View Rule

View EO 12866 Meetings Printer-Friendly Version     Download RIN Data in XML
TREAS/OCC RIN: 1557-AF02 Publication ID: Spring 2022 
Title: Computer-Security Incident Notification Requirements for Banking Organizations and their Bank Service Providers 
Abstract:

The OCC, FRB, and FDIC issued a final rule that requires a banking organization to notify its primary federal regulator of significant computer-security incidents on a timely basis.  The rule also requires a bank service provider to promptly notify banking organization customers of certain significant computer-security incidents. 

 
Agency: Department of the Treasury(TREAS)  Priority: Substantive, Nonsignificant 
RIN Status: Previously published in the Unified Agenda Agenda Stage of Rulemaking: Completed Actions 
Major: No  Unfunded Mandates: No 
CFR Citation: 12 CFR 53   
Legal Authority: 12 U.S.C. 1    12 U.S.C. 93a    12 U.S.C. 161    12 U.S.C. 481    12 U.S.C. 1463    12 U.S.C. 1464    12 U.S.C. 1861 to 1867    12 U.S.C. 3102   
Legal Deadline:  None
Timetable:
Action Date FR Cite
NPRM  01/12/2021  86 FR 2299   
NPRM Comment Period End  04/12/2021 
Final Rule  11/23/2021  86 FR 66424   
Final Rule Effective  04/01/2022 
Regulatory Flexibility Analysis Required: No  Government Levels Affected: None 
Federalism: No 
Included in the Regulatory Plan: No 
RIN Information URL: https://www.regulations.gov/docket?D=OCC-2020-0038   Public Comment URL: https://www.regulations.gov/docket?D=OCC-2020-0038  
RIN Data Printed in the FR: No 
Agency Contact:
Priscilla Benner
Counsel
Department of the Treasury
Comptroller of the Currency
Chief Counsel's Office, 400 7th Street SW.,
Washington, DC 20219
Phone:202 649-6973
Email: priscilla.benner@occ.treas.gov