Data and information management

The Office of the Comptroller of the Currency is telling financial institutions that they must safeguard customer data even when federal agencies request information in criminal investigations, addressing Republican concerns about debanking that arose after the Jan. 6 Capitol attack.

A critical U.S. cybersecurity law sunsets Sept. 30, and banks say losing it would weaken defenses against hackers.

The Federal Housing Administration also is removing personally identifiable information from the electronic data set and improving cybersecurity more broadly.

The database contained internal user emails, KPI report templates and other internal data, but no personal or financial customer data.

The American Fintech Council wants Congress to amend the Gramm-Leach-Bliley Act to preempt state privacy laws with both entity-level and data-level exemptions, as well as eliminating restrictions on the secondary use of data.

The incident appears connected to recent social engineering campaigns, including attacks tied to Salesforce.

The need for an insurance policy that covers AI risks is growing with the adoption of AI technologies.

With federal oversight easing, Rhode Island joins states pushing cybersecurity laws for finance companies not covered by federal bank regulators.

A Texas federal court ruled that borrowers suing Mr. Cooper over its data breach in 2023 had "sufficiently alleged injury," thus refusing to dismiss parts of the case.

Companies that lack artificial intelligence governance may spend hundreds of thousands of dollars more in responding to cyberattacks, IBM found.