CNBS Minimum Guidelines to Prevent and Mitigate Cyber Fraud and Scams Against Financial Users, Incident Reporting
Lineamientos mínimos para prevenir y mitigar la ocurrencia de fraudes y estafas cibernéticas en contra del usuario financiero (Circular… CNBS No.008/2023, Resolución GRD No.365/26-05-2023), art. 17
In force since .
A vulnerability and incident reporting rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Reporting
As of .
What it requires
- This binds the institutions supervised by the Comisión Nacional de Bancos y Seguros, for transactions and procedures carried out through the digital channels they offer to financial users (reached by declaring that you provide financial services) (Article 2).
- Report to the Comisión the cyber fraud incidents against financial users on the business day after the incident is identified, giving the data of the users affected and general information describing the incident and the contact in the institution (Article 17).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Enforcement body
The Comisión Nacional de Bancos y Seguros, to which supervised institutions report cyber fraud incidents.
What this law does
Article 2 applies the guidelines to the institutions supervised by the Comisión for transactions and procedures carried out through the digital channels they offer to financial users. Article 17 requires supervised institutions to report to the Comisión cyber fraud incidents against financial users on the business day after the incident is identified. The guidelines apply from their publication in the Diario Oficial La Gaceta.
When LexLint raises it
When your app profile says your app provides financial services.