FTC Extends Customer Data Safeguard Reporting for Three More Years
Published Date: 8/25/2026
Notice
Summary
In accordance with the Paperwork Reduction Act of 1995 (PRA), the Federal Trade Commission (FTC or Commission) is seeking public comment on its proposal to extend for an additional three years the information collection requirements contained in the agency's rule governing Standards for Safeguarding Customer Information (the Safeguards Rule). The current clearance expires on December 31, 2026.
Analyzed Economic Effects
4 provisions identified: 2 benefits, 2 costs, 0 mixed.
Three‑Year Extension of Reporting Collection
The FTC is proposing to extend for an additional three years the information collection requirements under the Safeguards Rule. The current OMB clearance for this collection expires on December 31, 2026, and the FTC is accepting comments through October 26, 2026.
Estimated Annual Burden and Costs for Firms
The FTC estimates the reporting requirement will affect about 163 financial institutions per year, require about 5 hours per report, total 815 annual hours, and cost approximately $370 per report, yielding an estimated total annual labor cost of $60,310.
Breach Reporting Threshold: 500 Consumers
Under the Safeguards Rule (16 CFR 314.4(j)), financial institutions must report to the FTC when unencrypted customer information involving 500 or more consumers is acquired without authorization. This reporting threshold (500 consumers) triggers the electronic notification to the Commission.
Online Reporting Form; No Capital Costs Expected
The Commission provides an online electronic reporting form on its website to facilitate reports, and it expects that covered financial institutions will not incur significant capital or other non‑labor costs to comply.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Related Federal Register Documents
2026-16827, Agency Information Collection Activities; Proposed Collection; Comment Request; Extension
The Federal Trade Commission wants to keep its Franchise Rule paperwork rules for three more years, helping people get clear info before buying a franchise. This affects franchisors who must keep detailed records and share important facts with potential buyers. Comments on this plan are open until September 17, 2026, with no new costs expected.
2026-16617, Regulatory Agenda
The Federal Trade Commission (FTC or Commission) is publishing its regulatory agenda in accordance with section 22(d)(1) of the Federal Trade Commission Act, 15 U.S.C. 57b-3(d)(1) and the Regulatory Flexibility Act (RFA), 5 U.S.C. 601 to 612, as amended by the Small Business Regulatory Enforcement Fairness Act. The Commission's agenda follows guidelines and procedures issued September 15, 2025, by the Office of Management and Budget in accordance with the provisions of Executive Order 12866, "Regulatory Planning and Review," 58 FR 51735 (Oct. 4, 1993) and Executive Order 14192, "Unleashing Prosperity Through Deregulation," 90 FR 9065 (Feb. 6, 2025). The Government-wide Unified Agenda of Federal Regulatory and Deregulatory Actions includes a list of all regulatory actions under development or review and is scheduled for publication in its entirety on www.reginfo.gov and www.regulations.gov in a format that offers users a greatly enhanced ability to obtain information from the agenda database. The RFA requires publication in the Federal Register of agenda entries for rules that are likely to have a significant impact on a substantial number of small entities (5 U.S.C. 602) and any such rules that the agency has identified for periodic review under section 610 of the RFA. For the 2026 agenda, the Commission has no rule that meets the RFA's publication requirements. The Commission has identified rulemakings that are likely to have some impact on small entities, but do not meet the RFA's publication requirements. The current rulemakings that are likely to have some impact on small entities are: (1) the Energy Labeling Rule, 16 CFR 305; (2) the Alternative Fuel Rule, 16 CFR 309; (3) the removal of the vacated 2024 amendments to the Negative Option Rule, 16 CFR 425; (4) the Cooling-Off Rule, 16 CFR 429; (5) the Amplifier Rule, 16 CFR 432; (6) the Business Opportunity Rule, 16 CFR 437; (7) the Impersonation Rule, 16 CFR 461; (8) the withdrawal of the final rule for the vacated Combating Auto Retail Scams Rule (16 CFR 463); (9) the proposed Earnings Claims Trade Regulation Rule, to be codified at 16 CFR 462; (10) Unfair or Deceptive Fees Trade Regulation Rule, 16 CFR 464; and (11) the removal of the vacated Non-Compete Clause Rule from 16 CFR 910. The Commission's rulemaking review process