May 22, 1979
79-35 MEMORANDUM OPINION FOR THE DEPUTY
ATTORNEY GENERAL
Right to Financial Privacy Act of 1978 (12 U.S.C.
§ 3401)—Banks—Disclosure of Customer Financial
Records
This responds to your request for our opinion o f April 30 on the follow
ing questions concerning the Right to Financial Privacy Act (A ct):1
(1) To what extent does the Act affect the ability o f a bank
supervisory agency to report to the Department o f Justice viola
tions o f the law that it uncovers?
(2) W hat kinds o f inform ation may be included as part o f the
notification that is explicitly permitted banks under § 1113(h)(5)
(12 U.S.C. § 3413) or that may be impliedly permitted bank
supervisory agencies?
(3) W hat is the interplay o f § 1112 (12 U .S.C . § 3412) o f the
Act and the ability o f bank supervisory agencies to notify the
Department o f possible offenses without giving notice to
customers?
These issues arise because o f the restrictions the Act has placed on
Federal agencies’ access to and dissemination o f the financial records o f
bank custom ers.2
Our conclusions may be summarized as follows: first, a report that a
customer’s financial records may relate to a criminal offense, when based
on a summary or analysis o f the records, is itself a “ financial record”
within the meaning o f § 1102(2); second, with the exception o f § 1113(h),
1 The Right to Financial Privacy Act, 12 U .S.C . § 3401 et seq., was enacted as Title XI of
the Financial Institutions Regulatory Act o f 1978, Pub. L. No. 95-630, 92 Stat. 3697. The
section references in this opinion are to those in title XI.
1 In § 1101(4)—(5) o f the A ct, a “ custom er” means an individual or a partnership o f five or
fewer individuals, who used or is using any service o f a financial institution. T he financial
records o f corporations, larger partnerships, or other legal entities are not covered and access
to such records is not affected.
217
the procedures in § 1112 are the only ones expressly provided for a super
visory agency to make such a report to a law enforcement agency; third,
notwithstanding § 1112, implied authority for a bank supervisory agency
to make such a report exists in a narrow class o f cases, namely, possible
violations o f criminal statutes that are part o f the regulatory system en
forced by the supervisory agency; fourth, the report o f possible criminal
offenses expressly permitted by §§ 1103(c) and 1113(h)(5), and impliedly
permitted for “ regulatory” crimes, may be specific enough to permit the
law enforcement agency to request the primary records but may not be so
detailed as to am ount to a transfer o f the substance o f the original records.
We are informed by your staff that the background to your request is as
follows. Before the enactm ent o f the A ct, a supervisory agency routinely
inspected custom er records in the course o f examining the financial in
stitutions under its charge.3 W hen this led the agency to believe that a
Federal offense might have been committed by the customer or others, it
would report to the proper Federal enforcement agency. The report would
begin with a summary o f the reasons for believing that an offense had
been committed and would proceed with a detailed analysis o f the sup
porting customer records involved. The offenses tended to fall into two
groups. The first involved misuse o f authority by an officer or employee
o f the financial institution, whether or not in concert with a custom er.4
The second involved offenses not related to the management o f the institu
tion. We are informed that referrals by supervisory agencies o f offenses
not involving the financial institution were rare. Accordingly, this opinion
will focus on the authority o f the supervisory agencies to notify law en
forcement agencies o f offenses affecting the financial institution and the
authority o f the law enforcement agencies to receive such referrals.
The extent to which the Act affects the ability o f a bank supervisory
agency to report violations to the Departm ent o f Justice depends on four
factors: the ability o f the supervisory agency to report before the Act was
passed; the A ct’s definition o f financial record inform ation; its restric
tions on the supervisory agencies’ access to records, and the A ct’s re
strictions on their referral power.
* Section 1101(6) o f the Act defines “ supervisory agency” to mean:
with respect to any particular financial institution any o f the following which has statutory
authority to examine the financial condition or business operations o f that institution—
(A) the Federal Deposit Insurance C orporation;
(B) the Federal Savings and L oan Insurance C orporation;
(C) the Federal H om e L oan Bank Board;
(D) the National Credit Union Adm inistration;
(E) the Board o f G overnors o f the Federal Reserve System;
(F) the C om ptroller o f the Currency;
(G) the Securities and Exchange Commission;
(H) the Secretary o f the Treasury, with respect to the Bank Secrecy Act and the
Currency and Foreign Transactions Reporting Act (Pub. L. N o. 91-508, title I and
II); or
(I) any State banking or securities departm ent or agency.
