On November 18, 2021, the Office of the Comptroller of the Currency (OCC), the Federal Deposit Insurance Corporation (FDIC), and the Board of Governors of the Federal Reserve System (FRB) (each, an “Agency” and, collectively, the “Agencies”) finalized a uniform regulation, codified at 12 C.F.R. Part 53, 12 C.F.R. Part 225.300 and 12 C.F.R. Part 304, with the stated purpose of improving the sharing of information about cybersecurity incidents harmful to the U.S. banking system (the “Regulation”). Pursuant to the Regulation, banks will be required to notify their primary federal regulatory Agency within thirty-six (36) hours of “any significant computer-security incident.”Continue Reading Federal Bank Regulators Expand Duty to Notify after a Cybersecurity Event
Effective January 1, 2021, the National Defense Authorization Act for Fiscal Year 2021 (the “Act”) became law. Among other provisions, the Act contains the most significant changes to the Bank Secrecy Act (the “BSA”) since 2001. Most significantly, the Act requires the Department of the Treasury, through the Financial Crimes Enforcement Network (“FinCEN”), to adopt regulations within one year that will establish a framework by which smaller, closely held businesses, regardless of the type of enterprise (e.g., corporation, limited liability company or partnership) will be required to disclose their beneficial ownership to FinCEN.
