Federal Register / Vol. 87, No. 131 / Monday, July 11, 2022 / Notices 41185 

of electronic data outside of your 

company systems? 

b. Despite the potential benefits, are 

your security concerns so extensive that 

you would not be willing to participate 

in electronic hazard communication? 

Please explain. 

c. Is there any information contained 

on your paper-based hazard 

communication documents that you 

consider proprietary, or otherwise have 

privacy/business competition concerns 

with sharing? 

d. In what ways could necessary 

emergency response and hazard 

communication information be stored in 

an electronic system separate from the 

proprietary information described 

above? 

5. Implementation 

a. What is your ideal concept of 

operations for electronic hazard 

communication? 

b. Would it be beneficial to develop 

a single, industry-standard hazard 

communication information input 

system accessible to shippers, carriers, 

emergency responders, and inspectors 

across all modes? Please explain. 

Signed in Washington, DC, on July 6, 2022, 

under authority delegated in 49 CFR 1.97. 

William S. Schoonover, 

Associate Administrator for Hazardous 

Materials Safety, Pipeline and Hazardous 

Materials Safety Administration. 

[FR Doc. 2022–14655 Filed 7–8–22; 8:45 am] 

BILLING CODE 4910–60–P 

DEPARTMENT OF THE TREASURY 

Office of the Comptroller of the 

Currency 

Agency Information Collection 

Activities: Information Collection 

Renewal; Submission for OMB Review; 

Guidance Regarding Unauthorized 

Access to Customer Information 

AGENCY: Office of the Comptroller of the 

Currency (OCC), Treasury. 

ACTION: Notice and request for comment. 

SUMMARY: The OCC, as part of its 

continuing effort to reduce paperwork 

and respondent burden, invites the 

general public and other Federal 

agencies to take this opportunity to 

comment on a continuing information 

collection as required by the Paperwork 

Reduction Act of 1995 (PRA). In 

accordance with the requirements of the 

PRA, the OCC may not conduct or 

sponsor, and respondents are not 

required to respond to, an information 

collection unless it displays a currently 

valid Office of Management and Budget 

(OMB) control number. The OCC is 

soliciting comment concerning the 

renewal of its information collection 

titled, ‘‘Guidance Regarding 

Unauthorized Access to Customer 

Information.’’ The OCC also is giving 

notice that it has sent the collection to 

OMB for review. 

DATES: Comments must be submitted on 

or before August 10, 2022. 

ADDRESSES: Commenters are encouraged 

to submit comments by email, if 

possible. You may submit comments by 

any of the following methods: 

• Email: prainfo@occ.treas.gov. 

• Mail: Chief Counsel’s Office, 

Attention: Comment Processing, 1557– 

0227, Office of the Comptroller of the 

Currency, 400 7th Street SW, Suite 3E– 

218, Washington, DC 20219. 

• Hand Delivery/Courier: 400 7th 

Street SW, Suite 3E–218, Washington, 

DC 20219. 

• Fax: (571) 465–4326. 

Instructions: You must include 

‘‘OCC’’ as the agency name and ‘‘1557– 

0227’’ in your comment. In general, the 

OCC will publish comments on 

www.reginfo.gov without change, 

including any business or personal 

information provided, such as name and 

address information, email addresses, or 

phone numbers. Comments received, 

including attachments and other 

supporting materials, are part of the 

public record and subject to public 

disclosure. Do not include any 

information in your comment or 

supporting materials that you consider 

confidential or inappropriate for public 

disclosure. 

Written comments and 

recommendations for the proposed 

information collection should also be 

sent within 30 days of publication of 

this notice to www.reginfo.gov/public/ 

do/PRAMain. Find this particular 

information collection by selecting 

‘‘Currently under 30-day Review—Open 

for Public Comments’’ or by using the 

search function. 

On April 8, 2022, the OCC published 

a 60-day notice for this information 

collection, 87 FR 20932. You may 

review comments and other related 

materials that pertain to this 

information collection following the 

close of the 30-day comment period for 

this notice by the method set forth in 

the next bullet. 

• Viewing Comments Electronically: 

Go to www.reginfo.gov. Hover over the 

‘‘Information Collection Review’’ tab 

and click on ‘‘Information Collection 

Review’’ from the drop-down menu. 

From the ‘‘Currently under Review’’ 

drop-down menu, select ‘‘Department of 

Treasury’’ and then click ‘‘submit.’’ This 

information collection can be located by 

searching by OMB control number 

‘‘1557–0227’’ or ‘‘Guidance Regarding 

Unauthorized Access to Customer 

Information.’’ Upon finding the 

appropriate information collection, click 

on the related ‘‘ICR Reference Number.’’ 

