Rules of Practice and Procedure
The Federal Deposit Insurance Corporation (FDIC) is amending its procedural regulations implementing sections 8(g) and 8(b) of the Federal Deposit Insurance Act. The amendments are generally technical in nature, and are necessary to ensure that the rules are consistent with statutory changes effected by sections 708 and 702 of the Financial Services Regulatory Relief Act of 2006.
Identity Theft Red Flags and Address Discrepancies Under the Fair and Accurate Credit Transactions Act of 2003
The OCC, Board, FDIC, OTS, NCUA and FTC (the Agencies) are jointly issuing final rules and guidelines implementing section 114 of the Fair and Accurate Credit Transactions Act of 2003 (FACT Act) and final rules implementing section 315 of the FACT Act. The rules implementing section 114 require each financial institution or creditor to develop and implement a written Identity Theft Prevention Program (Program) to detect, prevent, and mitigate identity theft in connection with the opening of certain accounts or certain existing accounts. In addition, the Agencies are issuing guidelines to assist financial institutions and creditors in the formulation and maintenance of a Program that satisfies the requirements of the rules. The rules implementing section 114 also require credit and debit card issuers to assess the validity of notifications of changes of address under certain circumstances. Additionally, the Agencies are issuing joint rules under section 315 that provide guidance regarding reasonable policies and procedures that a user of consumer reports must employ when a consumer reporting agency sends the user a notice of address discrepancy.
Fair Credit Reporting Affiliate Marketing Regulations
The OCC, Board, FDIC, OTS, and NCUA (Agencies) are publishing final rules to implement the affiliate marketing provisions in section 214 of the Fair and Accurate Credit Transactions Act of 2003, which amends the Fair Credit Reporting Act. The final rules generally prohibit a person from using information received from an affiliate to make a solicitation for marketing purposes to a consumer, unless the consumer is given notice and a reasonable opportunity and a reasonable and simple method to opt out of the making of such solicitations.
Annual Independent Audits and Reporting Requirements
Section 36 of the Federal Deposit Insurance Act (FDI Act) and the FDIC's implementing regulations (part 363) set forth annual independent audit and reporting requirements for insured depository institutions with $500 million or more in total assets. Given changes in the industry, certain sound audit, reporting, and audit committee practices incorporated in the Sarbanes-Oxley Act of 2002 (SOX); and the FDIC's experience in administering part 363, the FDIC is proposing to amend part 363 of its regulations. These amendments are designed to further the objectives of section 36 by incorporating these sound practices into part 363 and to provide clearer and more complete guidance to institutions and independent public accountants concerning compliance with the requirements of section 36 and part 363. As required by section 36, the FDIC has consulted with the other federal banking agencies. The FDIC is also proposing a technical amendment to its rules and procedures (part 308, subpart U) for the removal, suspension, or debarment of accountants and accounting firms.