10
Consumer Laws and Regulations
We are also subject to certain consumer laws and regulations that are designed to protect consumers in
transactions with banks. While the following list is not exhaustive, these laws and regulations include the Truth in
Lending Act, the Truth in Savings Act, the Electronic Funds Transfer Act, the Expedited Funds Availability Act, the
Equal Credit Opportunity Act, and the Fair Housing Act, among others. These laws and regulations among other
things prohibit discrimination on the basis of race, gender or other designated characteristics and mandate various
disclosure requirements and regulate the manner in which financial institutions must deal with customers when
taking deposits or making loans to such customers. These and other laws also limit finance charges or other fees or
charges earned in our activities.  We must comply with the applicable provisions of these consumer protection laws
and regulations as part of our ongoing customer relations.
Technology Risk Management and Consumer Privacy
State and federal banking regulators have issued various policy statements emphasizing the importance of
technology risk management and supervision in evaluating the safety and soundness of depository institutions with
respect to banks that contract with outside vendors to provide data processing and core banking functions.  The use
of technology-related products, services, delivery channels and processes expose a bank to various risks, particularly
operational, privacy, security, strategic, reputation and compliance risk.  Banks are generally expected to prudently
manage technology-related risks as part of their comprehensive risk management policies by identifying, measuring,
monitoring and controlling risks associated with the use of technology.
Under Section 501 of the Gramm-Leach-Bliley Act, the federal banking agencies have established appropriate
standards for financial institutions regarding the implementation of safeguards to ensure the security and
confidentiality of customer records and information, protection against any anticipated threats or hazards to the
security or integrity of such records and protection against unauthorized access to or use of such records or
information in a way that could result in substantial harm or inconvenience to a customer.  Among other matters, the
rules require each bank to implement a comprehensive written information security program that includes
administrative, technical and physical safeguards relating to customer information.
Under the Gramm-Leach-Bliley Act, a financial institution must also provide its customers with a notice of
privacy policies and practices. Section 502 prohibits a financial institution from disclosing nonpublic personal
information about a consumer to nonaffiliated third parties unless the institution satisfies various notice and opt-out
requirements and the customer has not elected to opt out of the disclosure. Under Section 504, the agencies are
authorized to issue regulations as necessary to implement notice requirements and restrictions on a financial
institution’s ability to disclose nonpublic personal information about consumers to nonaffiliated third parties.
Under the final rule the regulators adopted, all banks must develop initial and annual privacy notices which describe
in general terms the bank’s information sharing practices. Banks that share nonpublic personal information about
customers with nonaffiliated third parties must also provide customers with an opt-out notice and a reasonable
period of time for the customer to opt out of any such disclosure (with certain exceptions). Limitations are placed on
the extent to which a bank can disclose an account number or access code for credit card, deposit, or transaction
accounts to any nonaffiliated third party for use in marketing.
Monetary Policy
Banks are affected by the credit policies of other monetary authorities, including the Federal Reserve Board,