To support timely and effective responses to cybersecurity threats, the California Department of Financial Protection and Innovation (DFPI) now encourages licensees to promptly report certain cyber incidents.
Although this is not a required form (the DFPI only “encourages” use of the form by licensees), the DFPI also states “Licensees required to report cybersecurity incidents to federal regulator(s) should submit a Cybersecurity Incident Report to the DFPI promptly.”
Because all federally-insured state chartered credit unions are required to report cybersecurity incidents to the National Credit Union Administration (NCUA), these credit unions should submit the Cybersecurity Incident Report to the DFPI as well.
Early detection and reporting are critical to reducing harm and strengthening security.
Learn when and how to report a cyber incident, and access the DFPI’s new reporting form.
The California DFPI recently sent out its biennial IT survey to all bank, credit union, foreign bank, and trust company licensees.
The survey was initially emailed on August 25, 2025 and is due no later than 11:59 p.m. PT on September 23, 2025.
The survey was sent to each institution’s designated email address in accordance with California Financial Code §331.5. Please take a moment to ensure that an appropriate email address is on file, and that the mailbox is monitored regularly.
The email contained a secure link to your individual institutions survey. The electronic 2025 IT Systems Survey is designed to help the DFPI assess the level of each licensee’s IT risk, allocate resources, and prepare for examinations.
Licensees are required to submit the survey pursuant to California Financial Code §455. Responses are kept confidential and used only in the examination process.
If you have questions, credit unions can contact: Financial Institutions Manager Eric Dinkelman at eric.dinkelman@dfpi.ca.gov.
For technical concerns, please send an email to survey@dfpi.ca.gov.
For more information, email Heather Line.
Your League-member benefits include the Compliance Hotline — providing exclusive access to dedicated compliance experts:
Using the above phone number and email address, you can gain access to a knowledgeable team that’s ready to address all your credit union’s compliance inquiries — promptly and efficiently. With the Compliance Hotline, you can proactively respond to impromptu questions and issues by getting clarity and insight on technical topics that normally slow you down. We want to help you unlock the full potential of your League membership by leveraging the resources and support you need to navigate the complex world of compliance effortlessly. We’re ALWAYS just a phone call or email away!
Additionally, other League-member compliance resources include:
For more information, email Lisa Quaranta.
Powered by ViClarity, a California and Nevada Credit Union Leagues company.
