{ "cells": { "grain:m_federal_financial_privacy_statutes#US-federal.boi-report.boi_report_contents": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "BOI report: reporting-company and individual fields, accepted identification, initial, update and correction timing, and the form and manner FinCEN prescribes, quoted from 31 CFR 1010.380 as amended by the final rule", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(a)(1)\",\"(a)(2)\",\"(a)(3)\",\"(b)\",\"(b)(1)\",\"(b)(1)(ii)(D)\",\"(b)(5)\"],\"section\":\"31 CFR 1010.380\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(b) Content, form, and manner of reports. Each report or application submitted under this section shall be filed with FinCEN in the form and manner that FinCEN shall prescribe in the forms and instructions for such report or application, and each person filing such report or application shall certify that the report or application is true, correct, and complete.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "boi_report_contents", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "boi-report" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-09/title-31.xml?section=1010.380", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.boi-report.boi_violation_provisions": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Federal provisions on reporting violations and on unauthorized disclosure or use of BOI: the statute's penalty paragraph and the two implementing regulation paragraphs, quoted", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(h)(1)\",\"(h)(2)\",\"(h)(3)\"],\"regulations\":[\"31 CFR 1010.380(g)\",\"31 CFR 1010.955(f)\"],\"statute\":\"31 U.S.C. 5336(h)\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(1) Reporting violations .—It shall be unlawful for any person to— (A) willfully provide, or attempt to provide, false or fraudulent beneficial ownership information, including a false or fraudulent identifying photograph or document, to FinCEN in accordance with subsection (b); or (B) willfully fail to report complete or updated beneficial ownership information to FinCEN in accordance with subsection (b).", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "boi_violation_provisions", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "boi-report" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2021-title31/html/USCODE-2021-title31-subtitleIV-chap53-subchapII-sec5336.htm", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.cip-cdd-entity.existence_evidence_scope": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Documents the bank customer identification rule lists as showing a legal entity's existence, and the provisions that reach individuals with authority or control over the account, quoted from 31 CFR 1020.220", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(a)(2)(i)(A)\",\"(a)(2)(ii)(A)\",\"(a)(2)(ii)(C)\"],\"part\":\"31 CFR part 1020\",\"section\":\"31 CFR 1020.220\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "( 2 ) For a person other than an individual (such as a corporation, partnership, or trust), documents showing the existence of the entity, such as certified articles of incorporation, a government-issued business license, a partnership agreement, or trust instrument.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "existence_evidence_scope", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "cip-cdd-entity" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1020", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.cip-cdd-entity.risk_based_acceptance": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Risk-based identity verification procedures, the document and non-documentary method provisions and the address forms of the bank customer identification rule, quoted from 31 CFR 1020.220", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(a)(2)\",\"(a)(2)(i)(A)(3)\",\"(a)(2)(ii)(A)\",\"(a)(2)(ii)(B)\"],\"part\":\"31 CFR part 1020\",\"section\":\"31 CFR 1020.220\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "The CIP must include risk-based procedures for verifying the identity of each customer to the extent reasonable and practicable. The procedures must enable the bank to form a reasonable belief that it knows the true identity of each customer. These procedures must be based on the bank's assessment of the relevant risks, including those presented by the various types of accounts maintained by the bank, the various methods of opening accounts provided by the bank, the various types of identifying information available, and the bank's size, location, and customer base.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "risk_based_acceptance", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "cip-cdd-entity" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1020", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.cip-cdd-entity.role_distinctions": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Beneficial owner as defined for legal entity customers (ownership prong and control prong, with the officer titles listed), the trust rule and the individual who opens the account, quoted from 31 CFR 1010.230", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(b)(1)\",\"(d)\"],\"part\":\"31 CFR part 1010\",\"section\":\"31 CFR 1010.230\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(d) Beneficial owner. For purposes of this section, beneficial owner means each of the following: (1) Each individual, if any, who, directly or indirectly, through any contract, arrangement, understanding, relationship or otherwise, owns 25 percent or more of the equity interests of a legal entity customer; and (2) A single individual with significant responsibility to control, manage, or direct a legal entity customer, including: (i) An executive officer or senior manager ( e.g., a Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, Managing Member, General Partner, President, Vice President, or Treasurer); or (ii) Any other individual who regularly performs similar functions.