National Credit Union Administration Issues New Proposed Rule Requiring 72-Hour Cyber Incident Reporting

On July 27, 2022, the National Credit Union Administration issued a proposed rule requiring federally insured credit unions to notify them as soon as possible—and no later than 72 hours—after discovering a substantial cyber incidents.