On the next screen, select ‘‘View 

Supporting Statement and Other 

Documents’’ and then click on the link 

to any comment listed at the bottom of 

the screen. 

• For assistance in navigating 

www.reginfo.gov, please contact the 

Regulatory Information Service Center 

at (202) 482–7340. 

FOR FURTHER INFORMATION CONTACT: 

Shaquita Merritt, OCC Clearance 

Officer, (202) 649–5490, Chief Counsel’s 

Office, Office of the Comptroller of the 

Currency, 400 7th Street SW, Suite 3E– 

218, Washington, DC 20219. If you are 

deaf, hard of hearing, or have a speech 

disability, please dial 7–1–1 to access 

telecommunications relay services. 

SUPPLEMENTARY INFORMATION: Under the 

PRA (44 U.S.C. 3501–3520), Federal 

agencies must obtain approval from the 

OMB for each collection of information 

they conduct or sponsor. ‘‘Collection of 

information’’ is defined in 44 U.S.C. 

3502(3) and 5 CFR 1320.3(c) to include 

agency requests or requirements that 

members of the public submit reports, 

keep records, or provide information to 

a third party. The OCC asks that OMB 

extend its approval of the collection in 

this notice. 

Title: Guidance Regarding 

Unauthorized Access to Customer 

Information. 

OMB Control No.: 1557–0227. 

Abstract: Section 501(b) of the 

Gramm-Leach-Bliley Act (15 U.S.C. 

6801(b)) requires the OCC to establish 

appropriate standards for national 

banks, Federal savings associations, 

Federal branches and Federal agencies 

of foreign banks, and any subsidiaries of 

such entities (except brokers, dealers, 

persons providing insurance, 

investment companies, and investment 

advisers) relating to administrative, 

technical, and physical safeguards: (1) 

to insure the security and 

confidentiality of customer records and 

information; (2) to protect against any 

anticipated threats or hazards to the 

security or integrity of such records; and 

(3) to protect against unauthorized 

access to, or use of, such records or 

information that could result in 

substantial harm or inconvenience to 

any customer. 

The Interagency Guidelines 

Establishing Information Security 

Standards, 12 CFR part 30, appendix B 

(Security Guidelines), which implement 


khammond on DSKJM1Z7X2PROD with NOTICES
41186 Federal Register / Vol. 87, No. 131 / Monday, July 11, 2022 / Notices 

1 12 CFR part 30, appendix B, supplement A. 

1The AML Act was enacted as Division F, 6001– 

6511, of the William M. (Mac) Thornberry National 

Defense Authorization Act for Fiscal Year 2021, 

Public Law 116–283, 134 Stat 3388 (2021). 

section 501(b), require each entity 

supervised by the OCC to consider and 

adopt a response program, as 

appropriate, that specifies actions to be 

taken when the supervised institution 

suspects or detects that unauthorized 

individuals have gained access to 

customer information. 

The Interagency Guidance on 

Response Programs for Unauthorized 

Access to Customer Information and 

Customer Notice (Breach Notice 

Guidance),1 which interprets the 

Security Guidelines, states that, at a 

minimum, a supervised institution’s 

response program should contain 

procedures for: 

(1) Assessing the nature and scope of 

an incident, and identifying what 

customer information systems and types 

of customer information have been 

accessed or misused; 

(2) Notifying its primary Federal 

regulator as soon as possible when the 

supervised institution becomes aware of 

an incident involving unauthorized 

access to, or use of, sensitive customer 

information; 

(3) Notifying appropriate law 

enforcement authorities in situations 

involving Federal criminal violations 

requiring immediate attention, such as 

when a reportable violation is ongoing, 

consistent with the OCC’s Suspicious 

Activity Report regulations; 

(4) Taking appropriate steps to 

contain and control the incident in an 

effort to prevent further unauthorized 

access to, or use of, customer 

information, for example, by 

monitoring, freezing, or closing affected 

accounts, while preserving records and 

other evidence; and 

(5) Notifying customers when 

warranted. 

The Breach Notice Guidance states 

that, when a financial institution 

becomes aware of an incident of 

unauthorized access to sensitive 

customer information, the institution 

should conduct a reasonable 

investigation to promptly determine the 

likelihood that the information has been 

or will be misused. If the institution 

determines that the misuse of its 

information about a customer has 

occurred or is reasonably possible, it 

should notify the affected customer as 

soon as possible. 

Type of Review: Regular. 

