Final Rule Regarding Security Incident Notification Requirements: Time to Review Your Existing Procedures and Contracts

The Comptroller of the Currency; the Federal Reserve Board; and the FDIC issued a final rule detailing notification requirements for a “computer-security incident” that rises to the level of a “notification incident.” The new rule went into effect on April 1, with a compliance date of May 1, 2022.