{"description":"Documents matching 'security resulting unauthorized disclosure compromise'","count":1886,"total_pages":50,"next_page_url":"https://www.federalregister.gov/api/v1/documents?conditions%5Bterm%5D=security+resulting+unauthorized+disclosure+compromise&format=json&page=2","results":[{"title":"Privacy Act of 1974; System of Records","type":"Notice","abstract":"The NCSC is revising a system of records subject to the Privacy Act of 1974, as amended, 5 U.S.C. 552a, in order to (1) update the name to ODNI/NCSC--001, \"Damage Assessment Records\"; (2) update and modernize the administrative information; (3) clarify that the scope of the damage assessments is not limited to espionage or criminal violations but to actual or potential damage to national security resulting from the unauthorized disclosure or compromise of classified information; (4) clarify the categories of individuals covered by the system and records in the system to align with the lawful scope of damage assessments; and (5) clarify that portions of records, and not only final damage assessments, may be disclosed pursuant to the routine uses.","document_number":"2025-14825","html_url":"https://www.federalregister.gov/documents/2025/08/05/2025-14825/privacy-act-of-1974-system-of-records","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-08-05/pdf/2025-14825.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2025-14825.pdf?1754311517","publication_date":"2025-08-05","agencies":[{"raw_name":"OFFICE OF THE DIRECTOR OF NATIONAL INTELLIGENCE","name":"National Intelligence, Office of the National Director","id":354,"url":"https://www.federalregister.gov/agencies/national-intelligence-office-of-the-national-director","json_url":"https://www.federalregister.gov/api/v1/agencies/354","parent_id":null,"slug":"national-intelligence-office-of-the-national-director"}],"excerpts":"unauthorized disclosure; individuals who are identified in records related to the unauthorized disclosure or compromise; individuals interviewed in association with the damage assessment, or individuals mentioned in such interviews, such as colleagues, friends, acquaintances, and family members of individuals known or suspected to have committed an unauthorized disclosure or compromise; and individuals who may have knowledge of facts surrounding the unauthorized disclosure or compromise. \n CATEGORIES OF RECORDS IN THE SYSTEM: \n \n Final and draft"},{"title":"Disclosure of Information","type":"Proposed Rule","abstract":"The Federal Deposit Insurance Corporation (FDIC) is inviting comment on a notice of proposed rulemaking that would update, clarify, and supplement the FDIC's regulations regarding the disclosure of confidential information by the FDIC and other parties, including by enhancing the ability of insured depository institutions to share confidential supervisory information with affiliates and certain other entities for appropriate business purposes, without seeking prior authorization from the FDIC. The proposal also would significantly simplify and clarify the requirements and restrictions applicable to the FDIC's discretionary disclosure of confidential information. Finally, the proposal would update and simplify the FDIC's rules regarding disclosures required under the Freedom of Information Act and would clarify how and when FDIC information may be disclosed in connection with legal proceedings and as a result of service of process made upon the FDIC and its directors, officers, and employees.","document_number":"2026-13123","html_url":"https://www.federalregister.gov/documents/2026/06/30/2026-13123/disclosure-of-information","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2026-06-30/pdf/2026-13123.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2026-13123.pdf?1782737111","publication_date":"2026-06-30","agencies":[{"raw_name":"FEDERAL DEPOSIT INSURANCE CORPORATION","name":"Federal Deposit Insurance Corporation","id":164,"url":"https://www.federalregister.gov/agencies/federal-deposit-insurance-corporation","json_url":"https://www.federalregister.gov/api/v1/agencies/164","parent_id":null,"slug":"federal-deposit-insurance-corporation"}],"excerpts":"\n 5. Procedure for Requesting Discretionary Disclosure \n 6. Disclosure by the FDIC \n 7. Disclosure of FDIC Confidential Information by Insured Depository Institutions and Their Parent Holding Companies \n a. General Disclosure Authorizations \n b. Disclosure of Historical Information \n c. Disclosure of Confidential Information by Parent Holding Companies \n d. Disclosure of Data for Aggregated Analyses \n 8. Disclosure of FDIC Confidential Information by Service Providers and Other Persons \n D. Disclosure of Confidential Information in Legal Proceedings"},{"title":"Modernizing Security Requirements","type":"Proposed Rule","abstract":"The U.S. Nuclear Regulatory Commission (NRC) is proposing to revise its regulations to modernize security and fitness-for-duty requirements to enhance efficiency, consistent with Executive Order 14300, \"Ordering the Reform of the Nuclear Regulatory Commission.\" The proposed revisions are intended to reduce regulatory burden, where appropriate, while continuing to provide reasonable assurance that safety and security will be adequately maintained at NRC-licensed facilities.","document_number":"2026-12989","html_url":"https://www.federalregister.gov/documents/2026/06/26/2026-12989/modernizing-security-requirements","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2026-06-26/pdf/2026-12989.