2026-07-16

Added · Updated

Joint Statement on Identifying and Handling Highly Sensitive Information During Examinations

The federal banking agencies require supervised banks to identify data and documents requested during examinations that they consider highly sensitive, such as technology schematics or penetration test results. The agencies will then evaluate these submissions and may employ alternative handling methods, including on-site review, direct digital access, or redacted summaries, to minimize collection and storage risks. Additionally, the agencies commit to notifying affected banks of any confirmed material compromise of confidential supervisory information within 72 hours of determination.

Office of the Comptroller of the Currency logo

United States

Office of the Comptroller of the Currency

Click to view full text