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "role_distinctions", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "cip-cdd-entity" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1010§ion=1010.230", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.cip-cdd-entity.status_vs_authority_events": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Ongoing customer due diligence paragraph of the bank anti-money laundering program rule (customer information updated on a risk basis, including beneficial owners of legal entity customers), quoted from 31 CFR 1020.210", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(a)(2)(v)\",\"(b)(2)(v)\"],\"part\":\"31 CFR part 1020\",\"section\":\"31 CFR 1020.210\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(v) Appropriate risk-based procedures for conducting ongoing customer due diligence, to include, but not be limited to: (A) Understanding the nature and purpose of customer relationships for the purpose of developing a customer risk profile; and (B) Conducting ongoing monitoring to identify and report suspicious transactions and, on a risk basis, to maintain and update customer information. For purposes of this paragraph, customer information shall include information regarding the beneficial owners of legal entity customers (as defined in § 1010.230 of this chapter);", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "status_vs_authority_events", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "cip-cdd-entity" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1020", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.deposit-products.deposit_vs_product_label": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Deposit, insured deposit, non-deposit product, hybrid product and uninsured financial product definitions, with the prohibition on implying that an uninsured product is insured and the non-deposit signage provision, quoted from 12 CFR part 328", "fetch_event_id": null, "pinpoint": "{\"part\":\"12 CFR part 328\",\"sections\":[\"328.1\",\"328.3(c)(2)\",\"328.100\",\"328.101\",\"328.102(a)\"]}", "public_reason": null, "publish_status": "publish_ready", "quote": "Uninsured Financial Product means any Non-Deposit Product, Hybrid-Product, investment, security, obligation, certificate, share, crypto-asset or financial product other than an “Insured Deposit” as defined in this section.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "deposit_vs_product_label", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "deposit-products" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=328", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.dppa.dppa_definitions": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "DPPA definitions of personal information and highly restricted personal information, quoted from 18 U.S.C. 2725(3) and (4)", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(3)\",\"(4)\"],\"statute\":\"18 U.S.C. 2725\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(3) \"personal information\" means information that identifies an individual, including an individual's photograph, social security number, driver identification number, name, address (but not the 5-digit zip code), telephone number, and medical or disability information, but does not include information on vehicular accidents, driving violations, and driver's status.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "dppa_definitions", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "dppa" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2725.htm", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.dppa.permitted_uses": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Each permitted use of 18 U.S.C. 2721(b): the introductory clause and every paragraph of the use list, with requester, purpose, covered fields, consent condition and onward-disclosure rule, beside the general conditions of subsection (a), (d) and (e)", "fetch_event_id": null, "pinpoint": "{\"statute\":\"18 U.S.C. 2721\",\"subsections\":[\"(a)\",\"(b)\",\"(c)\",\"(d)\",\"(e)\"]}", "public_reason": null, "publish_status": "publish_ready", "quote": "(1) For use by any government agency, including any court or law enforcement agency, in carrying out its functions, or any private person or entity acting on behalf of a Federal, State, or local agency in carrying out its functions.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "permitted_uses", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "dppa" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2721.htm", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.dppa.remedies_penalties": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "DPPA civil action and relief (18 U.S.C. 2724), governmental civil penalty and criminal fine (18 U.S.C. 2723), with pinpoints", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"2724(a)\",\"2724(b)\",\"2723(a)\",\"2723(b)\"],\"statute\":\"18 U.S.C. 2723-2724\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(a) Cause of Action .—A person who knowingly obtains, discloses or uses personal information, from a motor vehicle record, for a purpose not permitted under this chapter shall be liable to the individual to whom the information pertains, who may bring a civil action in a United States district court.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "remedies_penalties", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "dppa" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2724.htm", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.dppa.reseller_records": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Resale and redisclosure limits and the record-keeping duty of 18 U.S.C. 2721(c): who keeps records, their content, retention and inspection", "fetch_event_id": null, "pinpoint": "{\"statute\":\"18 U.S.C. 2721\",\"subsections\":[\"(c)\"]}", "public_reason": null, "publish_status": "publish_ready", "quote": "Any authorized recipient (except a recipient under subsection (b)(11)) that resells or rediscloses personal information covered by this chapter must keep for a period of 5 years records identifying each person or entity that receives information and the permitted purpose for which the information will be used and must make such records available to the motor vehicle department upon request.