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2026-12989.pdf?1782391523","publication_date":"2026-06-26","agencies":[{"raw_name":"NUCLEAR REGULATORY COMMISSION","name":"Nuclear Regulatory Commission","id":383,"url":"https://www.federalregister.gov/agencies/nuclear-regulatory-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/383","parent_id":null,"slug":"nuclear-regulatory-commission"}],"excerpts":"Facility Security Clearance and Safeguarding of National Security Information and Restricted Data. \n The NRC is proposing to revise 10 CFR part 95, “Facility Security Clearance and Safeguarding of National Security Information and Restricted Data,” to remove requirements that are duplicative and to ensure alignment with 32 CFR part 117, “National Industrial Security Program Operating Manual (NISPOM).” These changes would provide references to the applicable provisions of 32 CFR part 117 for implementation of the National Industrial Security Program"},{"title":"Privacy Act of 1974; System of Records","type":"Notice","abstract":"In accordance with the Privacy Act of 1974, the Department of the Army is modifying and reissuing a current system of records notice (SORN) titled \"Personnel Security Clearance Information Files,\" A0380-67 DAMI. The SORN is being retitled \"U.S. Army Security and Foreign Disclosure Files,\" with a new identifier of A0 0001 DAMI. Originally established to facilitate the processing of personnel security clearance actions, the SORN also documented clearances granted or denied and confirmed eligibility for access to classified information or assignment to sensitive positions. A separate notice rescinding Army SORN A0001 DAMI, \"Controlled Accountable Document Inventory System,\" is being published elsewhere in this issue of the Federal Register. This update incorporates the DoD standard routine uses and supports additional information sharing outside of the DoD. It also expands the authorities for maintaining the system, integrates records previously managed under the Controlled Accountable Document Inventory System, addresses records maintained across all general intelligence security disciplines, and expands on the purposes of such uses. Additionally, the update revises system locations and managers. These changes align the SORN with modernized automation systems and ensure compliance with applicable regulatory requirements.","document_number":"2026-01236","html_url":"https://www.federalregister.gov/documents/2026/01/23/2026-01236/privacy-act-of-1974-system-of-records","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2026-01-23/pdf/2026-01236.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2026-01236.pdf?1769089514","publication_date":"2026-01-23","agencies":[{"raw_name":"DEPARTMENT OF DEFENSE","name":"Defense Department","id":103,"url":"https://www.federalregister.gov/agencies/defense-department","json_url":"https://www.federalregister.gov/api/v1/agencies/103","parent_id":null,"slug":"defense-department"},{"raw_name":"Department of the Army","name":"Army Department","id":32,"url":"https://www.federalregister.gov/agencies/army-department","json_url":"https://www.federalregister.gov/api/v1/agencies/32","parent_id":103,"slug":"army-department"}],"excerpts":"Information Security Program; AR 380-49, Industrial Security Program; AR 380-53, Communications Security Monitoring; AR 380-67, Personnel Security Program; AR 380-381 Special Access Programs (SAPs) and Sensitive Activities; AR 381-45, Investigative Records Repository; and E.O. 9397 (SSN), as amended.\n \n PURPOSE(S) OF THE SYSTEM: \n This system of records supports the Department of Army's operational administration, management, accountability, and oversight of its security functions such as Information Security, Personnel Security, Industrial Security, Education"},{"title":"HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information","type":"Proposed Rule","abstract":"The Department of Health and Human Services (HHS or \"Department\") is issuing this notice of proposed rulemaking (NPRM) to solicit comment on its proposal to modify the Security Standards for the Protection of Electronic Protected Health Information (\"Security Rule\") under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH Act). The proposed modifications would revise existing standards to better protect the confidentiality, integrity, and availability of electronic protected health information (ePHI). The proposals in this NPRM would increase the cybersecurity for ePHI by revising the Security Rule to address: changes in the environment in which health care is provided; significant increases in breaches and cyberattacks; common deficiencies the Office for Civil Rights has observed in investigations into Security Rule compliance by covered entities and their business associates (collectively, \"regulated entities\"); other cybersecurity guidelines, best practices, methodologies, procedures, and processes; and court decisions that affect enforcement of the Security Rule.","document_number":"2024-30983","html_url":"https://www.federalregister.gov/documents/2025/01/06/2024-30983/hipaa-security-rule-to-strengthen-the-cybersecurity-of-electronic-protected-health-information","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-01-06/pdf/2024-30983.