4 See. e.g., 18 U .S.C . §§ 656-657, 1005-1006.
218
The supervisory agencies are authorized by statute to examine the af
fairs o f financial institutions under their jurisdiction.5 The examining
function has included reporting to the Department o f Justice irregularities
that may am ount to violation o f the criminal statutes applicable to finan
cial institutions.6 These statutes were originally enacted as part o f the
Federal regulatory system for financial institutions. Their purpose is to
protect the solvency and integrity o f the institutions against willful misuse
o f their funds.7 It was considered an integral part o f the supervisory agen
cies’ duty to protect financial institutions and their depositors to inform
the proper law enforcement authorities o f those instances o f mismanage
ment that appeared to be criminal. As stated in Cooper v. O ’Conner, 99 F.
(2d) 135, 140 (D.C. Cir. 1938):
By reason o f their performance o f duties clearly assigned, the facts
and evidence which suggest criminal conduct upon the part o f
bank officials are revealed to such [Federal] officers. It is the duty
o f all citizens to reveal such evidence, o f which they may have
knowledge, at the risk o f being guilty o f misprision o f felony for
failing to do so. In the case o f an official, his failure to act under
such circumstances would in addition, constitute serious
malfeasance in office. In the present case, appellees were charged
with responsibility for the collection and conservation o f the assets
o f a bank. It would be absurd to contend that the duties o f such
an officer—so charged and so peculiarly aware o f facts suggesting
that certain persons were engaged in the spoliation o f those very
assets—should stop abruptly at the point where the initiation of
criminal proceedings became necessary to protect such assets.
There was no statutory restriction on their power to report offenses. See,
Bank o f America National Trust & Savings Assn. v. Douglas, 105 F. (2d)
100, 103-104 (D.C. Cir. 1939); 29 Op. A tt’y Gen. 555 (1912).
We must consider, then, the extent to which Congress has affected the
previous power arid duty o f the supervisory agencies to report violations
o f law to this Departm ent. The Act affects this power in three ways. First,
§§ 1102 and 1113 restrict the conditions under which the supervisory agen
cies may obtain access to the records in the hands o f the financial institu
tion. Second, §§ 1112 and 1113(h) place express restrictions on
disseminating inform ation once access has been obtained. Third, § 1101(2)
defines the term “ financial record” broadly enough to include inform a
tion derived from the primary records.
’ See, e.g., 12 U .S.C . § 481 (Com ptroller o f the Currency); 12 U .S.C . § 1440 (Federal
Hom e Loan Bank Board); 12 U .S.C . § 1756 (National Credit Union Adm inistration); 12
U .S.C. § 1730(m)(l) (Federal Savings and Loan Insurance Corporation); 12 U .S.C . § 1820(b)
(Federal Deposit Insurance C orporation).
‘ See 18 U .S.C . §§ 213, 215, 656-657, 1005-1006.
1 See, e.g., United Slates v. Darby, 289 U .S. 224 (1933); United States v. Corbett, 215 U .S.
233 (1909); United States v. Manderson, 511 F. (2d) 179 (5th Cir. 1975); United States v.
Wilson, 500 F. (2d) 715 (5th Cir. 1974); Weir v. United States, 92 F. (2d) 634 (7th Cir. 1937).
219
Initial access by a Governm ent agency to records in the hands o f a
financial institution is governed by § 1102. It prescribes the general re
quirement that access must be obtained through one o f the formal
methods set out in §§ 1104-1108, subject to notice to the customer and to
judicial supervision under §§ 1109-1110. It further provides that, no t
withstanding the general requirem ent, initial access may be obtained
through the exceptions contained in §§ 1103(c)— (d), 1113, and 1114. O f
these, § 1113(b) and (h) are relevant to the functions o f the supervisory
agencies.
Section 1113(b) provides:
Nothing in this title prohibits examination by or disclosure to any
supervisory agency o f financial records or inform ation in the ex
ercise o f its supervisory, regulatory, or m onetary functions with
respect to a financial institution.
This is intended to give the supervisory agencies access to customer records
in order to conduct examination.
In addition, § 1113(h)(1)(A) permits a Governm ent authority to have
access to customer records in connection with a lawful examination, in
spection, or investigation o f the institution or o f a legal entity not a
customer.* The investigating agency must certify that the investigation is
lawful; transfer o f the primary records to another agency is restricted.
§ 1113(h)(2), (4). However, under § 1113(h)(5) the agency in possession
may notify another agency with proper jurisdiction “ that financial records
obtained pursuant to this subsection may relate to a potential civil,
criminal, or regulatory violation by a custom er,” and the notified agency
may then seek access under the procedures provided by the Act. By its
terms, § 1113(h)(1)(A) may be used as authority to examine a financial in
stitution, thereby expressly permitting a supervisory agency to notify a law
enforcement agency under § 1113(h)(5). We are informed, however, that
the supervisory agencies prefer to obtain access under § 1113(b) in order to
avoid the certification process required by § 1103(b) and§ 1113(h)(2).
