Voglio sapere a riguardo di…

2299

Proposed Rules
Federal Register Vol. 86, No. 7
Tuesday, January 12, 2021

This section of the FEDERAL REGISTER
contains notices to the public of the proposed issuance of rules and regulations. The purpose of these notices is to give interested persons an opportunity to participate in the rule making prior to the adoption of the final rules.

DEPARTMENT OF THE TREASURY

12 CFR Part 53
Docket ID OCC20200038
RIN 1557AF02

FEDERAL RESERVE SYSTEM
12 CFR Part 225
Docket No. R1736
RIN 7100AG06

FEDERAL DEPOSIT INSURANCE
CORPORATION
12 CFR Part 304
RIN 3064AF59

Computer-Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers The Office of the Comptroller of the Currency OCC, Treasury; the Board of Governors of the Federal Reserve System Board; and the Federal Deposit Insurance Corporation FDIC.
ACTION: Notice of proposed rulemaking.
AGENCY:

The OCC, Board, and FDIC
together, the agencies invite comment on a notice of proposed rulemaking proposed rule or proposal that would require a banking organization to provide its primary federal regulator with prompt notification of any computer-security incident that rises to the level of a notification incident.
The proposed rule would require such notification upon the occurrence of a notification incident as soon as possible and no later than 36 hours after the banking organization believes in good faith that the incident occurred. This notification requirement is intended to serve as an early alert to a banking organizations primary federal regulator and is not intended to provide an assessment of the incident. Moreover, a
khammond on DSKJM1Z7X2PROD with PROPOSALS

VerDate Sep<11>2014

16:31 Jan 11, 2021

Jkt 253001

Comments must be received by April 12, 2021.
ADDRESSES: You may submit comments, identified by RIN 1557AF02 OCC, 7100AF Board, 3064AF59 FDIC, by any of the following methods:
OCC:
Commenters are encouraged to submit comments through the Federal eRulemaking Portal, if possible. Please use the title Computer-Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers to facilitate the organization and distribution of the comments. You may submit comments by any of the following methods:
Federal eRulemaking Portal Regulations.gov Classic or Regulations.gov Beta:
Regulations.gov Classic: Go to https www.regulations.gov/. Enter Docket ID OCC20200038 in the Search Box and click Search. Click on Comment Now to submit public comments. For help with submitting effective comments please click on View Commenters Checklist. Click on the Help tab on the Regulations.gov home page to get information on using Regulations.gov, including instructions for submitting public comments.
Regulations.gov Beta: Go to https
beta.regulations.gov/ or click Visit New Regulations.gov Site from the Regulations.gov Classic homepage.
Enter Docket ID OCC20200038 in the Search Box and click Search.
Public comments can be submitted via the Comment box below the displayed document information or by clicking on the document title and then clicking the Comment box on the topleft side of the screen. For help with submitting effective comments please click on Commenters Checklist. For assistance with the Regulations.gov Beta site, please call 877 3785457 toll free or 703 4549859 MondayFriday, 9 a.m.5 p.m. ET or email regulations@
erulemakinghelpdesk.com.
DATES:

Office of the Comptroller of the Currency
SUMMARY:

bank service provider would be required to notify at least two individuals at affected banking organization customers immediately after the bank service provider experiences a computersecurity incident that it believes in good faith could disrupt, degrade, or impair services provided for four or more hours.

PO 00000

Frm 00001

Fmt 4702

Sfmt 4702

Mail: Chief Counsels Office, Attention: Comment Processing, Office of the Comptroller of the Currency, 400
7th Street SW, Suite 3E218, Washington, DC 20219.
Hand Delivery/Courier: 400 7th Street SW, Suite 3E218, Washington, DC 20219.
Instructions: You must include OCC as the agency name and Docket ID OCC20200038 in your comment.
In general, the OCC will enter all comments received into the docket and publish the comments on the Regulations.gov website without change, including any business or personal information provided such as name and address information, email addresses, or phone numbers.
Comments received, including attachments and other supporting materials, are part of the public record and subject to public disclosure. Do not include any information in your comment or supporting materials that you consider confidential or inappropriate for public disclosure.
Public Inspection: You may review comments and other related materials that pertain to this rulemaking action by any of the following methods:
Viewing Comments Electronically Regulations.gov Classic or Regulations.gov Beta:
Regulations.gov Classic: Go to https www.regulations.gov/. Enter Docket ID OCC20200038 in the Search box and click Search. Click on Open Docket Folder on the right side of the screen. Comments and supporting materials can be viewed and filtered by clicking on View all documents and comments in this docket and then using the filtering tools on the left side of the screen. Click on the Help tab on the Regulations.gov home page to get information on using Regulations.gov.
The docket may be viewed after the close of the comment period in the same manner as during the comment period.
Regulations.gov Beta: Go to https
beta.regulations.gov/ or click Visit New Regulations.gov Site from the Regulations.gov Classic homepage.
Enter Docket ID OCC20200038 in the Search Box and click Search.
Click on the Comments tab.
Comments can be viewed and filtered by clicking on the Sort By drop-down on the right side of the screen or the Refine Results options on the left side of the screen. Supporting materials can
E:FRFM12JAP1.SGM

12JAP1