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2024-30983.pdf?1735334119","publication_date":"2025-01-06","agencies":[{"raw_name":"DEPARTMENT OF HEALTH AND HUMAN SERVICES","name":"Health and Human Services Department","id":221,"url":"https://www.federalregister.gov/agencies/health-and-human-services-department","json_url":"https://www.federalregister.gov/api/v1/agencies/221","parent_id":null,"slug":"health-and-human-services-department"},{"raw_name":"Office of the Secretary"}],"excerpts":"Memorandum on National Security Memorandum on Critical Infrastructure Security and Resilience, National Security Memorandum/NSM-22, The White House (Apr. 30, 2024), \n https://www.whitehouse.gov/briefing-room/presidential-actions/2024/04/30/national-security-memorandum-on-critical-infrastructure-security-and-resilience/ \n (“Critical infrastructure comprises the physical and virtual assets and systems so vital to the Nation that their incapacity or destruction would have a debilitating impact on national security, national economic security, or national public"},{"title":"Privacy Act of 1974; System of Records","type":"Notice","abstract":"Pursuant to the Privacy Act of 1974 and Office of Management and Budget (OMB) Circular A-108, the U.S. Nuclear Regulatory Commission (NRC) is proposing revisions to three systems of records: NRC 5, Grants Management System; NRC 32, Office of the Chief Financial Officer Financial Transactions and Debt Collection Management Records; and NRC 41, Tort Claims and Personal Property Claims Records. The revisions add a routine use permitting disclosure to the U.S. Department of the Treasury for purposes of reviewing payment and award eligibility through the Do Not Pay Working System to identify, prevent, or recover improper payments, consistent with OMB Memorandum M-25-32 and Executive Order 14249. These system notices are subject to a 30-day public comment period.","document_number":"2026-03592","html_url":"https://www.federalregister.gov/documents/2026/02/24/2026-03592/privacy-act-of-1974-system-of-records","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2026-02-24/pdf/2026-03592.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2026-03592.pdf?1771854308","publication_date":"2026-02-24","agencies":[{"raw_name":"NUCLEAR REGULATORY COMMISSION","name":"Nuclear Regulatory Commission","id":383,"url":"https://www.federalregister.gov/agencies/nuclear-regulatory-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/383","parent_id":null,"slug":"nuclear-regulatory-commission"}],"excerpts":"taxpayer for the purpose of locating such taxpayer to collect or to compromise a Federal claim by NRC against the taxpayer under 26 U.S.C. 6103(m)(2) and under 31 U.S.C. 3711, 3717, and 3718 or common law. Re-disclosure of a mailing address obtained from the IRS may be made only for debt collection purposes, including to a debt collection agent to facilitate the collection or compromise of a Federal claim under the Debt Collection Act of 1982 or the DCIA of 1996, except that re-disclosure of a mailing address to a reporting agency is for the limited purpose"},{"title":"Notice of Availability of Security Requirements for Restricted Transactions Under Executive Order 14117","type":"Notice","abstract":"CISA is announcing publication of finalized security requirements for restricted transactions pursuant to Executive Order (E.O.) 14117, \"Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.\" In October 2024, CISA published proposed security requirements for restricted transactions which would apply to classes of restricted transactions identified in regulations issued by the Department of Justice (DOJ). CISA solicited comment on those proposed security requirements and considered that public feedback when developing the final security requirements. This notice also provides CISA's responses to the public comments received.","document_number":"2024-31479","html_url":"https://www.federalregister.gov/documents/2025/01/08/2024-31479/notice-of-availability-of-security-requirements-for-restricted-transactions-under-executive-order","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-01-08/pdf/2024-31479.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2024-31479.pdf?1735911917","publication_date":"2025-01-08","agencies":[{"raw_name":"DEPARTMENT OF HOMELAND SECURITY","name":"Homeland Security Department","id":227,"url":"https://www.federalregister.gov/agencies/homeland-security-department","json_url":"https://www.federalregister.gov/api/v1/agencies/227","parent_id":null,"slug":"homeland-security-department"}],"excerpts":"same direction to CISA for promulgating the security requirements. By design, the security requirements themselves are not a rule governed by the process laid out in the Administrative Procedure Act, 5 U.S.C. 553. While this allows CISA to update the security requirements quickly, tracking new developments in technology and data security, such updated security requirements will not be enforceable against entities regulated by DOJ's rule unless DOJ updates its rule to change the version of the security requirements incorporated therein by reference"},{"title":"Regulation S-P: Privacy of Consumer Financial Information and Safeguarding Customer Information","type":"Rule","abstract":"The Securities and Exchange Commission (\"Commission\" or \"SEC\") is adopting rule amendments that will require brokers and dealers (or \"broker-dealers\"), investment companies, investment advisers registered with the Commission (\"registered investment advisers\"), funding portals, and transfer agents registered with the Commission or another appropriate regulatory agency (\"ARA\") as defined in the Securities Exchange Act of 1934 (\"transfer agents\") to adopt written policies and procedures for incident response programs to address unauthorized access to or use of customer information, including procedures for providing timely notification to individuals affected by an incident involving sensitive customer information with details about the incident and information designed to help affected individuals respond appropriately. In addition, the amendments extend the application of requirements to safeguard customer records and information to transfer agents; broaden the scope of information covered by the requirements for safeguarding customer records and information and for properly disposing of consumer report information; impose requirements to maintain written records documenting compliance with the amended rules; and conform annual privacy notice delivery provisions to the terms of an exception provided by a statutory amendment to the Gramm-Leach-Bliley Act (\"GLBA\").","document_number":"2024-11116","html_url":"https://www.federalregister.gov/documents/2024/06/03/2024-11116/regulation-s-p-privacy-of-consumer-financial-information-and-safeguarding-customer-information","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2024-06-03/pdf/2024-11116.