carefully considers regulatory burdens and streamlines rules when feasible and appropriate. The majority of the rulemakings listed in the agenda are being conducted as part of the Commission's systematic review of all of its regulations and guides on a rotating basis. Under the Commission's program, rules are reviewed on a 10-year schedule. In each rule review, the Commission requests public comments on, among other things, the economic impact and benefits of the rule; possible conflict between the rule and state, local, or other federal laws or regulations; and the effect on the rule of any technological, economic, or other industry changes. These reviews incorporate and expand upon the review required by the RFA and regulatory reform initiatives directing agencies to conduct a review of all regulations and eliminate or revise those that are outdated or otherwise in need of reform. Except for notice of completed actions, the information in this agenda represents the judgment of Commission staff, based upon information now available. Each projected date of action reflects FTC staff's assessment that the specified event will occur this year. No final determination by the staff or the Commission respecting the need for or the substance of a rule should be inferred from the notation of projected events in this agenda. In most instances, the dates of future events are listed by month, not by a specific day. The information in this agenda may change as new information, changes of circumstances, or changes in the law occur.
2026-15955, Privacy Act of 1974; System of Records
The FTC proposes to modify its Privacy Act system of records notices (SORNs) by adding a routine use to four specific SORNs to comply with Executive Order 14249, Protecting America's Bank Account Against Fraud, Waste, and Abuse, and OMB Memorandum M-25-32, Preventing Improper Payments and Protecting Privacy Through Do Not Pay. The FTC is also separately making technical changes to three of these SORNs.
2026-15913, Caremark and Zinc Health Services; Analysis of Proposed Agreement Containing Consent Order To Aid Public Comment
The consent agreement in this matter settles alleged violations of Federal law prohibiting unfair methods of competition. The attached Analysis of Proposed Agreement Containing Consent Orders to Aid Public Comment describes both the allegations in the complaint and the terms of the consent order--embodied in the consent agreement-- that would settle these allegations.
2026-15182, Petition for Rulemaking of the National Consumers League, Campaign for Fairer Gambling, the National Council for Problem Gambling, the Public Health Advocacy Institute, and Truth in Advertising, Inc.
Please take notice that the Federal Trade Commission ("Commission") received a petition for rulemaking from the National Consumers League, Campaign for Fairer Gambling, the National Council for Problem Gambling, the Public Health Advocacy Institute, and Truth in Advertising, Inc., and has published that petition online at https://www.regulations.gov. The Commission invites written comments concerning the petition. Publication of this petition is pursuant to the Commission's Rules of Practice and Procedure and does not affect the legal status of the petition or its final disposition.
2026-14920, Agency Information Collection Activities; Proposed Collection; Comment Request; Extension
The Federal Trade Commission wants to keep its rules for how gas stations and fuel sellers measure and share fuel quality for three more years. This affects refiners, importers, distributors, and retailers who must keep records and share fuel ratings. Comments on this plan are open until September 21, 2026, and the paperwork costs about $455,000 a year in labor.
Previous / Next Documents
Previous: 2026-17330, 30-Day Notice of Intent To Seek Extension of Approval: Report of Fuel Cost, Consumption, and Surcharge Revenue
The Surface Transportation Board wants to keep collecting reports about fuel costs, usage, and surcharge money from rail companies. They’re asking for public comments by September 24, 2026, to make sure the process is clear and not too much work. This helps keep track of fuel expenses and fees without changing the rules or costs right now.
Next: 2026-17332, Notice of OFAC Sanctions Action
The U.S. Treasury’s OFAC just blocked the property of certain people linked to terrorism, like Vasfi Akyuz, stopping Americans from doing business with them. This action started on August 20, 2026, and means any money or property they have under U.S. control is frozen. It’s a strong move to cut off support for groups like Hizballah and keep the financial system safe.