(a) Authority. This subpart is issued under the authority of 12 U.S.C. 1,321,1467a,1818,1844,1861,and.
(b) Purpose. This subpart promotes the timely notification of computer-security incidents that may materially and adversely affect Board-supervised entities.
(c) Scope. This subpart applies to all U.S. bank holding companies and savings and loan holding companies; state member banks; the U.S. operations of foreign banking organizations; and Edge and agreement corporations. This subpart also applies to their bank service providers, as defined in § 225.301(b)(2).
authority: 12 U.S.C. 1817(j)(13), 1818, 1828(o), 1831i, 1831p-1, 1843(c)(8), 1844(b), 1972(1), 3106, 3108, 3310, 3331-3351, 3906, 3907, and 3909;
15 U.S.C. 1681s,
1681w,
6801
source: Reg. Y, 49 FR 818, Jan. 5, 1984, unless otherwise noted.
cite as: 12 CFR 225.300