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2024-11116.pdf?1717159514","publication_date":"2024-06-03","agencies":[{"raw_name":"SECURITIES AND EXCHANGE COMMISSION","name":"Securities and Exchange Commission","id":466,"url":"https://www.federalregister.gov/agencies/securities-and-exchange-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/466","parent_id":null,"slug":"securities-and-exchange-commission"}],"excerpts":"to insure the security and confidentiality of customer records and information; to protect against any anticipated threats or hazards to the security or integrity of such records; and to protect against unauthorized access to or use of records or information which could result in substantial harm or inconvenience to any customer. 15 U.S.C. 6801(b).\n \n \n 1. Assessment \n \n The final amendments will require that the incident response program include procedures for: (1) assessing the nature and scope of any incident involving unauthorized access to or"},{"title":"Privacy Act of 1974; Systems of Records","type":"Notice","abstract":"Pursuant to the Privacy Act of 1974 and Office of Management and Budget (OMB) Circular No. A-108, notice is hereby given that the Justice Management Division (JMD), a component within the United States Department of Justice (DOJ or Department), proposes to modify the system of records titled Security Monitoring and Analytics Service Records, JUSTICE/JMD-026, updating the capabilities and offerings included in it.","document_number":"2025-09447","html_url":"https://www.federalregister.gov/documents/2025/06/02/2025-09447/privacy-act-of-1974-systems-of-records","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-06-02/pdf/2025-09447.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2025-09447.pdf?1748609107","publication_date":"2025-06-02","agencies":[{"raw_name":"DEPARTMENT OF JUSTICE","name":"Justice Department","id":268,"url":"https://www.federalregister.gov/agencies/justice-department","json_url":"https://www.federalregister.gov/api/v1/agencies/268","parent_id":null,"slug":"justice-department"}],"excerpts":"(SASE), Security Orchestration, Automation, and Response (SOAR), Packet Capture (PCAP), Security Information and Event Management (SIEM), and supply chain risk assessment. SMAS enables the identification and evaluation of suspicious, unauthorized, or anomalous activity that may indicate malicious behavior and activity, which information DOJ provides directly to external federal agency subscribers for their review and further evaluation. JMD monitors user activities and captures and stores files that might be related to suspicious, unauthorized, or otherwise"},{"title":"Agency Information Collection Activities: Post-Contract Award Information","type":"Notice","abstract":"The Department of Homeland Security will submit the following information collection request (ICR) to the Office of Management and Budget (OMB) for review and clearance in accordance with the Paperwork Reduction Act of 1995. DHS previously published this information collection request (ICR) in the Federal Register on September 9, 2024, for a 60-day public comment period. No comments were received by DHS. The purpose of this notice is to allow additional 30-days for public comments.","document_number":"2025-09580","html_url":"https://www.federalregister.gov/documents/2025/05/28/2025-09580/agency-information-collection-activities-post-contract-award-information","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-05-28/pdf/2025-09580.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2025-09580.pdf?1748349919","publication_date":"2025-05-28","agencies":[{"raw_name":"DEPARTMENT OF HOMELAND SECURITY","name":"Homeland Security Department","id":227,"url":"https://www.federalregister.gov/agencies/homeland-security-department","json_url":"https://www.federalregister.gov/api/v1/agencies/227","parent_id":null,"slug":"homeland-security-department"}],"excerpts":"contractor information systems operated on behalf of the agency, are used to collect, process, store, or transmit CUI.) \n Under the basic clause, contractors and subcontractors are required to:\n \n Provide adequate security to protect CUI from unauthorized access and disclosure; \n \n Report all known or suspected incidents to the Component Security Operations Center (SOC), or the DHS Enterprise SOC if the Component SOC is not available, in accordance with \n 4300A Sensitive Systems Handbook Attachment F Incident Response \n (\n i.e., \n incidents involving"},{"title":"Defense Federal Acquisition Regulation Supplement: Mitigating Risks Related to Foreign Ownership, Control, or Influence (DFARS Case 2021-D011)","type":"Proposed Rule","abstract":"DoD is proposing to amend the Defense Federal Acquisition Regulation Supplement (DFARS) to implement sections of the National Defense Authorization Act for Fiscal Years 2020 and 2021 to mitigate risks related to beneficial ownership or foreign ownership, control, or influence. This proposed rule also implements elements of a DoD policy.","document_number":"2026-09067","html_url":"https://www.federalregister.gov/documents/2026/05/07/2026-09067/defense-federal-acquisition-regulation-supplement-mitigating-risks-related-to-foreign-ownership","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2026-05-07/pdf/2026-09067.