Company: BOH
Filing Date: 2025-03-04
Form Type: 10-K
Source: 0000950170-25-031193
Chunk: 12

Company: BANK OF HAWAII CORP
Filing Date: 2025-03-04
Form: 10-K
Item: Item 1
Chunk 12
---
2021, the United States federal bank regulatory agencies adopted a rule regarding notification requirements for banking organizations related to significant computer security incidents. Under this rule, a bank holding company, such as Parent, and a national bank, such as the Bank, are required to notify the Federal Reserve of OCC, respectively, within 36 hours of incidents that have materially disrupted or degraded, or are reasonably likely to materially disrupt or degrade, the banking organization's ability to deliver services to a material portion of its customer base, jeopardize the viability of key operations of the banking organization, or pose a threat to the financial stability of the United States. 

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaiʻi Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank(s). A BHC is also expected to commit resources to support its subsidiary bank(s) in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank(s) during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank(s).

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”), banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks