Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice, 6790-6791 [2010-2984]

Agencies

• DEPARTMENT OF THE TREASURY
• Office of Thrift Supervision
• Thrift Supervision Office

[Federal Register Volume 75, Number 27 (Wednesday, February 10, 2010)]
[Notices]
[Pages 6790-6791]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 2010-2984]


=======================================================================
-----------------------------------------------------------------------

DEPARTMENT OF THE TREASURY

Office of Thrift Supervision


Interagency Guidance on Response Programs for Unauthorized Access 
to Customer Information and Customer Notice

AGENCY: Office of Thrift Supervision (OTS), Treasury.

ACTION: Notice and request for comment.

-----------------------------------------------------------------------

SUMMARY: The Department of the Treasury, as part of its continuing 
effort to reduce paperwork and respondent burden, invites the general 
public and other Federal agencies to comment on proposed and continuing 
information collections, as required by the Paperwork Reduction Act of 
1995, 44 U.S.C. 3507. The Office of Thrift Supervision within the 
Department of the Treasury will submit the proposed information 
collection requirement described below to the Office of Management and 
Budget (OMB) for review, as required by the Paperwork Reduction Act. 
Today, OTS is soliciting public comments on its proposal to extend this 
information collection.

DATES: Submit written comments on or before April 12, 2010.

[[Page 6791]]


ADDRESSES: Send comments, referring to the collection by title of the 
proposal or by OMB approval number, to Information Collection Comments, 
Chief Counsel's Office, Office of Thrift Supervision, 1700 G Street, 
NW., Washington, DC 20552; send a facsimile transmission to (202) 906-
6518; or send an e-mail to infocollection.comments@ots.treas.gov. OTS 
will post comments and the related index on the OTS Internet Site at 
https://www.ots.treas.gov. In addition, interested persons may inspect 
comments at the Public Reading Room, 1700 G Street, NW., and by 
appointment. To make an appointment, call (202) 906-5922, send an e-
mail to public.info@ots.treas.gov">public.info@ots.treas.gov, or send a facsimile transmission to 
(202) 906-7755.

FOR FURTHER INFORMATION CONTACT: You can request additional information 
about this proposed information collection from William H. Henley, Jr. 
(202) 906-6540, Office of Thrift Supervision, 1700 G Street, NW., 
Washington, DC 20552.

SUPPLEMENTARY INFORMATION: OTS may not conduct or sponsor an 
information collection, and respondents are not required to respond to 
an information collection, unless the information collection displays a 
currently valid OMB control number. As part of the approval process, we 
invite comments on the following information collection.
    Comments should address one or more of the following points:
    a. Whether the proposed collection of information is necessary for 
the proper performance of the functions of OTS;
    b. The accuracy of OTS's estimate of the burden of the proposed 
information collection;
    c. Ways to enhance the quality, utility, and clarity of the 
information to be collected;
    d. Ways to minimize the burden of the information collection on 
respondents, including through the use of information technology.
    We will summarize the comments that we receive and include them in 
the OTS request for OMB approval. All comments will become a matter of 
public record. In this notice, OTS is soliciting comments concerning 
the following information collection.
    Title of Proposal: Interagency Guidance on Response Programs for 
Unauthorized Access to Customer Information and Customer Notice.
    OMB Number: 1550-0110.
    Form Numbers: N/A.
    Regulation requirement: 12 CFR Part 570.
    Description: The collection helps to establish standards for 
financial institutions relating to administrative, technical, and 
physical safeguards to: (1) Ensure the security and confidentiality of 
customer records and information; (2) protect against any anticipated 
threats or hazards to the security or integrity of such records; and 
(3) protect against unauthorized access to or use of such records or 
information that could result in substantial harm or inconvenience to 
any customer. A response program, of which this collection is a 
critical part, contains policies and procedures that enable the 
financial institution to: (a) Assess the situation to determine the 
nature and scope of the incident, and identify the information systems 
and types of customer information affected; (b) notify the 
institution's primary Federal regulator and, in accordance with 
applicable regulations and guidance, file a Suspicious Activity Report 
and notify appropriate law enforcement agencies; (c) take measures to 
contain and control the incident to prevent further unauthorized access 
to or misuse of customer information, including shutting down 
particular applications or third party connections, reconfiguring 
firewalls, changing computer access codes, and modifying physical 
access controls; and (d) address and mitigate harm to individual 
customers.
    Type of Review: Extension of a currently approved collection.
    Affected Public: Businesses or other for-profit.
    Estimated Number of Respondents: 657.
    Estimated Burden Hours per Response: 16 hours for developing 
notices and 20 hours for notifying the customers.
    Estimated Frequency of Response: On occasion.
    Estimated Total Burden: 16,912 hours.

    Dated: February 5, 2010.
Ira L. Mills,
Paperwork Clearance Officer, Office of Thrift Supervision.
[FR Doc. 2010-2984 Filed 2-9-10; 8:45 am]
BILLING CODE 6720-01-P