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2026-09067.pdf?1778071527","publication_date":"2026-05-07","agencies":[{"raw_name":"DEPARTMENT OF DEFENSE","name":"Defense Department","id":103,"url":"https://www.federalregister.gov/agencies/defense-department","json_url":"https://www.federalregister.gov/api/v1/agencies/103","parent_id":null,"slug":"defense-department"},{"raw_name":"Defense Acquisition Regulations System","name":"Defense Acquisition Regulations System","id":97,"url":"https://www.federalregister.gov/agencies/defense-acquisition-regulations-system","json_url":"https://www.federalregister.gov/api/v1/agencies/97","parent_id":103,"slug":"defense-acquisition-regulations-system"}],"excerpts":"the contractor has an eligible status in the National Industrial Security System (see 240.27X-4). \n \n 5. Add part 240 to read as follows: \n \n PART 240—INFORMATION SECURITY AND SUPPLY CHAIN SECURITY \n \n Subpart 240.1 [Reserved] \n \n \n \n Subpart 240.2—Security Prohibitions and Exclusions \n \n 240.27X \n \n 240.27X-1 \n \n 240.27X-2 \n \n 240.27X-3 \n \n 240.27X-4 \n \n 240.27X-5 \n \n \n \n \n Authority: \n 41 U.S.C. 1303 and 48 CFR chapter 1. \n \n \n Subpart 240.1 [Reserved] \n \n \n Subpart 240.2—Security Prohibitions and Exclusions \n \n 240.27X \n \n \n \n 240.27X-1 \n \n This"},{"title":"Electronic Submission of Certain Materials Under the Securities Exchange Act of 1934; Amendments Regarding the FOCUS Report","type":"Rule","abstract":"The Securities and Exchange Commission (\"Commission\" or \"SEC\") is amending its rules to require electronic filing or submission of certain forms and other filings or submissions that are required to be filed with or submitted to the Commission under the Securities Exchange Act of 1934 (\"Exchange Act\") and the rules and regulations under the Exchange Act. The amendments require the electronic filing or submission on the Commission's Electronic Data Gathering, Analysis, and Retrieval (\"EDGAR\") system, using structured data where appropriate, for certain forms filed or submitted by self- regulatory organizations (\"SROs\"). The amendments require the information currently contained in Form 19b-4(e) to be publicly posted on the SRO's website and remove the manual signature requirements for SRO proposed rule change filings. The Commission is also requiring that a clearing agency post supplemental material to its website. In addition, the Commission is amending rules under the Exchange Act and the Securities Act of 1933 (\"Securities Act\") to require the electronic filing or submission on EDGAR, using structured data where appropriate, of certain forms, reports, and notices provided by broker- dealers, security-based swap dealers, and major security-based swap participants. The amendments also require withdrawal in certain circumstances of notices filed in connection with an exception to counting certain dealing transactions toward determining whether a person is a security-based swap dealer. Finally, the Commission is allowing electronic signatures in certain broker-dealer filings, and amending the Financial and Operational Combined Uniform Single Report (\"FOCUS Report\") to harmonize with other rules, make technical corrections, and provide clarifications.","document_number":"2024-30433","html_url":"https://www.federalregister.gov/documents/2025/01/21/2024-30433/electronic-submission-of-certain-materials-under-the-securities-exchange-act-of-1934-amendments","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-01-21/pdf/2024-30433.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2024-30433.pdf?1737121512","publication_date":"2025-01-21","agencies":[{"raw_name":"SECURITIES AND EXCHANGE COMMISSION","name":"Securities and Exchange Commission","id":466,"url":"https://www.federalregister.gov/agencies/securities-and-exchange-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/466","parent_id":null,"slug":"securities-and-exchange-commission"}],"excerpts":"Submitting Security-Based Swap Valuation Dispute Notices (available at \n https://www.sec.gov/tm/Security-Based-Swap-Valuation-Dispute-Notices \n ).\n \n \n \n \n 32 \n \n See \n Frequently Asked Questions Regarding Chief Compliance Officer Annual Reports Submitted by Security-Based Swap Dealers and Major Security-Based Swap Participants (available at \n https://www.sec.gov/tm/faqs-cco-annual-reports-sbsd \n ).\n \n \n \n \n 33 \n \n See \n Staff Statement on Submitting Notices, Statements, Applications, and Reports for Security-Based Swap Dealers and Major Security-Based"},{"title":"Designation-Restrict the Operation of Unmanned Aircraft in Close Proximity to a Fixed Site Facility","type":"Proposed Rule","abstract":"This action would implement section 2209, of the FAA Extension, Safety and Security Act of 2016, by establishing a process for operators and proprietors of certain fixed site facilities to request and maintain an unmanned aircraft flight restriction. The proposal also establishes requirements for applicants to demonstrate the unmanned aircraft flight restriction is necessary for: aviation safety, protection of people and property on the ground, national security, or homeland security. Lastly, the proposal identifies the types of operations that are allowed in the unmanned aircraft flight restriction UAFR.","document_number":"2026-08943","html_url":"https://www.federalregister.gov/documents/2026/05/06/2026-08943/designation-restrict-the-operation-of-unmanned-aircraft-in-close-proximity-to-a-fixed-site-facility","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2026-05-06/pdf/2026-08943.