This letter is to inform credit unions of their responsibility to have response programs in place that specify actions to be taken when unauthorized access to personal member information occurs or is suspected. In addition, credit unions are responsible for notifying the Office of Credit Unions if an incident involving unauthorized access to or use of sensitive member information occurs.
Included with this letter is a form that should be used in notifying the Office of Credit Unions if an incident involving unauthorized access to or use of sensitive member information occurs.