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "reseller_records", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "dppa" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2721.htm", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.ein-responsible-party.ein_responsible_party": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "EIN application line labels, the responsible-party definition, the nominee restriction, the third-party designee authorization and the Form 8822-B update path, quoted from IRS instructions and the IRS responsible-party page", "fetch_event_id": null, "pinpoint": "{\"document\":\"Instructions for Form SS-4\",\"sections\":[\"Lines 1 to 18\",\"Lines 7a-7b\",\"Responsible party defined\",\"Line 18\"]}", "public_reason": null, "publish_status": "publish_ready", "quote": "Responsible party defined. The “responsible party” is the person who ultimately owns or controls the entity or who exercises ultimate effective control over the entity.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "ein_responsible_party", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "ein-responsible-party" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.irs.gov/instructions/iss4", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.ftc-safeguards.safeguards_requirements": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Safeguards Rule: coverage, program elements, service-provider duties and the notification event (trigger, fields, timing and channel)", "fetch_event_id": null, "pinpoint": "{\"part\":\"16 CFR part 314\",\"sections\":[\"314.1\",\"314.2\",\"314.3\",\"314.4\",\"314.5\",\"314.6\"]}", "public_reason": null, "publish_status": "publish_ready", "quote": "(b) Scope. This part applies to the handling of customer information by all financial institutions over which the Federal Trade Commission (“FTC” or “Commission”) has jurisdiction. Namely, this part applies to those “financial institutions” over which the Commission has rulemaking authority pursuant to section 501(b) of the Gramm-Leach-Bliley Act. An entity is a “financial institution” if its business is engaging in an activity that is financial in nature or incidental to such financial activities as described in section 4(k) of the Bank Holding Company Act of 1956, 12 U.S.C. 1843(k), which incorporates activities enumerated by the Federal Reserve Board in 12 CFR 225.28 and 225.86. The “financial institutions” subject to the Commission's enforcement authority are those that are not otherwise subject to the enforcement authority of another regulator under section 505 of the Gramm-Leach-Bliley Act, 15 U.S.C. 6805. More specifically, those entities include, but are not limited to, mortgage lenders, “pay day” lenders, finance companies, mortgage brokers, account servicers, check cashers, wire transferors, travel agencies operated in connection with financial services, collection agencies, credit counselors and other financial advisors, tax preparation firms, non-federally insured credit unions, investment advisors that are not required to register with the Securities and Exchange Commission, and entities acting as finders. They are referred to in this part as “You.”", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "safeguards_requirements", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "ftc-safeguards" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-16.xml?part=314", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.glba-reg-p.disclosure_conditions": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Regulation P disclosure paths: the opt-out gate, the opt-out notice, revised notices, the service-provider, processing and other exceptions, redisclosure and reuse limits and the account-number limit, with notice, opt-out, consent, exception, reuse, redisclosure, account-number and recipient conditions", "fetch_event_id": null, "pinpoint": "{\"part\":\"12 CFR part 1016\",\"sections\":[\"1016.7\",\"1016.8\",\"1016.10\",\"1016.11\",\"1016.12\",\"1016.13\",\"1016.14\",\"1016.15\"]}", "public_reason": null, "publish_status": "publish_ready", "quote": "(a)(1) Conditions for disclosure. Except as otherwise authorized in this part, you may not, directly or through any affiliate, disclose any nonpublic personal information about a consumer to a nonaffiliated third party unless: (i) You have provided to the consumer an initial notice as required under § 1016.4 of this part; (ii) You have provided to the consumer an opt out notice as required in § 1016.7 of this part; (iii) You have given the consumer a reasonable opportunity, before you disclose the information to the nonaffiliated third party, to opt out of the disclosure; and (iv) The consumer does not opt out.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "disclosure_conditions", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "glba-reg-p" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=1016", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.glba-reg-p.glba_definitions": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Regulation P definitions of financial institution, consumer, customer, nonpublic personal information and publicly available information, with the Safeguards Rule definition of customer information", "fetch_event_id": null, "pinpoint": "{\"other\":\"16 CFR 314.2(d)\",\"paragraphs\":[\"(e)(1)\",\"(i)\",\"(j)(1)\",\"(l)\",\"(p)\",\"(q)\",\"(r)\"],\"part\":\"12 CFR part 1016\",\"section\":\"12 CFR 1016.3\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(l)(1) Except for entities described in paragraph (l)(3) of this section, financial institution means any institution the business of which is engaging in activities that are financial in nature or incidental to such financial activities as described in section 4(k) of the Bank Holding Company Act of 1956 (12 U.S.C. 1843(k)).", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "glba_definitions", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "glba-reg-p" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=1016", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.glba-reg-p.privacy_notice_rules": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Regulation P privacy notice rules: required contents, initial-notice event and timing, annual notice and its exception, revised notices, delivery, and the model form source", "fetch_event_id": null, "pinpoint": "{\"part\":\"12 CFR part 1016\",\"sections\":[\"1016.2\",\"1016.4\",\"1016.5\",\"1016.6\",\"1016.8\",\"1016.9\",\"Appendix\"]}", "public_reason": null, "publish_status": "publish_ready", "quote": "(a) General rule. The initial, annual, and revised privacy notices that you provide under §§ 1016.4, 1016.5, and 1016.8 of this part must include each of the following items of information, in addition to any other information you wish to provide, that applies to you and to the consumers to whom you send your privacy notice: (1) The categories of nonpublic personal information that you collect; (2) The categories of nonpublic personal information that you disclose; (3) The categories of affiliates and nonaffiliated third parties to whom you disclose nonpublic personal information, other than those parties to whom you disclose information under §§ 1016.14 and 1016.15 of this part; (4) The categories of nonpublic personal information about your former customers that you disclose and the categories of affiliates and nonaffiliated third parties to whom you disclose nonpublic personal information about your former customers, other than those parties to whom you disclose information under §§ 1016.14 and 1016.15; (5) If you disclose nonpublic personal information to a nonaffiliated third party under § 1016.13 (and no other exception in § 1016.14 or § 1016.15 applies to that disclosure), a separate statement of the categories of information you disclose and the categories of third parties with whom you have contracted; (6) An explanation of the consumer's right under § 1016.10(a) of this part to opt out of the disclosure of nonpublic personal information to nonaffiliated third parties, including the method(s) by which the consumer may exercise that right at that time; (7) Any disclosures that you make under section 603(d)(2)(A)(iii) of the Fair Credit Reporting Act (15 U.S.C. 1681a(d)(2)(A)(iii)) (that is, notices regarding the ability to opt out of disclosures of information among affiliates); (8) Your policies and practices with respect to protecting the confidentiality and security of nonpublic personal information; and (9) Any disclosure that you make under paragraph (b) of this section.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "privacy_notice_rules", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "glba-reg-p" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=1016", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.irc-6103.disclosure_paths": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Each captioned disclosure path of 26 U.S.C. 6103(c) to (o): requester, purpose, authorization, notice, redisclosure limit and records kept as that paragraph states them; the recordkeeping and safeguard paragraphs of (p) beside them", "fetch_event_id": null, "pinpoint": "{\"statute\":\"26 U.S.C. 6103\",\"subsections\":[\"(c)\",\"(d)\",\"(e)\",\"(f)\",\"(g)\",\"(h)\",\"(i)\",\"(j)\",\"(k)\",\"(l)\",\"(m)\",\"(n)\",\"(o)\",\"(p)\"]}", "public_reason": null, "publish_status": "publish_ready", "quote": "The Secretary may, subject to such requirements and conditions as he may prescribe by regulations, disclose the return of any taxpayer, or return information with respect to such taxpayer, to such person or persons as the taxpayer may designate in a request for or consent to such disclosure", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "disclosure_paths", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "irc-6103" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://uscode.house.gov/us/usc/119-120/t26/s6103/", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.irc-6103.returns_definitions": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Text of 26 U.S.C. 6103(a) and (b): the confidentiality rule and the definitions of return, return information, taxpayer return information, taxpayer identity, inspection and disclosure", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(a)\",\"(b)(1)\",\"(b)(2)\",\"(b)(3)\",\"(b)(6)\",\"(b)(7)\",\"(b)(8)\"],\"statute\":\"26 U.S.C. 6103\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "The term “return” means any tax or information return, declaration of estimated tax, or claim for refund required by, or provided for or permitted under, the provisions of this title which is filed with the Secretary by, on behalf of, or with respect to any person, and any amendment or supplement thereto, including supporting schedules, attachments, or lists which are supplemental to, or part of, the return so filed.