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2026-08943.pdf?1777985132","publication_date":"2026-05-06","agencies":[{"raw_name":"DEPARTMENT OF TRANSPORTATION","name":"Transportation Department","id":492,"url":"https://www.federalregister.gov/agencies/transportation-department","json_url":"https://www.federalregister.gov/api/v1/agencies/492","parent_id":null,"slug":"transportation-department"},{"raw_name":"Federal Aviation Administration","name":"Federal Aviation Administration","id":159,"url":"https://www.federalregister.gov/agencies/federal-aviation-administration","json_url":"https://www.federalregister.gov/api/v1/agencies/159","parent_id":492,"slug":"federal-aviation-administration"}],"excerpts":"and systems resulting in incapacitation and debilitation of critical mission-oriented services necessary for National Essential Functions. Furthermore, the use of UAS near high risk, high-security government entities by adversaries could also result in security disruption, breach, surveillance, espionage, intellectual property theft, and sabotage. \n \n Criteria. \n Eligible facilities in the government services and facilities sector would be limited to high-risk high-security government facilities with a national or homeland security role and critical"},{"title":"Privacy Act Regulations","type":"Proposed Rule","abstract":"The Commodity Futures Trading Commission (CFTC or Commission) is establishing a new Insider Risk Program, the records of which are included in a new Privacy Act system of records, CFTC-59, Insider Risk Program Records (CFTC-59), published concurrently in this Federal Register. The Commission proposes here to update its regulations to exempt CFTC-59 from certain provisions of the Privacy Act in accordance with the requirements of the Privacy Act and the guidance contained in Office of Management and Budget (OMB) Circular A-108, Federal Agency Responsibilities for Review, Reporting, and Publication Under the Privacy Act (OMB A-108) in order to maintain the integrity of insider risk investigations and to keep confidential the identity of confidential sources. If the Commission adopts this proposal, the records in CFTC-59 will be exempt from those provisions of the Privacy Act pertaining to an individual's right to access and request amendment of their records.","document_number":"2026-08979","html_url":"https://www.federalregister.gov/documents/2026/05/06/2026-08979/privacy-act-regulations","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2026-05-06/pdf/2026-08979.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2026-08979.pdf?1777985137","publication_date":"2026-05-06","agencies":[{"raw_name":"COMMODITY FUTURES TRADING COMMISSION","name":"Commodity Futures Trading Commission","id":77,"url":"https://www.federalregister.gov/agencies/commodity-futures-trading-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/77","parent_id":null,"slug":"commodity-futures-trading-commission"}],"excerpts":"system of records identified as CFTC-59, Insider Risk Program Records, contains records collected to detect, deter, and mitigate the unauthorized disclosure of information by CFTC staff, including employees and contractors, and to protect individuals, facilities, information, equipment, networks, and systems from insider risks. These risks can include damage caused through espionage, terrorism, or unauthorized disclosure of privileged information or through the loss or degradation of Commission resources or capabilities. Pursuant to 5 U.S.C. 552a(k)(2)"},{"title":"Enhancing Surface Cyber Risk Management","type":"Proposed Rule","abstract":"The Transportation Security Administration (TSA) is proposing to impose cyber risk management (CRM) requirements on certain pipeline and rail owner/operators and a more limited requirement, on certain over-the-road bus (OTRB) owner/operators, to report cybersecurity incidents. With the proposed addition of requirements applicable to pipeline facilities and systems, TSA is also proposing that a requirement to have a Physical Security Coordinator and report significant physical security concerns be extended to the same facilities and systems. Finally, TSA is proposing clarifications and reorganization of other regulatory requirements necessitated by these changes.","document_number":"2024-24704","html_url":"https://www.federalregister.gov/documents/2024/11/07/2024-24704/enhancing-surface-cyber-risk-management","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2024-11-07/pdf/2024-24704.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2024-24704.pdf?1730900722","publication_date":"2024-11-07","agencies":[{"raw_name":"DEPARTMENT OF HOMELAND SECURITY","name":"Homeland Security Department","id":227,"url":"https://www.federalregister.gov/agencies/homeland-security-department","json_url":"https://www.federalregister.gov/api/v1/agencies/227","parent_id":null,"slug":"homeland-security-department"},{"raw_name":"Transportation Security Administration","name":"Transportation Security Administration","id":494,"url":"https://www.federalregister.gov/agencies/transportation-security-administration","json_url":"https://www.federalregister.gov/api/v1/agencies/494","parent_id":227,"slug":"transportation-security-administration"}],"excerpts":"the security objectives in the previous versions of the SD but also provide more flexibility by imposing performance-based, rather than prescriptive, security measures. As revised, the SD allows covered owner/operators to choose how \n \n best to implement security measures for their specific systems and operations while mandating that they achieve