On July 16, 2026, the OCC issued Bulletin 2026-32 with the Federal Reserve and FDIC on handling highly sensitive information during examinations. The statement outlines tighter security procedures for review of certain bank materials and says agencies will notify affected banks of a potential or confirmed material breach involving confidential supervisory information as soon as practicable, generally within 72 hours of discovery unless legal restrictions apply.
What changed
The agencies formalized enhanced exam-handling procedures for highly sensitive information, including use of on-site review instead of transferring some materials onto agency systems. The statement also set an expected notification timeframe for material breaches involving confidential supervisory information.
Compliance perspective
Banks should review examination response procedures, data-room controls, and protocols for sharing highly sensitive materials with regulators. Institutions should also align internal incident escalation so exam-related information breaches can be assessed and communicated quickly.
Key date
Effective date: July 16, 2026.
Need help keeping up with these changes?
Tell us where you operate and what licenses you hold; we'll handle the filings and renewals so changes like this do not catch you off guard.