Unless one o f the exceptions in § 1113-1114 applies, § 1112 o f the Act
provides the mechanism for disseminating financial records obtained from
the acquiring agency to other agencies. U nder subsection (a), the
transferor agency must certify that the records are relevant to a legitimate
law enforcement inquiry within the jurisdiction o f the recipient agency.
Under subsection (b)-(c), the transferor must notify the customer within
14 days unless a court authorizes delayed notice.9 Subsection (d) expressly
excludes from the A ct’s restrictions the exchange o f inform ation among
supervisory agencies.
' This m eans, in effect, a partnership o f more than five individuals or a legal person not an
individual. See note 2, supra.
' T he reasons justifying delayed notice provided by § 1109(a)(3) are:
(3) there is reason to believe th at such notice will result in—
(Continued)
220
As reported to the House, § 1112 o f the Act provided:
Nothing in this title prohibits any supervisory agency from ex
changing examination reports or other information with another
supervisory agency, or from supplying information to a prosecu
tion or enforcement agency concerning a possible violation o f a
regulation or statute administered by the supervisory agency.
[Emphasis added.]10
This language would have expressly continued the existing referral prac
tices o f the supervisory agencies for offenses relating to the financial in
stitution. It was deleted when the present § 1112 was introduced in an
amendment offered by Representatives Goldwater and M cKinney." The
effect o f the am endm ent, Representative Goldwater explained, “ is to
force an agency to justify beforehand its request for inform ation, leave a
paper trail o f the transaction, and only upon court agreement not notify
an individual.” 12 Representative McKinney introduced a letter from As
sistant A ttorney General Wald supporting the amendment; the letter did
not distinguish referrals by supervisory agencies from other interagency
transfers.13
The term “ financial records” is defined by § 1101(2) o f the Act to in
clude “ an original of, a copy of, or information known to have been
derived fro m ” any record held by a financial institution concerning its
relationship with a customer. [Emphasis added.] The emphasized
language was added on the House floor in an amendment by Represent
ative Pattison, but is not discussed in the legislative history.14 On its face,
it is broad enough to include both summaries o f customer records and
analyses o f the' records showing that the customer may have engaged in
any particular activity, including commission o f a crime.
There are several reasons for a broad reading of this language. First,
one principal purpose o f the Act was to restrict the ability o f the Govern
ment to reconstruct an individual’s affairs from his financial records.15
Derived information and its use are at the center o f what Congress con
sidered to be the threat to privacy under prior law. Second, §§ 1103(c)
(Continued)
(A) endangering life o r physical safety o f any person;
(B) flight from prosecution;
(C) destruction o f or tam pering with evidence;
(D) intim idation o f potential witnesses; or
(E) otherwise seriously jeopardizing an investigation or official proceeding or un
duly delaying a trial or ongoing official proceeding, to the same extent as the cir
cumstances in the preceding subparagraphs.
10 124 C o n g r e s s i o n a l R e c o r d H. 11728 (d a ily e d ., O ct. 5, 1978).
11 124 C o n g r e s s i o n a l R e c o r d H . 11733, 11734 (d a ily e d ., Oct. 5, 1978).
11 124 C o n g r e s s i o n a l R e c o r d H . 11733 (d a ily e d ., Oct. 5, 1978).
" 124 C o n g r e s s i o n a l R e c o r d H. 11734 (d a ily e d ., Oct. 5, 1978).
14 124 C o n g r e s s i o n a l R e c o r d H . 11735 ( d a ily e d . , Oct. 5, 1978).
11 See H. Rept. 1383, 95th C ong., 2d sess., at 33-35; 124 C o n g r e s s i o n a l R e c o r d
H. 11731-32 (Representatives Pattison, Rousselot), 11739 (Representative Cavanaugh),
11739 (Representatives Rousselot and Pattison), (daily ed., Oct. 5, 1978).
221
and 1113(h)(5) specifically permit a financial institution or a supervising
agency to report to a law enforcement agency, in limited circumstances,
that financial records show a crime may have been comm itted, without
notifying the custom er. This express grant o f auihority would not be
necessary if the reports were not deemed to be disclosure o f a “ record”
otherwise prohibited by the Act. Third, the Pattison am endm ent, as a
whole, had the purpose o f encouraging customers to seek judicial review
and requiring agencies to justify access to records with greater particu
larity.16 Although the scope o f the phrase “ inform ation known to be de
rived from * * *” is not discussed, the phrase was enacted as part o f an
effort to make it more difficult for the Governm ent to obtain or use finan
cial inform ation without notice to the customer.