Affected Public: Businesses or other 

for-profit. 

Estimated Number of Respondents: 

20. 

Total Estimated Annual Burden: 720 

hours. 

Frequency of Response: On occasion. 

On April 8, 2022, the OCC published 

a 60-day notice for this information 

collection, 87 FR 20932. No comments 

were received. Comments continue to be 

invited on: 

(a) Whether the collection of 

information is necessary for the proper 

performance of the functions of the 

OCC, including whether the information 

has practical utility; 

(b) The accuracy of the OCC’s 

estimate of the burden of the 

information collection; 

(c) Ways to enhance the quality, 

utility, and clarity of the information to 

be collected; 

(d) Ways to minimize the burden of 

the collection on respondents, including 

through the use of automated collection 

techniques or other forms of information 

technology; and 

(e) Estimates of capital or start-up 

costs and costs of operation, 

maintenance, and purchase of services 

to provide information. 

Theodore J. Dowd, 

Deputy Chief Counsel, Office of the 

Comptroller of the Currency. 

[FR Doc. 2022–14630 Filed 7–8–22; 8:45 am] 

BILLING CODE 4810–33–P 

DEPARTMENT OF THE TREASURY 

Financial Crimes Enforcement Network 

Agency Information Collection 

Activities; Proposed Renewal; 

Comment Request; Renewal Without 

Change on Information Sharing 

Between Government Agencies and 

Financial Institutions 

AGENCY: Financial Crimes Enforcement 

Network (FinCEN), Treasury. 

ACTION: Notice and request for 

comments. 

SUMMARY: As part of its continuing 

efforts to reduce paperwork and 

respondent burden, FinCEN invites 

comments on the proposed renewal, 

without change, of a currently approved 

information collection found in existing 

Bank Secrecy Act regulations 

concerning information sharing between 

government agencies and financial 

institutions. Specifically, the regulations 

require that, upon receiving an 

information request from FinCEN, a 

financial institution must search its 

records to determine whether it 

maintains or has maintained any 

account or engaged in any transaction 

with an individual, entity, or 

organization named in the request. If a 

financial institution identifies an 

account or transaction named in the 

request, it must report such information 

to FinCEN in the manner and timeframe 

specified in the request. This request for 

comment is being made pursuant to the 

Paperwork Reduction Act of 1995. 

DATES: Written comments are welcome 

and must be received on or before 

September 9, 2022. 

ADDRESSES: Comments may be 

submitted by any of the following 

methods: 

• Federal E-rulemaking Portal: http:// 

www.regulations.gov. Follow the 

instructions for submitting comments. 

Refer to Docket Number FINCEN–2022– 

0008 and the specific Office of 

Management and Budget (OMB) control 

number 1506–0049. 

• Mail: Policy Division, Financial 

Crimes Enforcement Network, P.O. Box 

39, Vienna, VA 22183. Refer to Docket 

Number FINCEN–2022–0008 and OMB 

control number 1506–0049. 

Please submit comments by one 

method only. Comments will be 

reviewed consistent with the Paperwork 

Reduction Act of 1995 (PRA) and 

applicable OMB regulations and 

guidance. Comments submitted in 

response to this notice will become a 

matter of public record. Therefore, you 

should submit only information that 

you wish to make publicly available. 

FOR FURTHER INFORMATION CONTACT: The 

FinCEN Regulatory Support Section at 

1–800–767–2825 or electronically at 

https://www.fincen.gov/contact. 

SUPPLEMENTARY INFORMATION: 

I. Statutory and Regulatory Provisions 

The legislative framework generally 

referred to as the Bank Secrecy Act 

(BSA) consists of the Currency and 

Financial Transactions Reporting Act of 

1970, as amended by the Uniting and 

Strengthening America by Providing 

Appropriate Tools Required to Intercept 

and Obstruct Terrorism Act of 2001 

(USA PATRIOT Act), Public Law 107– 

56 (October 26, 2001), and other 

legislation, including most recently the 

Anti-Money Laundering Act of 2020 

(AML Act).1 The BSA is codified at 12 

U.S.C. 1829b, 12 U.S.C. 1951–1960, 31 

U.S.C. 5311–5314 and 5316–5336, and 

includes notes thereto, with 

implementing regulations at 31 CFR 

chapter X. 

The BSA authorizes the Secretary of 

the Treasury, inter alia, to require 

financial institutions to keep records 

and file reports that are determined to 

have a high degree of usefulness in 

criminal, tax, and regulatory matters, or 

in the conduct of intelligence or 


khammond on DSKJM1Z7X2PROD with NOTICES