critical security outcomes. This approach also affords these owner/operators with the ability to adopt new technologies and security capabilities as they become available, if TSA's mandated security outcomes"},{"title":"Review of Submarine Cable Landing License Rules and Procedures To Assess Evolving National Security, Law Enforcement, Foreign Policy, and Trade Policy Risks","type":"Rule","abstract":"In this document, the Federal Communications Commission (Commission or FCC) adopted a Report and Order that updates the Commission's submarine cable licensing process and adopts rule changes to protect critical U.S. communications infrastructure against foreign adversary threats, specifically those posed by an entity that is owned by, controlled by, or subject to the jurisdiction or direction of a foreign adversary. The Report and Order adopts a requirement for certain licensees to file an annual report about the licensee, submarine cable system ownership, and submarine cable operations. The Report and Order adopts a one-time information collection for licensees to identify, among other things, how many entities currently own or operate submarine line terminal equipment (SLTEs) on existing licensed cable systems. The Report and Order also requires applicants and licensees to certify that they have created, updated, and implemented a cybersecurity and physical security risk management plan and requires applicants to certify that the submarine cable system will not use equipment or services identified on the Commission's Covered List. With respect to the circuit capacity data collection, the Report and Order adopts streamlined rules and eliminates the requirement for licensees to file a cable operator report about the capacity on a cable and clarify the types of capacity that need to be reported on an annual basis.","document_number":"2025-19658","html_url":"https://www.federalregister.gov/documents/2025/10/27/2025-19658/review-of-submarine-cable-landing-license-rules-and-procedures-to-assess-evolving-national-security","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-10-27/pdf/2025-19658.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2025-19658.pdf?1761309905","publication_date":"2025-10-27","agencies":[{"raw_name":"FEDERAL COMMUNICATIONS COMMISSION","name":"Federal Communications Commission","id":161,"url":"https://www.federalregister.gov/agencies/federal-communications-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/161","parent_id":null,"slug":"federal-communications-commission"}],"excerpts":"licensee on national security and economic security grounds or solely based on a history of noncompliance, or otherwise provide a clear standard such as specific national security threats posed by changed circumstances or noncompliance with the terms of a license or Commission rules. We cannot effectively discharge our duty to protect national security by limiting our revocation and termination process to a prescribed list of circumstances, as we cannot predict with certainty what circumstances might threaten national security in the future. However"},{"title":"Self-Regulatory Organizations; National Securities Clearing Corporation; Notice of Filing of Proposed Rule Change Relating to a Participant System Disruption","type":"Notice","abstract":null,"document_number":"2025-05206","html_url":"https://www.federalregister.gov/documents/2025/03/27/2025-05206/self-regulatory-organizations-national-securities-clearing-corporation-notice-of-filing-of-proposed","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-03-27/pdf/2025-05206.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2025-05206.pdf?1742993117","publication_date":"2025-03-27","agencies":[{"raw_name":"SECURITIES AND EXCHANGE COMMISSION","name":"Securities and Exchange Commission","id":466,"url":"https://www.federalregister.gov/agencies/securities-and-exchange-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/466","parent_id":null,"slug":"securities-and-exchange-commission"}],"excerpts":"that has or is reasonably anticipated to, for example, disrupt, degrade, cause a delay in, interrupt or otherwise alter the normal operation of DTCC Systems; result in unauthorized access to DTCC Systems; result in the loss of control of, disclosure of, or loss of DTCC Confidential Information; or cause a strain on, loss of, or overall threat to the Corporation's resources, functions, security or operations.”\n \n \n \n \n 10 \n “DTCC Systems Participant” is currently defined in the Disruption Rules as, “a [Respective Participant], or third party service"},{"title":"Establishment of Independent Panel To Review Actions Relating to the Attempted Assassination of Former President Donald J. Trump","type":"Notice","abstract":"In order to facilitate an effective review of the security provided by the U.S. Secret Service to Former President Donald J. Trump on July 13, 2024, the Department of Homeland Security (Department or DHS) is creating an Independent Review Panel (Panel). Pursuant to the Homeland Security Act of 2002, the Department is taking immediate measures to establish this independent panel of experts to inquire into the planning for and actions taken by the U.S. Secret Service and state and local authorities, before, during, and after the July 13, 2024, attempted assassination of Former President Donald J. Trump at a campaign rally in Butler, Pennsylvania. The Panel will also review the governing policies and procedures and provide findings and recommendations to the Secretary of Homeland Security.","document_number":"2024-16290","html_url":"https://www.federalregister.gov/documents/2024/07/24/2024-16290/establishment-of-independent-panel-to-review-actions-relating-to-the-attempted-assassination-of","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2024-07-24/pdf/2024-16290.