31.3 Regulation S and financial-record reimbursement

Separate lawful access from cost reimbursement

Regulation S, Federal Reserve Part 219, includes rules for reimbursement of certain financial-record production costs under the Right to Financial Privacy Act (RFPA). RFPA access procedures determine when records can be released to a federal government authority. Regulation S reimbursement determines which directly incurred costs may be paid and under what conditions. An invoice does not make an unlawful disclosure lawful, and a valid request does not automatically make every expense reimbursable.

RFPA generally protects records relating to individuals and small partnerships within its definition. Corporations and other excluded customers do not automatically receive the same protections. State authorities are not simply federal government authorities for RFPA purposes, although other laws can apply. Determine the customer, requesting authority, legal process and any exception before deciding both disclosure and reimbursement.

Reimbursable work and rates

Regulation S identifies necessary, directly incurred search and processing, reproduction and transportation costs. The rule supplies rates and limitations; a bank cannot replace them with any preferred commercial fee schedule for covered government reimbursement. Staff time unrelated to locating or producing requested records should not be charged merely because the request caused inconvenience.

Search and processing involves locating, retrieving and preparing the requested financial information. Reproduction concerns making copies, and transportation concerns necessary delivery. The rule limits reimbursement for activities such as analyzing data or legal advice that are not covered search and production costs. Identify the work performed, rather than assigning all staff hours to one broad category.

For an examination calculation, use the rates expressly provided in the problem when identified as the applicable authorized rates. In operations, check the current Part 219 schedule. Do not borrow a fee rate from an old bank policy, a state subpoena statute or another regulatory regime. Reimbursement under this rule is not the same as a customer garnishment processing fee.

Exceptions to reimbursement

Section 219.4 lists exceptions. They include specified reports required by laws or regulations, supervisory or other exempt access and other categories stated in the rule. The exact request matters. A bank should not invoice the government for a mandatory regulatory report simply because preparing the report consumed staff time.

A suspicious activity report request also requires attention to separate BSA confidentiality and supporting-documentation duties. Regulation S is not permission to sell confidential SAR information or refuse an authorized supporting-document request until someone pays a commercial rate. The disclosure, retention and reimbursement analyses can involve different authorities.

Similarly, records related to the bank’s own activities or specified requests involving entities outside RFPA’s customer protections may fall within exceptions. Review the applicable provision, document the determination and escalate uncertainty before disclosing records or demanding payment. Merely recognizing a federal agency’s letterhead is insufficient to classify the request.

Maintain a defensible claim

A reimbursement claim should identify the request and authority, production period, responsive records, staff work and time, copy quantities and delivery costs. Keep the request, certificate where required, production log and invoice together. Provide an itemized basis that can be assessed against the regulatory rates and exceptions. Do not add duplicate charges when one retrieval supports several requested copies.

Evidence of lawful release belongs in the same workflow even though it answers a different question. Verify required RFPA certification, customer notice or applicable exception, scope and timing. Release only responsive information through an authorized channel and preserve the production record. Costs cannot justify an overly broad disclosure of unrelated customers’ information.

Apply a mixed-request scenario

A federal agency requests covered individual account records through valid RFPA process and also asks the bank to submit a routine mandatory regulatory report. The compliance officer should classify the two requests separately. Necessary record-production costs may be reimbursable under Part 219 if no exception applies, while the mandatory report can fall within a reimbursement exception. One invoice marked federal request cannot erase that difference.

If a second request seeks a corporation’s records, determine the access authority and privacy duties without pretending the corporation is an RFPA individual customer. The reimbursement question must also be checked independently. A record set produced quickly can still be mishandled if the bank skipped certification or applied the wrong fee rule.

Subpart B of Regulation S also has financial-record requirements relating to funds transfers. That function should not be confused with Subpart A cost reimbursement or the Treasury BSA rules. Use the appropriate subpart for the actual question.

Federal Reserve Regulation S overview and reimbursement exceptions provide the primary framework. The exam skill is to distinguish access, production, retention and reimbursement rather than treating them as a single permission.