US Agencies Tighten Handling of Sensitive Exam Information
FDIC, Federal Reserve, and OCC issued a joint statement introducing enhanced security procedures for reviewing highly sensitive information during bank examinations, including on-site-only review.
The agencies are shifting toward on-site review of highly sensitive exam materials rather than transferring them onto agency systems. This reflects heightened concern over data leakage and third-party exposure of confidential supervisory information, requiring banks to adjust exam logistics, data classification, and secure workspace provisioning.
Alters how banks prepare for and support supervisory examinations, affecting data security, legal privilege, and operational readiness.
Action Required
Update examination protocols and information governance procedures to align with the joint agency approach for handling highly sensitive data on-site.
Coordinated tri-agency action changes baseline expectations for confidential supervisory information handling across all federally supervised banks.
Enhanced federal exam data-handling protocols increase operational and information security obligations. Review exam readiness procedures, secure on-site facilities, and data classification controls to ensure compliance with joint agency expectations.
“The federal bank regulatory agencies (FDIC, Federal Reserve, OCC) issued a joint statement describing enhanced security procedures for review of highly sensitive information in connection with examinations of supervised banks, such as reviewing materials on-site rather than transferring them onto agency systems.”