Pursuant to 15 USC § 6801 et seq., 12 CFR Part 364, and 12 CFR Part 208, banks are required to develop and implement a response program that will be utilized in the event unauthorized access to customer information has taken place. Customer information is any record containing nonpublic information about a customer, whether in paper, electronic, or other form maintained by or on behalf of a bank. Federal law and regulations require disclosure to federal regulators of unauthorized access of customer information in certain circumstances. If disclosure of such unauthorized access is required under federal law, then a duplicate of such disclosure will simultaneously be submitted to the Department.
Ga. Comp. R. & Regs. R. 80-1-3-.03
O.C.G.A. § 7-1-61.