§314.4. Elements. — Inbound Citations

(a) You shall develop, implement, and maintain a comprehensive information security program that is written in one or more readily accessible parts and contains administrative, technical, and physical safeguards that are appropriate to your size and complexity, the nature and scope of your activities, and the sensitivity of any customer information at issue. The information security program shall include the elements set forth in § 314.4 and shall be reasonably designed to achieve the objectives of this part, as set forth in paragraph (b) of this section.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(b)(1), (d)(2), (h), and (i) do not apply to financial institutions that maintain customer information concerning fewer than five thousand consumers.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(b)(1), (d)(2), (h), and (i) do not apply to financial institutions that maintain customer information concerning fewer than five thousand consumers.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(b)(1), (d)(2), (h), and (i) do not apply to financial institutions that maintain customer information concerning fewer than five thousand consumers.

Section 314.4(b)(1), (d)(2), (h), and (i) do not apply to financial institutions that maintain customer information concerning fewer than five thousand consumers.

Section 314.4(j) is effective as of May 13, 2024.

Section 314.4(b)(1), (d)(2), (h), and (i) do not apply to financial institutions that maintain customer information concerning fewer than five thousand consumers.

Section 314.4(j) is effective as of May 13, 2024.