The purpose of this part is to implement the Safety and Soundness Act by requiring each regulated entity to report to FHFA upon discovery that it has purchased or sold a fraudulent loan or financial instrument, or suspects a possible fraud relating to the purchase or sale of any loan or financial instrument. In addition, each regulated entity must establish and maintain internal controls, policies, procedures, and operational training to discover such transactions.

The following definitions apply to the terms used in this part:

Entity-affiliated party means—

(1) Any director, officer, employee, or controlling stockholder of, or agent for, a regulated entity;

(2) Any shareholder, affiliate, consultant, or joint venture partner of a regulated entity, and any other person, as determined by the Director (by regulation or on a case-by-case basis) that participates in the conduct of the affairs of a regulated entity, provided that a member of a Federal Home Loan Bank shall not be deemed to have participated in the affairs of that Federal Home Loan Bank solely by virtue of being a shareholder of, and obtaining advances from, that Federal Home Loan Bank;

(3) Any independent contractor for a regulated entity (including any attorney, appraiser, or accountant);

(4) Any not-for-profit corporation that receives its principal funding, on an ongoing basis, from any regulated entity; and

(5) The Office of Finance.

Financial instrument means any legally enforceable agreement, certificate, or other writing, in hardcopy or electronic form, having monetary value including, but not limited to, any agreement, certificate, or other writing evidencing an asset pledged as collateral to a Bank by a member to secure an advance by the Bank to that member.

Fraud means a misstatement, misrepresentation, or omission that cannot be corrected and that was relied upon by a regulated entity to purchase or sell a loan or financial instrument.

Possible fraud means that a regulated entity has a reasonable belief, based upon a review of information available to the regulated entity, that fraud may be occurring or has occurred.

Purchased or sold or relating to the purchase or sale means any transaction involving a financial instrument including, but not limited to, any purchase, sale, other acquisition, or creation of a financial instrument by the member of a Bank to be pledged as collateral to the Bank to secure an advance by the Bank to that member, the pledging by a member to a Bank of such financial instrument to secure such an advance, the making of a grant by a Bank under its affordable housing program or community investment program, and the effecting of a wire transfer or other form of electronic payments transaction by the Bank.

(a) Timeframe for reporting. (1) A regulated entity shall submit to the Director a timely written report upon discovery by the regulated entity that it has purchased or sold a fraudulent loan or financial instrument, or suspects a possible fraud relating to the purchase or sale of any loan or financial instrument.

(2) In addition to submitting a report in accordance with paragraph (a)(1) of this section, in any situation that would have a significant impact on the regulated entity, the regulated entity shall immediately report any fraud or possible fraud to the Director by telephone or electronic communication.

(b) Format for reporting. (1) The report shall be in such format and shall be filed in accordance with such procedures that the Director may prescribe.

(2) The Director may require a regulated entity to provide such additional or continuing information relating to such fraud or possible fraud that the Director deems appropriate.

(3) A regulated entity may satisfy the reporting requirements of this section by submitting the required information on a form or in another format used by any other regulatory agency, provided it has first obtained the prior written approval of the Director.

(c) Retention of records. A regulated entity or entity-affiliated party shall maintain a copy of any report submitted to the Director and the original or business record equivalent of any supporting documentation for a period of five years from the date of submission.

(d) Nondisclosure. (1) A regulated entity or entity-affiliated party may not disclose to any person that it has submitted a report to the Director pursuant to this section, unless it has first obtained the prior written approval of the Director.

(2) The restriction in paragraph (d)(1) of this section does not prohibit a regulated entity from—

(i) Disclosing or reporting such fraud or possible fraud pursuant to legal requirements, including reporting to appropriate law enforcement or other governmental authorities; or

(ii) Taking any legal or business action it may deem appropriate, including any action involving the party or parties connected with the fraud or possible fraud.

(e) No waiver of privilege. A regulated entity does not waive any privilege it may possess under any applicable law as a consequence of reporting fraud or possible fraud under this part.

(a) In general. Each regulated entity shall establish and maintain adequate and efficient internal controls, policies, procedures, and an operational training program to discover and report fraud or possible fraud in connection with the purchase or sale of any loan or financial instrument.

(b) Examination. The examination by FHFA of fraud reporting programs of each regulated entity includes an evaluation of the effectiveness of the internal controls, policies, procedures, and operational training program in place to minimize risks from fraud and to report fraud or possible fraud to FHFA in accordance with this regulation.

As provided by section 1379E of the Safety and Soundness Act (12 U.S.C. 4642(b)), a regulated entity that, in good faith, submits a report pursuant to this part, and any entity-affiliated party, that, in good faith, submits or requires a person to submit a report pursuant to this part, shall not be liable to any person under any provision of law or regulation, any constitution, law, or regulation of any State or political subdivision of any State, or under any contract or other legally enforceable agreement (including any arbitration agreement) for such report, or for any failure to provide notice of such report to the person who is the subject of such report, or any other persons identified in the report.

Failure by a regulated entity to comply with this part may subject the regulated entity or the board members, officers, or employees thereof to supervisory action by FHFA, including but not limited to, cease-and-desist proceedings and civil money penalties.