16 CFR 314.5 - Effective date.
(a) Each financial institution subject to the Commission's jurisdiction must implement an information security program pursuant to this part no later than May 23, 2003.
(b) Two-year grandfathering of service contracts. Until May 24, 2004, a contract you have entered into with a nonaffiliated third party to perform services for you or functions on your behalf satisfies the provisions of § 314.4(d), even if the contract does not include a requirement that the service provider maintain appropriate safeguards, as long as you entered into the contract not later than June 24, 2002.
Title 16 published on 2015-12-04
The following are ALL rules, proposed rules, and notices (chronologically) published in the Federal Register relating to 16 CFR Part 314 after this date.