Pursuant to 12 C.F.R. Part 748 credit unions are required to notify the appropriate federal regulator no later than 72 hours after the credit union determines that a cyber incident, which rises to the level of a reportable cyber incident, has occurred. A reportable cyber incident is an occurrence identified in 12 CFR § 748.1. If a cyber incident is required to be reported under federal law, then a duplicate of such report, whether provided via email, telephone, or otherwise, will be submitted simultaneously to the Department.
Ga. Comp. R. & Regs. R. 80-2-1-.06
O.C.G.A. §§ 7-1-61, 7-1-663.