Answer:
First, remember that the report is to be made “at least annually.” In some circumstances, a more frequent report would be warranted. In terms of who to report to, the rule says it can be the board, an appropriate committee of the board, or a designated senior management employee. You will find guidance on what to include in the report in Appendix J to Regulation V.
-----------------------------
Learn more about the webinar
Bank Obligations to ID Theft Victims