Examinations: Joint Statement on Identifying and Handling Highly Sensitive Information During Examinations | OCC

https://occ.gov/news-issuances/bulletins/2026/bulletin-2026-32.html
Success
Specialism
Product
Obligation
Activity
Themes
Functions
2026-07-16 19:47:09 · pdonofrio@vixio.com
Meta Id
3332019
Content ID
3340501
GUID
1cad9868ebaa09cae1d5619d32a284c9

The Office of the Comptroller of the Currency (OCC), along with the Board of Governors of the Federal Reserve System and the Federal Deposit Insurance Corporation (collectively, the agencies), issued a joint statement today on the handling of highly sensitive information during examinations of supervised banks.

Pipeline Progress

🔄 Pipeline Journey

⏱ 18s total
✓
Queued 19:46:51
+0s
✓
Metadata 19:46:51
+0s
✓
S3 Content 19:46:51
+0s
✓
Extracted 19:46:51
+3s
✓
LLM Gen 19:46:54
+15s
✓
Stored 19:47:09
TITLE: Office of the Comptroller of the Currency Issues Joint Statement on Handling Highly Sensitive Information During Examinations BODY: On July 16, 2026, the Office of the Comptroller of the Currency (OCC), together with the Board of Governors of the Federal Reserve System and the Federal Deposit Insurance Corporation (FDIC), issued a joint statement addressing the handling of highly sensitive information during examinations of supervised banks. The statement establishes a coordinated federal banking agency approach to identifying and managing sensitive data and documents collected during the examination process. The agencies recognise the sensitivity of supervised banks' data handled during examinations and commit to protecting and handling such information in accordance with applicable confidentiality laws, regulations, and data security standards. The joint statement outlines a range of potential options designed to minimise the collection and storage of highly sensitive information by the agencies, thereby reducing exposure and operational risk. The statement applies to examinations of all national banks, federal savings associations, federal branches and agencies, and community banks. A key provision requires the agencies to notify affected banks of a potential or confirmed material data breach involving confidential supervisory information as soon as practicable and within no more than 72 hours, subject to applicable legal considerations. This notification requirement establishes a clear timeline for breach disclosure and demonstrates the agencies' commitment to transparency and timely communication with supervised institutions regarding data security incidents. For further information or questions regarding the joint statement, supervised institutions should contact the Compliance and Operational Risk Division, Office of the Chief National Bank Examiner, at (202) 649-6550. The full statement is available on the OCC website.
  • ✓ Scraped:2026-07-16 19:47:09
  • ✓ Created:2026-07-16 19:47:09
  • ✓ By:pdonofrio@vixio.com (38)