PanamaSuperintendency of Banks Agreement 006-2011, Reporting of Electronic Banking Security Incidents
In force since .
A vulnerability and incident reporting rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Reporting
As of .
What it requires
- This binds official banks, general-licence banks and international-licence banks that provide services or products to their customers through electronic banking (reached by declaring that you are a bank) (Article 1).
- Report to the Superintendencia de Bancos any event or attempted fraud in your electronic banking services, using the form it provides (Article 17).
- Send the report within the period the Superintendencia sets, even if the origin of the event has not yet been determined, giving the date and time, the type, the electronic channel affected, the number of customers affected, the estimated amount and the other items the form asks for (Article 17).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Enforcement body
The Superintendent of Banks, who sanctions a breach of the Acuerdo under Title IV of the Banking Law.
What this law does
Article 1 applies the Acuerdo to official banks, general-licence banks and international-licence banks that provide services or products to their customers through electronic banking. Article 17 requires a bank to report to the Superintendencia any event or attempted fraud in its electronic banking services, using the form provided. Article 17 requires the report to be sent within the period the Superintendencia sets, even if the origin of the event has not yet been determined. Article 24 provides that the Acuerdo applies from .
When LexLint raises it
When your app profile says your app is a bank.