2026-07923NoticeWallet

FDIC Refines Privacy Act Records System for Clarity

Published Date: 4/23/2026

Notice

Summary

The FDIC is updating its records system that handles financial info to make rules clearer and easier to follow. This affects anyone whose data the FDIC manages, with changes kicking in April 23, 2026, and a chance to comment by May 26, 2026. No big costs here, just smoother, safer handling of your info!

Analyzed Economic Effects

5 provisions identified: 1 benefits, 1 costs, 3 mixed.

FDIC expands who can get your records

The FDIC broadened the list of outside parties that may receive records from its Financial Information Management Records (FDIC-012). The notice explicitly expands recipients to include the Department of the Treasury for tax and debt reporting, the Department of Justice and other agencies for surety-bond and collection matters, the General Services Administration and contracted third parties for travel administration, and allows comparisons with other agencies in coordination with an Office of Inspector General. These new and modified routine uses take effect May 26, 2026, unless changed after public comment.

FDIC adds audit and breach-sharing permissions

The notice creates or clarifies routine uses that allow FDIC to (a) share records as required by Federal statute or treaty, (b) coordinate with Offices of Inspector General to compare records to other agency or non-Federal records for audits/reviews, and (c) disclose records to agencies/entities to respond to or prevent harms from suspected or confirmed breaches. These authorities are included in the updated Routine Uses and will become effective May 26, 2026 unless changed after comment.

Your FDIC data may be stored in the cloud

The FDIC updated the system location to state that records may be stored at FDIC office locations or in an authorized cloud environment or other secure locations. This applies to the Financial Information Management Records (FDIC-012).

New specific record retention timeframes

The FDIC added and clarified retention times for different records in FDIC-012: financial transaction records related to procuring goods/services, payments, and collections are kept for six years after final payment; records outside the primary financial system are kept three years; audio recordings verifying payments are kept up to 180 days; 1099/Supplemental W-2 tax-reporting records are kept seven years; and receivership accounting/tax records are generally kept ten years after receivership termination.

Easier online access and FOIA contact info added

FDIC updated the Record Access, Contesting Records, and Notification Procedures to include the FDIC FOIA Service Center website (fdic.gov/foia) and contact email efoia@fdic.gov, and states that individuals must provide proof of identity under 12 CFR part 310 when requesting access or amendments. These updates clarify how you can request, contest, or be notified about records in FDIC-012.

Your PRIA Score

Score Hidden

Personalized for You

How does this regulation affect your finances?

Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.

Free to start

Key Dates

Published Date
Comments Due
4/23/2026
5/26/2026

Department and Agencies

Department
Independent Agency
Agency
Federal Deposit Insurance Corporation
Source: View HTML

Related Federal Register Documents

Previous / Next Documents

Back to Federal Register