OCCGuidancelow

Industry-wide

U.S. banking regulators issued supervisory guidance addressing the handling of highly sensitive information during examinations. The guidance sets expectations that examiners review certain materials on-site and that institutions be notified within 72 hours of any material breach of confidential supervisory information. While not an enforcement action, the guidance shapes the supervisory environment for all banks, including BaaS and sponsor banks subject to heightened examination activity. The guidance reflects ongoing calibration of examination procedures relevant to banks managing third-party fintech relationships.

Verified from source: The page lists a link to a joint statement from regulators on 'handling highly sensitive information during examinations,' confirming that agencies issued coordinated guidance on this topic around the date indicated in the candidate record.

Implications
  1. BaaS and sponsor banks may face updated protocols during exams, particularly around sensitive fintech partnership data
  2. 72-hour breach notification requirement adds operational compliance burden for examined institutions
Sources
Related
Share