FHA’s Releases 12-Hour Cyber Incident Notification Rule

On May 23, the U.S. Department of Housing and Urban Development (HUD) announced that Federal Housing Administration-approved Mortgagees are subject to a heightened cybersecurity incident reporting regime. The new requirement, which amends the Single Family Housing Policy Handbook 4000.1, requires FHA-approved Mortgagees to report “suspected” “Significant Cybersecurity Incidents” within 12 hours of detection….
By: Sheppard Mullin Richter & Hampton LLP