16 C.F.R. § 314.5 Effective date.
Title 16 - Commercial Practices
(a) Each financial institution subject to the Commission's jurisdiction must implement an information security program pursuant to this part no later than May 23, 2003. (b) Two-year grandfathering of service contracts. Until May 24, 2004, a contract you have entered into with a nonaffiliated third party to perform services for you or functions on your behalf satisfies the provisions of §314.4(d), even if the contract does not include a requirement that the service provider maintain appropriate safeguards, as long as you entered into the contract not later than June 24, 2002.
Title 16: Commercial Practices
PART 314—STANDARDS FOR SAFEGUARDING CUSTOMER INFORMATION
§ 314.5 Effective date.
