12 CFR § 53.3 - Notification.

---
identifier: "/us/cfr/t12/s53.3"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "12 CFR § 53.3 - Notification."
title_number: 12
title_name: "Banks and Banking"
section_number: "53.3"
section_name: "Notification."
chapter_name: "COMPTROLLER OF THE CURRENCY, DEPARTMENT OF THE TREASURY"
part_number: "53"
part_name: "COMPUTER-SECURITY INCIDENT NOTIFICATION"
positive_law: false
currency: "2026-04-05"
last_updated: "2026-04-05"
format_version: "1.1.0"
generator: "[email protected]"
authority: "12 U.S.C. 1, 93a, 161, 481, 1463, 1464, 1861-1867, and 3102."
regulatory_source: "86 FR 66442, Nov. 23, 2021, unless otherwise noted."
cfr_part: "53"
---


# 53.3 Notification.

A banking organization must notify the appropriate OCC supervisory office, or OCC-designated point of contact, about a notification incident through email, telephone, or other similar methods that the OCC may prescribe. The OCC must receive this notification from the banking organization as soon as possible and no later than 36 hours after the banking organization determines that a notification incident has occurred.