

These proposed amendments result from the agency’s experience in reviewing field-of-membership changes, community charter conversions, and adding underserved areas, along with its study of chartering and field-of-membership issues as part of the Advancing Communities through Credit, Education, Stability, and Support (ACCESS) initiative. The proposed amendments would also reduce duplicative or unnecessary paperwork and administrative requirements. “However, where we can within our existing rules and the law’s current requirements, the NCUA Board should take appropriate and tailored action to simplify, streamline, and strengthen federal chartering options.” “Ultimately, it’s Congress’s decision whether to amend the Federal Credit Union Act’s field-of-membership requirements to achieve greater parity with the rules in many states,” Chairman Harper said. The NCUA Board unanimously approved a proposed rule (opens new window) that would amend the chartering and field-of-membership rules through nine changes to enhance consumer access to safe, fair and affordable financial services, especially in under-resourced communities. Board Approves Proposed Rule on Chartering and Field of Membership The NCUA will provide additional reporting guidance prior to the final rule going into effect. The effective date of this final rule is September 1, 2023.
#Rule of rose final full#
The 72-hour notification requirement provides an early alert to the NCUA and does not require credit unions to provide a full incident assessment to the NCUA within the 72-hour timeframe. Additionally, cyberattacks that disrupt a credit union’s business operations, vital member services, or a member information system must be reported to the NCUA within 72 hours of a credit union’s reasonable belief that it has experienced a cyberattack. Under the final rule, federally insured credit unions are required to report a cyber incident that leads to a substantial loss of confidentiality, integrity, or availability of a network or member information system as a result of the exposure of sensitive data, disruption of vital member services, or that has a serious impact on the safety and resiliency of operational systems and processes. This final rule will also align the NCUA’s reporting requirements with those of the federal banking agencies and the Cyber Incident Reporting for Critical Infrastructure Act.” “Through these high-level early warning notifications, the NCUA will be able to work with other agencies and the private sector to respond to cyber threats before they become systemic and threaten the broader financial services sector. This final rule will facilitate such dialogue,” Chairman Todd M. And, credit unions must be included in conversations about critical infrastructure, as a whole. “Each of us in the financial system has an obligation to protect our nation’s economic and financial infrastructure. The NCUA Board unanimously approved a final rule (opens new window) that requires a federally insured credit union to notify the NCUA as soon as possible, within 72 hours, after it reasonably believes that a reportable cyber incident has occurred. Final Rule on Reportable Cyber Incidents Approved by Board In addition, the NCUA’s Chief Financial Officer briefed the NCUA Board on the performance of the National Credit Union Share Insurance Fund during the fourth quarter of 2022.


A final rule on cyber incident reporting requirements and.16, 2023) – The National Credit Union Administration Board held its second open meeting of 2023 and approved two items: Board Action Bulletin Proposed Rule on Chartering and Field of Membership ApprovedĪLEXANDRIA, Va.
