US bank regulators promise 72-hour notice to banks if supervisory data is breached
A joint statement from the federal banking agencies sets out tighter handling of highly sensitive information during examinations, including on-site review instead of transfers and notification of suspected breaches within 72 hours.
The federal banking agencies issued a joint statement on July 16, 2026 on how highly sensitive information is handled during bank examinations, according to a press release from the Federal Reserve Board.
The statement sets out enhanced security procedures, including reviewing highly sensitive information on site at the bank rather than transferring it into agency systems, and establishes a common approach among the agencies for identifying which data and documents count as sensitive. Examiners’ access to the information they need during an examination would be preserved at all times, the agencies said, with the aim of reducing cybersecurity risk.
The agencies also committed to notifying a bank when a material data breach involving confidential supervisory information is suspected or confirmed. Notification is to be made as promptly as possible and no later than 72 hours after discovery, except where legal constraints prevent it, according to the statement.