Reporting, Recordkeeping, and Disclosure Provisions Associated with the Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice

The ID-Theft Guidance is an information collection associated with the Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice (security guidelines), which was published in the Federal Register in March 2005. Trends in customer information theft and the accompanying misuse of that information led to the issuance of these security guidelines applicable to financial institutions. The security guidelines are designed to facilitate timely and relevant notification of an incident of unauthorized access to sensitive customer information to affected customers and the appropriate regulatory authority (ARA) of the financial institutions. The security guidelines provide specific direction regarding the development of response programs and customer notifications.

The latest form for Reporting, Recordkeeping, and Disclosure Provisions Associated with the Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice expires 2021-02-28 and can be found here.

Recordkeeping Develop response program

Federal Enterprise Architecture: Economic Development - Financial Sector Oversight