Skip to main content

Privacy Policy


The Federal Financial Institutions Examination Council (FFIEC) and its member entities are committed to maintaining the privacy of your personal information. The FFIEC does not collect personally identifiable information about you when you visit our sites unless you voluntarily choose to provide such information. If you choose to provide such information, we use it only to fulfill your request for information or services or to assist us in carrying out our mission. We will not disclose, give, sell, or transfer any information about our website visitors, unless required to do so by applicable law.

Submitting Information Voluntarily

Submitting personal information (name, address, telephone number, email address, etc.) is voluntary and is not required to access information on our website. However, you may choose to provide the FFIEC with personal information — for example by completing a form or sending us an email. Before you do, there are a few things that we would like you to know:

We will use the information that you provide to respond to your message or help us get you to the information or services you request. This process may involve sharing the information you provide with staff at federal agencies that administratively support the FFIEC.  

Computer web server logs may be preserved if administratively necessary and are scheduled for destruction in accordance with federal records guidelines as approved by NARA or the FFIEC member entities. The information in the logs may be used at any time as necessary to prevent security breaches and to ensure the integrity of the data on our servers.

Interactions with Children Online

The FFIEC is committed to the protection of children’s online privacy and does not collect any personal information from children when visiting our website. If, however, a child chooses to provide us with personally identifying information, through an e-mail, web form or other means, it will only be used to respond to the writer's question or request. The information will not be retained, used for another purpose, or shared with third parties.

Non-Personal Information Automatically Collected and Stored

To improve the quality of our website services, the FFIEC’s public website uses Google’s Universal Analytics software to gather and temporarily store a variety of information about all our website visitors. This happens automatically whenever someone visits our website. The information we collect about every website visitor includes:

  • The date and time of your visit to our website;
  • The pages and documents that you view on our website;
  • The URL of the website that you visited prior to ours;
  • The name of the domain that you use to access the internet;
  • The type and version of your web browser and operating system;
  • Your location at the time of your visit, down to the city-level; and
  • Other more technical information, including the HTTP status code, Windows NT code, number of bytes sent, number of bytes received, duration (in seconds) to fulfill the request, server port number address, and protocol version.

For additional information, please visit the privacy policy of Google. 

Links to Other Websites

The FFIEC’s website and web-based applications sometimes contain links to other federal agencies, private organizations, and commercial entities. We are not responsible for the privacy practices or content of any non-FFIEC websites and providing a link to non-FFIEC website is not intended to be an endorsement of the website or its content. We encourage you to review the privacy policy of every website that you visit. For further information about the FFIEC's external links policy, visit our Disclaimers section.

Website Security

This is a protected U.S. government website. To intentionally cause damage to this website, or to any FFIEC electronic facility or data through the knowing transmission of any program, information, code, or command is unlawful. Such attempts are strictly prohibited and may be punishable under the Computer Fraud and Abuse Act of 1986 and the National Information Infrastructure Protection Act. You can be arrested and prosecuted for violating these laws.

Except for authorized law enforcement investigations, no other attempts are made to identify individual users or their usage habits.