2010-2984. Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice

AGENCY:

Office of Thrift Supervision (OTS), Treasury.

ACTION:

Notice and request for comment.

SUMMARY:

The Department of the Treasury, as part of its continuing effort to reduce paperwork and respondent burden, invites the general public and other Federal agencies to comment on proposed and continuing information collections, as required by the Paperwork Reduction Act of 1995, 44 U.S.C. 3507. The Office of Thrift Supervision within the Department of the Treasury will submit the proposed information collection requirement described below to the Office of Management and Budget (OMB) for review, as required by the Paperwork Reduction Act. Today, OTS is soliciting public comments on its proposal to extend this information collection.

DATES:

Submit written comments on or before April 12, 2010.

ADDRESSES:

Send comments, referring to the collection by title of the proposal or by OMB approval number, to Information Collection Comments, Chief Counsel's Office, Office of Thrift Supervision, 1700 G Street, NW., Washington, DC 20552; send a facsimile transmission to [phone]; or send an e-mail to [e-mail]. OTS will post comments and the related index on the OTS Internet Site at http://www.ots.treas.gov. In addition, interested persons may inspect comments at the Public Reading Room, 1700 G Street, NW., and by appointment. To make an appointment, call [phone], send an e-mail to [e-mail], or send a facsimile transmission to [phone].

FOR FURTHER INFORMATION CONTACT:

You can request additional information about this proposed information collection from William H. Henley, Jr. [phone], Office of Thrift Supervision, 1700 G Street, NW., Washington, DC 20552.

SUPPLEMENTARY INFORMATION:

OTS may not conduct or sponsor an information collection, and respondents are not required to respond to an information collection, unless the information collection displays a currently valid OMB control number. As part of the approval process, we invite comments on the following information collection.

Comments should address one or more of the following points:

a. Whether the proposed collection of information is necessary for the proper performance of the functions of OTS;

b. The accuracy of OTS's estimate of the burden of the proposed information collection;

c. Ways to enhance the quality, utility, and clarity of the information to be collected;

d. Ways to minimize the burden of the information collection on respondents, including through the use of information technology.

We will summarize the comments that we receive and include them in the OTS request for OMB approval. All comments will become a matter of public record. In this notice, OTS is soliciting comments concerning the following information collection.

Title of Proposal: Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice.

OMB Number: 1550-0110.

Form Numbers: N/A.

Regulation requirement: 12 CFR Part 570.

Description: The collection helps to establish standards for financial institutions relating to administrative, technical, and physical safeguards to: (1) Ensure the security and confidentiality of customer records and information; (2) protect against any anticipated threats or hazards to the security or integrity of such records; and (3) protect against unauthorized access to or use of such records or information that could result in substantial harm or inconvenience to any customer. A response program, of which this collection is a critical part, contains policies and procedures that enable the financial institution to: (a) Assess the situation to determine the nature and scope of the incident, and identify the information systems and types of customer information affected; (b) notify the institution's primary Federal regulator and, in accordance with applicable regulations and guidance, file a Suspicious Activity Report and notify appropriate law enforcement agencies; (c) take measures to contain and control the incident to prevent further unauthorized access to or misuse of customer information, including shutting down particular applications or third party connections, reconfiguring firewalls, changing computer access codes, and modifying physical access controls; and (d) address and mitigate harm to individual customers.

Type of Review: Extension of a currently approved collection.

Affected Public: Businesses or other for-profit.

Estimated Number of Respondents: 657.

Estimated Burden Hours per Response: 16 hours for developing notices and 20 hours for notifying the customers.

Estimated Frequency of Response: On occasion.

Estimated Total Burden: 16,912 hours.

Dated: February 5, 2010.

Ira L. Mills,

Paperwork Clearance Officer, Office of Thrift Supervision.