Company: FITBI
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000035527-25-000079
Chunk: 15

Company: FIFTH THIRD BANCORP
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1
Chunk 15
---
 its board of directors or an appropriate committee thereof, to create, implement and maintain a comprehensive written information security program designed to ensure the security and confidentiality of customer information, protect against any anticipated threats or hazards to the security or integrity of such information and protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer. In addition, various U.S. regulators, including the OCC, FRB and the SEC, have increased their focus on cybersecurity through guidance, examinations and regulations. The Bancorp has adopted an information security program that has been approved by the Bancorp’s Board of Directors. For more information related to cybersecurity, refer to Part I, Item 1C of this report.

The GLBA requires financial institutions to implement policies and procedures regarding the disclosure of nonpublic personal information about consumers. In general, the statute requires explanations to consumers on policies and procedures regarding the disclosure of such nonpublic personal information and, except as otherwise required by law, prohibits disclosing such information except as provided in the banking subsidiary’s policies and procedures. The Bancorp’s banking subsidiary has implemented a privacy policy.

States are also increasingly proposing or enacting legislation that relates to data privacy and data protection such as the California Consumer Privacy Act. The Bancorp continues to assess the requirements of such laws and proposed legislation and their applicability to the Bancorp. 

22 Fifth Third Bancorp 

Moreover, these laws, and proposed legislation, are still subject to revision or formal guidance and they may be interpreted or applied in a manner inconsistent with our understanding.

Like other lenders, the Bank and other of the Bancorp’s subsidiaries use credit bureau data in their underwriting activities. Use of such data is regulated under the Fair Credit Reporting Act (“FCRA”), and the FCRA also regulates reporting information to credit bureaus, prescreening individuals for credit offers, sharing of information between affiliates and using affiliate data for marketing purposes. Similar state laws may impose additional requirements on the Bancorp and its subsidiaries.

Anti-Money Laundering and Economic Sanctions

The Bancorp is subject to federal laws that are designed to counter money laundering and terrorist financing, and transactions with certain persons, companies or foreign governments sanctioned by the U.S. These include the Bank Secrecy Act, the Money Laundering Control Act, the USA PATRIOT Act and regulations for the International Emergency Economic Powers Act and the Trading with the Enemy Act, as administered by the U.S. Treasury Department’s Office of Foreign Assets Control. These laws obligate depository institutions and