2026-03432Notice

FDIC Beefs Up Privacy: New Rules for Building and Data Access

Published Date: 2/20/2026

Notice

Summary

The FDIC is updating its system that manages who can access its buildings and computer systems to keep things safer and clearer. This change affects anyone who uses or visits FDIC facilities and updates how records are stored and shared. The new rules kick in on February 20, 2026, with a chance to comment until March 23, 2026—no extra costs involved, just better security and transparency!

Analyzed Economic Effects

4 provisions identified: 0 benefits, 1 costs, 3 mixed.

Who’s Covered and What Data

The FDIC’s updated system covers FDIC employees, contractors, Federal employees with PIV/HSPD-12 credentials from other agencies, and FDIC visitors or guests. It will collect detailed personal data such as name, Social Security number, date and place of birth, contact information, biometric identifiers (including fingerprints), digital photos, and vehicle information.

How Long FDIC Keeps Records

Records for FDIC employees, contractors, and others issued PIV/HSPD-12 credentials are kept for six (6) years after separation from the FDIC. Visitor access records are kept for five (5) years after the requested access date; PIV cards and visitor passes are destroyed or deactivated after expiration, confiscation, or return.

When FDIC Can Share Your Data

The updated routine uses allow FDIC to disclose records outside the agency for many purposes, including to law enforcement and courts, to respond to or prevent breaches, to other Federal, State, local, tribal, territorial, or foreign agencies for investigations, to verify whether a PIV credential is valid, and to the U.S. General Services Administration (GSA) for audit or oversight. These routine uses become effective March 23, 2026 unless changed by comment.

Where Records May Be Stored

FDIC records under this system may be stored electronically or on paper and may be kept in FDIC-operated or authorized vendor cloud environments. The notice says records are protected by administrative, technical, and physical safeguards including encryption, multi-factor authentication, and restricted access.

Your PRIA Score

Score Hidden

Personalized for You

How does this regulation affect your finances?

Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.

Free to start

Key Dates

Published Date
Comments Due
2/20/2026
3/23/2026

Department and Agencies

Department
Independent Agency
Agency
Federal Deposit Insurance Corporation
Source: View HTML
Back to Federal Register

Take It Personal

Get Your Personalized Policy View

Start a Free Government Policy Watch to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.

Already have an account? Sign in