information, Treasury would lack a consistent, documented basis to determine whether an entity meets Treasury’s criteria, whether the entity has a legitimate cybersecurity need-to-know, or whether the entity can comply with Treasury’s Traffic Light Protocol (TLP) markings and dissemination restrictions. The collection is also necessary to support Treasury’s broader cybersecurity and critical infrastructure protection responsibilities. OCCIP coordinates Treasury’s efforts to enhance the security and resilience of financial services sector critical infrastructure, reduce operational risk, share information about cybersecurity threats and vulnerabilities, encourage baseline protections and best practices, and support response and recovery from significant incidents.

Emergency Justfication: he Department of the Treasury requests emergency processing under 5 CFR 1320.13 for a new Information Collection Request supporting the draft Intake Form for Digital Asset Firms in connection with 6 U.S.C. § 665d, Executive Order (EO) 14178, Strengthening American Leadership in Digital Financial Technology, and the launch of Treasury’s Cybersecurity Information Sharing Initiative which was announced on April 9, 2026. Treasury requests approval by July 17, 2026, to enable the collection of the minimum information necessary to confirm an applicant’s identity, entity’s U.S. legal status, organizational category, digital asset function, regulatory status, cybersecurity maturity, ability to protect non-public information, and cybersecurity purpose for receiving Treasury’s non-public cyber threat information. Treasury has determined that this collection is needed before the expiration of the normal clearance periods under 5 CFR part 1320 and is essential to Treasury’s mission. Treasury cannot reasonably comply with normal clearance procedures because public harm may result if normal clearance procedures are followed, and because use of normal procedures would prevent or disrupt Treasury’s ability to validate eligible recipients and share timely non-public cyber threat information during an active and rapidly evolving threat environment. Digital asset firms are an increasingly important part of the U.S. financial sector, and their operational resilience is directly tied to consumer protection, market confidence, illicit-finance disruption, and the stability of emerging digital financial infrastructure. Treasury’s Office of Cybersecurity and Critical Infrastructure Protection has launched an information-sharing initiative to provide eligible U.S. digital asset firms and industry organizations with timely, actionable cybersecurity information to help identify, prevent, and respond to threats targeting their customers and networks. Treasury leadership has emphasized that access to this information is essential to protecting consumers and safeguarding the stability of U.S. financial markets. At this time, Treasury does not anticipate that additional data collection beyond the draft Intake Form for Digital Asset Firms will be required for emergency approval purposes. Treasury has developed the intake form to validate an applicant’s identity, regulatory compliance posture, counterintelligence posture, cybersecurity posture, and need to receive non-public cyber threat information. The intake form collects information necessary to ensure that eligible U.S. digital asset firms and industry organizations are in good standing and meet the minimum requirements to receive non-public cyber threat information from the U.S. Government.[A2.1][A2.2] Delaying implementation until the completion of normal Paperwork Reduction Act clearance procedures would undermine the U.S. Government’s ability to address a pressing national security concern, the urgency of which is heightened by the scale, sophistication, and public harm associated with cyber threats targeting the digital asset ecosystem. The costs of delay are significant. The FBI’s 2025 Internet Crime Report identified $20.877 billion in total reported losses from IC3 complaints and $11.366 billion in losses associated with complaints involving cryptocurrency, reflecting a 22 percent increase in cryptocurrency-related losses from 2024. On an annualized basis, the cryptocurrency-related loss figure equals approximately $947 million per month. Assuming a four-month delay under normal clearance procedures, the public would remain exposed to approximately $3.79 billion in cryptocurrency-related reported-loss activity during the delay period, and approximately $6.96 billion in total cyber-enabled reported-loss activity across all IC3 complaint categories.

Authorizing Statute(s): EO: EO 14178 Name/Subject of EO: Strengthening American Leadership in Digital Financial Technology

Citations for New Statutory Requirements: None

Associated Rulemaking Information
RIN:	Stage of Rulemaking:	Federal Register Citation:	Date:
	Not associated with rulemaking

Federal Register Notices & Comments
Did the Agency receive public comments on this ICR? No

Number of Information Collection (IC) in this ICR: 1

IC Title	Form No.	Form Name
Intake Form for Digital Assets Firms	N/A

ICR Summary of Burden

	Total Approved	Change Due to Agency Discretion
Annual Number of Responses	100	100
Annual Time Burden (Hours)	300	300
Annual Cost Burden (Dollars)	0	0

Burden increases because of Program Change due to Agency Discretion: Yes

Burden Increase Due to: Changing Regulations

Burden decreases because of Program Change due to Agency Discretion: No

Burden Reduction Due to:

Short Statement: This is a new collection of information.

Annual Cost to Federal Government: $93,846

Does this IC contain surveys, censuses, or employ statistical methods? No

Does this ICR request any personally identifiable information (see OMB Circular No. A-130 for an explanation of this term)? Please consult with your agency's privacy program when making this determination. Yes

Does this ICR include a form that requires a Privacy Act Statement (see 5 U.S.C. §552a(e)(3))? Please consult with your agency's privacy program when making this determination. No

Is this ICR related to the Affordable Care Act [Pub. L. 111-148 & 111-152]? No

Is this ICR related to the Dodd-Frank Wall Street Reform and Consumer Protection Act, [Pub. L. 111-203]? No

Is this ICR related to the American Recovery and Reinvestment Act of 2009 (ARRA)? No

Is this ICR related to the Pandemic Response? No

Agency Contact: In Cho 202 297-4292 in.cho@treasury.gov

View ICR - OIRA Conclusion