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "returns_definitions", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "irc-6103" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://uscode.house.gov/us/usc/119-120/t26/s6103/", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.rfpa.access_procedures": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Each Right to Financial Privacy Act access procedure of 12 U.S.C. 3402 (customer authorization, administrative subpoena or summons, search warrant, judicial subpoena, formal written request) with process document, issuer, relevance standard, certification, customer notice, challenge path and delay", "fetch_event_id": null, "pinpoint": "{\"sections\":[\"3402\",\"3403(a)-(b)\",\"3404\",\"3405\",\"3406\",\"3407\",\"3408\",\"3409\",\"3410\",\"3411\"],\"statute\":\"12 U.S.C. chapter 35\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(1) such customer has authorized such disclosure in accordance with section 3404 of this title; (2) such financial records are disclosed in response to an administrative subpena or summons which meets the requirements of section 3405 of this title; (3) such financial records are disclosed in response to a search warrant which meets the requirements of section 3406 of this title; (4) such financial records are disclosed in response to a judicial subpena which meets the requirements of section 3407 of this title; or (5) such financial records are disclosed in response to a formal written request which meets the requirements of section 3408 of this title.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "access_procedures", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "rfpa" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.rfpa.exceptions": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Each Right to Financial Privacy Act exception named in 12 U.S.C. 3402 (3403(c) and (d), every paragraph of 3413, and 3414) with requester, purpose, record scope, certification, transfer limit and notice effect, quoted", "fetch_event_id": null, "pinpoint": "{\"sections\":[\"3403(c)\",\"3403(d)\",\"3413(a)-(r)\",\"3414(a)-(d)\"],\"statute\":\"12 U.S.C. chapter 35\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "Nothing in this chapter prohibits the disclosure of any financial records or information which is not identified with or identifiable as being derived from the financial records of a particular customer.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "exceptions", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "rfpa" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.rfpa.records_remedies": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Right to Financial Privacy Act record of disclosures, agency transfer record, cost reimbursement, civil remedy, injunctive relief, enforcement forum, good-faith defense and the edition of the kept text", "fetch_event_id": null, "pinpoint": "{\"sections\":[\"3404(c)\",\"3412\",\"3413(h)(6)\",\"3415\",\"3416\",\"3417\",\"3418\"],\"statute\":\"12 U.S.C. chapter 35\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "Any agency or department of the United States or financial institution obtaining or disclosing financial records or information contained therein in violation of this chapter is liable to the customer to whom such records relate in an amount equal to the sum of— (1) $100 without regard to the volume of records involved; (2) any actual damages sustained by the customer as a result of the disclosure; (3) such punitive damages as the court may allow, where the violation is found to have been willful or intentional; and (4) in the case of any successful action to enforce liability under this section, the costs of the action together with reasonable attorney's fees as determined by the court.", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "records_remedies", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "rfpa" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "table": "grain" }, "grain:m_federal_financial_privacy_statutes#US-federal.rfpa.rfpa_definitions": { "additional_sources": null, "capture_date": "2026-10-18", "claim_type": null, "display": "Right to Financial Privacy Act definitions of financial institution, financial record, Government authority, customer and person, quoted from 12 U.S.C. 3401", "fetch_event_id": null, "pinpoint": "{\"paragraphs\":[\"(1)\",\"(2)\",\"(3)\",\"(4)\",\"(5)\"],\"statute\":\"12 U.S.C. 3401\"}", "public_reason": null, "publish_status": "publish_ready", "quote": "(1) \"financial institution\", except as provided in section 3414 of this title, means any office of a bank, savings bank, card issuer as defined in section 1602(n) 1 of title 15, industrial loan company, trust company, savings association, building and loan, or homestead association (including cooperative banks), credit union, or consumer finance institution, located in any State or territory of the United States, the District of Columbia, Puerto Rico, Guam, American Samoa, or the Virgin Islands; (2) \"financial record\" means an original of, a copy of, or information known to have been derived from, any record held by a financial institution pertaining to a customer's relationship with the financial institution; (3) \"Government authority\" means any agency or department of the United States, or any officer, employee, or agent thereof; (4) \"person\" means an individual or a partnership of five or fewer individuals; (5) \"customer\" means any person or authorized representative of that person who utilized or is utilizing any service of a financial institution, or for whom a financial institution is acting or has acted as a fiduciary, in relation to an account maintained in the person's name;", "readiness": "ready", "reason_code": null, "ref": { "cell_key": "rfpa_definitions", "grain": "m_federal_financial_privacy_statutes", "jurisdiction": "US-federal", "row_key": "rfpa" }, "rendered": "value", "snapshot_path": null, "snapshot_resolved": false, "source_class": "S1", "source_sha256": null, "source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "table": "grain" } }, "class": "MAGNET", "content_file_sha256": "3f15731b6c037d0e53216e6f926628a4bfa9d268ee922afdb92b3ea75de90b63", "figure_slots": [], "generator": "page-generator/1", "held": { "cells": [], "counts": { "gap": 0, "no_quote": 0, "unconfirmed": 0, "unresolved": 0 }, "is_held": false }, "last_updated": "2026-10-18", "route": "/privacy-exposure/federal-financial-privacy-laws/", "schema": "pp-page-sources.v1", "tables": { "bank-account-verification-table": { "field_definitions": { "existence_evidence_scope": "Documents the bank customer identification rule lists as showing a legal entity's existence, and the provisions that reach individuals with authority or control over the account.", "risk_based_acceptance": "Risk-based identity verification procedures, the document and non-documentary method provisions and the address forms of the bank customer identification rule.", "role_distinctions": "Beneficial owner as defined for legal entity customers, with its ownership prong, its control prong and the officer titles listed, the trust rule and the individual who opens the account.", "status_vs_authority_events": "The ongoing customer due diligence paragraph of the bank anti-money laundering program rule: customer information updated on a risk basis, including beneficial owners of legal entity customers." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:bank-account-verification-table", "row_header": "Path", "rows": [ { "cells": { "existence_evidence_scope": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1020", "cell_locator": "US-federal.cip-cdd-entity.existence_evidence_scope", "publish_status": "publish_ready", "source_field": "existence_evidence_scope", "value": "Documents the bank customer identification rule lists as showing a legal entity's existence, and the provisions that reach individuals with authority or control over the account, quoted from 31 CFR 1020.220" }, "risk_based_acceptance": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1020", "cell_locator": "US-federal.cip-cdd-entity.risk_based_acceptance", "publish_status": "publish_ready", "source_field": "risk_based_acceptance", "value": "Risk-based identity verification procedures, the document and non-documentary method provisions and the address forms of the bank customer identification rule, quoted from 31 CFR 1020.220" }, "role_distinctions": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1010§ion=1010.230", "cell_locator": "US-federal.cip-cdd-entity.role_distinctions", "publish_status": "publish_ready", "source_field": "role_distinctions", "value": "Beneficial owner as defined for legal entity customers (ownership prong and control prong, with the officer titles listed), the trust rule and the individual who opens the account, quoted from 31 CFR 1010.230" }, "status_vs_authority_events": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1020", "cell_locator": "US-federal.cip-cdd-entity.status_vs_authority_events", "publish_status": "publish_ready", "source_field": "status_vs_authority_events", "value": "Ongoing customer due diligence paragraph of the bank anti-money laundering program rule (customer information updated on a risk basis, including beneficial owners of legal entity customers), quoted from 31 CFR 1020.210" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-31.xml?part=1020", "row_id": "cip-cdd-entity", "state": "cip-cdd-entity" } ], "scope_label": "1 paths" }, "boi-report-table": { "field_definitions": { "boi_report_contents": "Reporting-company and individual fields, accepted identification, initial, update and correction timing, and the form and manner FinCEN prescribes, quoted from the rule.", "boi_violation_provisions": "Federal provisions on reporting violations and on unauthorized disclosure or use of BOI: the statute's penalty paragraph and the implementing regulation paragraphs, quoted." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:boi-report-table", "row_header": "Path", "rows": [ { "cells": { "boi_report_contents": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-09/title-31.xml?section=1010.380", "cell_locator": "US-federal.boi-report.boi_report_contents", "publish_status": "publish_ready", "source_field": "boi_report_contents", "value": "BOI report: reporting-company and individual fields, accepted identification, initial, update and correction timing, and the form and manner FinCEN prescribes, quoted from 31 CFR 1010.380 as amended by the final rule" }, "boi_violation_provisions": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2021-title31/html/USCODE-2021-title31-subtitleIV-chap53-subchapII-sec5336.htm", "cell_locator": "US-federal.boi-report.boi_violation_provisions", "publish_status": "publish_ready", "source_field": "boi_violation_provisions", "value": "Federal provisions on reporting violations and on unauthorized disclosure or use of BOI: the statute's penalty paragraph and the two implementing regulation paragraphs, quoted" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-09/title-31.xml?section=1010.380", "row_id": "boi-report", "state": "boi-report" } ], "scope_label": "1 paths" }, "deposit-vs-product-label-table": { "field_definitions": { "deposit_vs_product_label": "Deposit, insured deposit, non-deposit product, hybrid product and uninsured financial product definitions, with the prohibition on implying that an uninsured product is insured and the non-deposit signage provision." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:deposit-vs-product-label-table", "row_header": "Path", "rows": [ { "cells": { "deposit_vs_product_label": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=328", "cell_locator": "US-federal.deposit-products.deposit_vs_product_label", "publish_status": "publish_ready", "source_field": "deposit_vs_product_label", "value": "Deposit, insured deposit, non-deposit product, hybrid product and uninsured financial product definitions, with the prohibition on implying that an uninsured product is insured and the non-deposit signage provision, quoted from 12 CFR part 328" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=328", "row_id": "deposit-products", "state": "deposit-products" } ], "scope_label": "1 paths" }, "dppa-motor-vehicle-records-table": { "field_definitions": { "dppa_definitions": "Definitions of personal information and highly restricted personal information.", "permitted_uses": "Each permitted use: the introductory clause and every paragraph of the use list, with requester, purpose, covered fields, consent condition and onward-disclosure rule, beside the general conditions.", "reseller_records": "Resale and redisclosure limits and the record-keeping duty: who keeps records, their content, retention and inspection." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:dppa-motor-vehicle-records-table", "row_header": "Path", "rows": [ { "cells": { "dppa_definitions": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2725.htm", "cell_locator": "US-federal.dppa.dppa_definitions", "publish_status": "publish_ready", "source_field": "dppa_definitions", "value": "DPPA definitions of personal information and highly restricted personal information, quoted from 18 U.S.C. 2725(3) and (4)" }, "permitted_uses": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2721.htm", "cell_locator": "US-federal.dppa.permitted_uses", "publish_status": "publish_ready", "source_field": "permitted_uses", "value": "Each permitted use of 18 U.S.C. 2721(b): the introductory clause and every paragraph of the use list, with requester, purpose, covered fields, consent condition and onward-disclosure rule, beside the general conditions of subsection (a), (d) and (e)" }, "reseller_records": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2721.htm", "cell_locator": "US-federal.dppa.reseller_records", "publish_status": "publish_ready", "source_field": "reseller_records", "value": "Resale and redisclosure limits and the record-keeping duty of 18 U.S.C. 2721(c): who keeps records, their content, retention and inspection" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2725.htm", "row_id": "dppa", "state": "dppa" } ], "scope_label": "1 paths" }, "dppa-remedies-table": { "field_definitions": { "remedies_penalties": "The civil action and relief, the governmental civil penalty and the criminal fine, with pinpoints." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:dppa-remedies-table", "row_header": "Path", "rows": [ { "cells": { "remedies_penalties": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2724.htm", "cell_locator": "US-federal.dppa.remedies_penalties", "publish_status": "publish_ready", "source_field": "remedies_penalties", "value": "DPPA civil action and relief (18 U.S.C. 2724), governmental civil penalty and criminal fine (18 U.S.C. 2723), with pinpoints" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap123-sec2724.htm", "row_id": "dppa", "state": "dppa" } ], "scope_label": "1 paths" }, "ein-responsible-party-table": { "field_definitions": { "ein_responsible_party": "EIN application line labels, the responsible-party definition, the nominee restriction, the third-party designee authorization and the update path." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:ein-responsible-party-table", "row_header": "Path", "rows": [ { "cells": { "ein_responsible_party": { "cell_citation_url": "https://www.irs.gov/instructions/iss4", "cell_locator": "US-federal.ein-responsible-party.ein_responsible_party", "publish_status": "publish_ready", "source_field": "ein_responsible_party", "value": "EIN application line labels, the responsible-party definition, the nominee restriction, the third-party designee authorization and the Form 8822-B update path, quoted from IRS instructions and the IRS responsible-party page" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.irs.gov/instructions/iss4", "row_id": "ein-responsible-party", "state": "ein-responsible-party" } ], "scope_label": "1 paths" }, "glba-privacy-notices-table": { "field_definitions": { "glba_definitions": "Regulation P definitions of financial institution, consumer, customer, nonpublic personal information and publicly available information, with the Safeguards Rule definition of customer information.", "privacy_notice_rules": "Required contents of the privacy notice, the initial-notice event and its timing, the annual notice and its exception, revised notices, delivery, and the source of the model form." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:glba-privacy-notices-table", "row_header": "Path", "rows": [ { "cells": { "glba_definitions": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=1016", "cell_locator": "US-federal.glba-reg-p.glba_definitions", "publish_status": "publish_ready", "source_field": "glba_definitions", "value": "Regulation P definitions of financial institution, consumer, customer, nonpublic personal information and publicly available information, with the Safeguards Rule definition of customer information" }, "privacy_notice_rules": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=1016", "cell_locator": "US-federal.glba-reg-p.privacy_notice_rules", "publish_status": "publish_ready", "source_field": "privacy_notice_rules", "value": "Regulation P privacy notice rules: required contents, initial-notice event and timing, annual notice and its exception, revised notices, delivery, and the model form source" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=1016", "row_id": "glba-reg-p", "state": "glba-reg-p" } ], "scope_label": "1 paths" }, "glba-sharing-limits-table": { "field_definitions": { "disclosure_conditions": "The opt-out gate, the opt-out notice, revised notices, the service-provider, processing and other exceptions, and the redisclosure, reuse and account-number limits, with the notice, opt-out, consent, exception, reuse, redisclosure, account-number and recipient conditions." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:glba-sharing-limits-table", "row_header": "Path", "rows": [ { "cells": { "disclosure_conditions": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=1016", "cell_locator": "US-federal.glba-reg-p.disclosure_conditions", "publish_status": "publish_ready", "source_field": "disclosure_conditions", "value": "Regulation P disclosure paths: the opt-out gate, the opt-out notice, revised notices, the service-provider, processing and other exceptions, redisclosure and reuse limits and the account-number limit, with notice, opt-out, consent, exception, reuse, redisclosure, account-number and recipient conditions" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-12.xml?part=1016", "row_id": "glba-reg-p", "state": "glba-reg-p" } ], "scope_label": "1 paths" }, "irc-6103-tax-returns-table": { "field_definitions": { "disclosure_paths": "Each captioned disclosure path: requester, purpose, authorization, notice, redisclosure limit and records kept as that paragraph states them, with the recordkeeping and safeguard paragraphs beside them.", "returns_definitions": "The confidentiality rule and the definitions of return, return information, taxpayer return information, taxpayer identity, inspection and disclosure." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:irc-6103-tax-returns-table", "row_header": "Path", "rows": [ { "cells": { "disclosure_paths": { "cell_citation_url": "https://uscode.house.gov/us/usc/119-120/t26/s6103/", "cell_locator": "US-federal.irc-6103.disclosure_paths", "publish_status": "publish_ready", "source_field": "disclosure_paths", "value": "Each captioned disclosure path of 26 U.S.C. 6103(c) to (o): requester, purpose, authorization, notice, redisclosure limit and records kept as that paragraph states them; the recordkeeping and safeguard paragraphs of (p) beside them" }, "returns_definitions": { "cell_citation_url": "https://uscode.house.gov/us/usc/119-120/t26/s6103/", "cell_locator": "US-federal.irc-6103.returns_definitions", "publish_status": "publish_ready", "source_field": "returns_definitions", "value": "Text of 26 U.S.C. 6103(a) and (b): the confidentiality rule and the definitions of return, return information, taxpayer return information, taxpayer identity, inspection and disclosure" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://uscode.house.gov/us/usc/119-120/t26/s6103/", "row_id": "irc-6103", "state": "irc-6103" } ], "scope_label": "1 paths" }, "rfpa-government-access-table": { "field_definitions": { "access_procedures": "Each access procedure for a Government authority: customer authorization, administrative subpoena or summons, search warrant, judicial subpoena and formal written request, with process document, issuer, relevance standard, certification, customer notice, challenge path and delay.", "exceptions": "Each named exception to the access procedures, with requester, purpose, record scope, certification, transfer limit and notice effect, quoted.", "rfpa_definitions": "Definitions of financial institution, financial record, Government authority, customer and person, quoted from the statute." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:rfpa-government-access-table", "row_header": "Path", "rows": [ { "cells": { "access_procedures": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "cell_locator": "US-federal.rfpa.access_procedures", "publish_status": "publish_ready", "source_field": "access_procedures", "value": "Each Right to Financial Privacy Act access procedure of 12 U.S.C. 3402 (customer authorization, administrative subpoena or summons, search warrant, judicial subpoena, formal written request) with process document, issuer, relevance standard, certification, customer notice, challenge path and delay" }, "exceptions": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "cell_locator": "US-federal.rfpa.exceptions", "publish_status": "publish_ready", "source_field": "exceptions", "value": "Each Right to Financial Privacy Act exception named in 12 U.S.C. 3402 (3403(c) and (d), every paragraph of 3413, and 3414) with requester, purpose, record scope, certification, transfer limit and notice effect, quoted" }, "rfpa_definitions": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "cell_locator": "US-federal.rfpa.rfpa_definitions", "publish_status": "publish_ready", "source_field": "rfpa_definitions", "value": "Right to Financial Privacy Act definitions of financial institution, financial record, Government authority, customer and person, quoted from 12 U.S.C. 3401" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "row_id": "rfpa", "state": "rfpa" } ], "scope_label": "1 paths" }, "rfpa-remedies-table": { "field_definitions": { "records_remedies": "Record of disclosures, agency transfer record, cost reimbursement, civil remedy, injunctive relief, enforcement forum, good-faith defense and the edition of the kept text." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:rfpa-remedies-table", "row_header": "Path", "rows": [ { "cells": { "records_remedies": { "cell_citation_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "cell_locator": "US-federal.rfpa.records_remedies", "publish_status": "publish_ready", "source_field": "records_remedies", "value": "Right to Financial Privacy Act record of disclosures, agency transfer record, cost reimbursement, civil remedy, injunctive relief, enforcement forum, good-faith defense and the edition of the kept text" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.govinfo.gov/content/pkg/USCODE-2024-title12/html/USCODE-2024-title12-chap35.htm", "row_id": "rfpa", "state": "rfpa" } ], "scope_label": "1 paths" }, "safeguards-rule-table": { "field_definitions": { "safeguards_requirements": "Coverage, program elements, service-provider duties and the notification event, with its trigger, fields, timing and channel." }, "last_updated": "2026-10-18", "matrix_id": "m_federal_financial_privacy_statutes:safeguards-rule-table", "row_header": "Path", "rows": [ { "cells": { "safeguards_requirements": { "cell_citation_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-16.xml?part=314", "cell_locator": "US-federal.ftc-safeguards.safeguards_requirements", "publish_status": "publish_ready", "source_field": "safeguards_requirements", "value": "Safeguards Rule: coverage, program elements, service-provider duties and the notification event (trigger, fields, timing and channel)" } }, "jurisdiction": "US-federal", "last_checked": "2026-10-18", "official_source_url": "https://www.ecfr.gov/api/versioner/v1/full/2026-10-15/title-16.xml?part=314", "row_id": "ftc-safeguards", "state": "ftc-safeguards" } ], "scope_label": "1 paths" } }, "template": "matrix", "tier": "T1", "warnings": [] }