12 CFR 53.2
§ 53.2 Definitions.
United States · 12 CFR — Banks and Banking · Status: effective
Cite this
- Citation
- 12 CFR 53.2, § 53.2 Definitions, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/43645
- Permanent ID
ys:prov:43645@1- SHA-256
ab9905f2761bf6306f725ef336ebf7152d1e5c4e578ab383f18af11cd0046ce4
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
(a) Except as modified in this part, or unless the context otherwise requires, the terms used in this part have the same meanings as set forth in 12 U.S.C. 1813.
(b) For purposes of this part, the following definitions apply.
(1) Banking organization means a national bank, Federal savings association, or Federal branch or agency of a foreign bank; provided, however, that no designated financial market utility shall be considered a banking organization.
(2) Bank service provider means a bank service company or other person that performs covered services; provided, however, that no designated financial market utility shall be considered a bank service provider.
(3) Business line means a product or service offered by a banking organization to serve its customers or support other business needs.
(4) Computer-security incident is an occurrence that results in actual harm to the confidentiality, integrity, or availability of an information system or the information that the system processes, stores, or transmits.
(5) Covered services are services performed, by a person, that are subject to the Bank Service Company Act (12 U.S.C. 1861-1867).
(6) Designated financial market utility has the same meaning as set forth at 12 U.S.C. 5462(4).
(7) Notification incident is a computer-security incident that has materially disrupted or degraded, or is reasonably likely to materially disrupt or degrade, a banking organization's—
(i) Ability to carry out banking operations, activities, or processes, or deliver banking products and services to a material portion of its customer base, in the ordinary course of business;
(ii) Business line(s), including associated operations, services, functions, and support, that upon failure would result in a material loss of revenue, profit, or franchise value; or
(iii) Operations, including associated services, functions and support, as applicable, the failure or discontinuance of which would pose a threat to the financial stability of the United States.
(8) Person has the same meaning as set forth at 12 U.S.C. 1817(j)(8)(A).
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.