12 CFR § 225.300 - Authority, purpose, and scope.

---
identifier: "/us/cfr/t12/s225.300"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "12 CFR § 225.300 - Authority, purpose, and scope."
title_number: 12
title_name: "Banks and Banking"
section_number: "225.300"
section_name: "Authority, purpose, and scope."
chapter_name: "FEDERAL RESERVE SYSTEM"
subchapter_number: "A"
subchapter_name: "BOARD OF GOVERNORS OF THE FEDERAL RESERVE SYSTEM"
part_number: "225"
part_name: "BANK HOLDING COMPANIES AND CHANGE IN BANK CONTROL (REGULATION Y)"
positive_law: false
currency: "2026-04-05"
last_updated: "2026-04-05"
format_version: "1.1.0"
generator: "[email protected]"
authority: "12 U.S.C. 1817(j)(13), 1818, 1828(o), 1831i, 1831p-1, 1843(c)(8), 1844(b), 1972(1), 3106, 3108, 3310, 3331-3351, 3354, 3906, 3907, and 3909; 15 U.S.C. 1681s, 1681w, 6801 and 6805."
regulatory_source: "Reg. Y, 49 FR 818, Jan. 5, 1984, unless otherwise noted."
cfr_part: "225"
---


# 225.300 Authority, purpose, and scope.

(a) *Authority.* This subpart is issued under the authority of 12 U.S.C. 1, 321-338a, 1467a(g), 1818(b), 1844(b), 1861-1867, and 3101 *et seq.*

(b) *Purpose.* This subpart promotes the timely notification of computer-security incidents that may materially and adversely affect Board-supervised entities.

(c) *Scope.* This subpart applies to all U.S. bank holding companies and savings and loan holding companies; state member banks; the U.S. operations of foreign banking organizations; and Edge and agreement corporations. This subpart also applies to their bank service providers, as defined in § 225.301(b)(2).