Examinations: Joint Statement on Identifying and Handling Highly Sensitive Information During Examinations
Why this matters
This is a policy statement issued jointly by OCC, Federal Reserve, and FDIC addressing examination procedures and data security practices for supervised banks. It establishes binding expectations around identification, minimization, and handling of highly sensitive information, plus a specific 72-hour breach notification commitment. The content is substantive guidance affecting examination processes and operational security practices, but is informational in nature (not a final rule or enforcement action), warranting a significance score of 3. Urgency is null as this is a policy announcement without an immediate compliance deadline.
AI-generated classification rationale, not a full analysis. Verify with the original OCC source before acting. Full disclaimer.
What the OCC said
The Office of the Comptroller of the Currency (OCC), along with the Board of Governors of the Federal Reserve System and the Federal Deposit Insurance Corporation (collectively, the agencies), issued a joint statement today on the handling of highly sensitive information during examinations of supervised banks.
Published by OCC . Read the full notice at the source for the authoritative text.
Context
Office of the Comptroller of the Currency (OCC) — Charters and supervises US national banks and federal savings associations. We track 49 updates from them.
US financial regulation is overseen by multiple agencies including the SEC, CFTC, Federal Reserve, OCC and FDIC. Browse all United States updates.
This update is classified under Operational Resilience / Outsourcing, Technology & Cyber and Banking & Credit.