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2024-16290.pdf?1721652332","publication_date":"2024-07-24","agencies":[{"raw_name":"DEPARTMENT OF HOMELAND SECURITY","name":"Homeland Security Department","id":227,"url":"https://www.federalregister.gov/agencies/homeland-security-department","json_url":"https://www.federalregister.gov/api/v1/agencies/227","parent_id":null,"slug":"homeland-security-department"}],"excerpts":"exceptions to its general disclosure rules, but the use of those exceptions is not sufficient to address the proper handling of classified material and the protection of law enforcement sensitive information in this unique context. The information that will be discussed and reviewed by this Panel will be deliberative in nature and will involve classified information that, if discussed in public, would result in the unauthorized disclosure of information that could reasonably be expected to result in threats or damage to national security. Furthermore, the"},{"title":"Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure","type":"Rule","abstract":"The Securities and Exchange Commission (\"Commission\") is adopting new rules to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incidents by public companies that are subject to the reporting requirements of the Securities Exchange Act of 1934. Specifically, we are adopting amendments to require current disclosure about material cybersecurity incidents. We are also adopting rules requiring periodic disclosures about a registrant's processes to assess, identify, and manage material cybersecurity risks, management's role in assessing and managing material cybersecurity risks, and the board of directors' oversight of cybersecurity risks. Lastly, the final rules require the cybersecurity disclosures to be presented in Inline eXtensible Business Reporting Language (\"Inline XBRL\").","document_number":"2023-16194","html_url":"https://www.federalregister.gov/documents/2023/08/04/2023-16194/cybersecurity-risk-management-strategy-governance-and-incident-disclosure","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2023-08-04/pdf/2023-16194.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2023-16194.pdf?1691070880","publication_date":"2023-08-04","agencies":[{"raw_name":"SECURITIES AND EXCHANGE COMMISSION","name":"Securities and Exchange Commission","id":466,"url":"https://www.federalregister.gov/agencies/securities-and-exchange-commission","json_url":"https://www.federalregister.gov/api/v1/agencies/466","parent_id":null,"slug":"securities-and-exchange-commission"}],"excerpts":"that the USSS or FBI may direct the entity to further delay notification to customers or public disclosure beyond seven business days if such disclosure “would impede or compromise an ongoing or potential criminal investigation or national security.” If the USSS or FBI believes that disclosure would result in a substantial risk to national security or public safety, it may, as explained above, work with the Department of Justice to seek a delay of disclosure.\n \n \n \n \n 146 \n Such notice should be provided through correspondence on EDGAR no later than"},{"title":"Counter-UAS Authority for State, Local, Tribal, and Territorial Law Enforcement and Correctional Agencies","type":"Rule","abstract":"In this interim final rule (\"IFR\"), the Department of Justice (\"DOJ\") and the Department of Homeland Security (\"DHS\") (collectively, \"the Departments\") codify the framework for implementing the SAFER SKIES Act, which authorizes State, local, Tribal, and territorial law enforcement or correctional (\"SLTT\") agencies to conduct counter-unmanned aircraft system (\"C-UAS\") operations. This framework governs training and certification (including a two-tiered structure for detection and warning operations and for mitigation operations), authorized technologies, spectrum coordination, airspace approval, real-time air traffic control notification, mitigation reporting, privacy protections, and compliance requirements for SLTT agencies in relation to the exercise of C-UAS authority.","document_number":"2026-13609","html_url":"https://www.federalregister.gov/documents/2026/07/06/2026-13609/counter-uas-authority-for-state-local-tribal-and-territorial-law-enforcement-and-correctional","pdf_url":"https://www.govinfo.gov/content/pkg/FR-2026-07-06/pdf/2026-13609.pdf","public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2026-13609.pdf?1782936911","publication_date":"2026-07-06","agencies":[{"raw_name":"DEPARTMENT OF HOMELAND SECURITY","name":"Homeland Security Department","id":227,"url":"https://www.federalregister.gov/agencies/homeland-security-department","json_url":"https://www.federalregister.gov/api/v1/agencies/227","parent_id":null,"slug":"homeland-security-department"},{"raw_name":"DEPARTMENT OF JUSTICE","name":"Justice Department","id":268,"url":"https://www.federalregister.gov/agencies/justice-department","json_url":"https://www.federalregister.gov/api/v1/agencies/268","parent_id":null,"slug":"justice-department"}],"excerpts":"Department of Homeland Security, receives the advance notification for purposes of deconflicting planned SLTT law enforcement or correctional agency C-UAS operations with any ongoing or planned Federal C-UAS, law enforcement, or national security operations. Until the portal is fully established, an SLTT law enforcement or correctional agency must notify the Federal Bureau of Investigation and Department of Homeland Security through a channel designated by the Federal Bureau of Investigation and Department of Homeland Security for that purpose.\n \n"}]}