The argument to the contrary is that the operation o f § 1112 requires
that a summary or analysis, if sufficiently general, need not be considered
a “ record.” Representative Goldwater explained that § 1112’s purpose
was to require the agency receiving the financial inform ation to justify its
need.17 The transferring agency is required to certify that the transfer is for
a legitimate law enforcement purpose. To do so, the receiving agency must
be able to explain to the transferring agency what it wants and why. This,
in turn, requires that the transferring agency first have informed the
receiving agency that it has available financial information that may be
relevant to a legitimate law enforcement inquiry.
This argument, in our view, does not overcome the action o f the House
(under § 1103(c) and § 1113(h)(5)) in expressly permitting reports that a
crime may have been committed and deleting similar express authority in
§ 1112(d). These actions would have been superfluous if 'such a report,
based on examination and analysis o f financial records, was not itself a
record. It is consistent, moreover, with the A ct’s general purpose o f limit
ing Government access to financial data to construe the statute to prevent
one agency from informing another that an individual’s financial records
should make him an object o f the latter’s agency’s suspicions without in
forming the individual. We therefore conclude that the definition of
“ financial record” in § 1102(2) includes a report that analysis o f the
primary records shows a custom er to have possibly committed a crime.
Thus, the statement that a custom er’s records may relate to a Federal
crime, when based on examination o f those records, is itself a financial
record under the Act. The Act expressly permits an agency that has ob
tained access to the primary financial records under § 1113(h) to notify a
proper law enforcement agency o f this conclusion, and it expressly permits
transfer o f any inform ation am ong supervisory agencies. Otherwise, the
procedures o f § 1112(a)-(c) are the A ct’s only explicit mechanism
16 124 C o n g r e s s i o n a l R e c o r d H. 11735 (Representative Pattison) (daily ed., Oct. 5,
1978).
" 124 C o n g r e s s i o n a l R e c o r d H. 11733 (d a ily e d ., O ct. 5, 1978).
222
for disseminating custom er record inform ation, including derivative infor
m ation, from one agency to another. The question thus becomes whether
Congress intended a further, implicit m ethod o f transfer from the super
visory agencies.
As a general m atter, the legislative history o f § 1112 is clear that implicit
exceptions to it were not intended. The House was aware that the “ routine
use” exception to the Privacy Act, 5 U .S.C . § 552a(a)(7), (b)(3), has been
used to justify exchanges o f inform ation among Federal agencies based on
implicit authority. In an exchange among Representatives Rousselot, P at
tison, and Cavanaugh on this point, it was clearly stated that § 1112, as
amended, contained no “ routine use” exception, and that interagency
dissemination could only be made with certification by the transferring
agency and notice to the custom er." W ithout equally clear support de
rived from the purpose and legislative history o f the Act, we are unable to
say that Congress intended to preserve as implied exceptions to § 1112 any
pre-enactment practices o f transferring information.
We believe, however, that support for implied authority to transfer in
formation can be found in the narrow circumstances in which the offense
reported by a supervisory agency relates to the financial institution’s
operations. Representative Goldwater stated that his version o f § 1112 did
not apply “ to supervisory agencies properly conducting their responsibili
ties.” 19 The proper conduct o f those responsibilities has long been con
sidered to include reporting criminal violations o f the banking laws to the
law enforcement agencies.20 Moreover, the Right to Financial Privacy Act
was but one title o f 20 in an omnibus statute that was primarily concerned
with strengthening the powers o f the supervisory agencies and tightening
the restrictions on bank officers, directors, and shareholders.21 The House
Banking, Finance, and U rban Affairs Committee relied in at least one case
on referrals from a supervisory agency to U.S. Attorneys as indications
that a regulatory problem existed.22 It would be anomalous to conclude
that a statute intended on the whole to strengthen the regulation o f finan
cial institutions was also intended to deprive the regulators o f one o f their
oldest and strongest weapons for dealing with the most serious cases of
management abuse.
Considering the Financial Institutions Regulatory Act as a whole, we
conclude that Congress did not intend to prohibit a supervisory agency
from reporting to the proper law enforcement agency that it has dis
covered in a custom er’s records evidence that a criminal statute that is part
11 124 C o n g r e s s i o n a l R e c o r d H. 11739 (daily ed., O ct. 5, 1978).
19 124 C o n g r e s s i o n a l R e c o r d H. 11733 (daily ed., O ct. 5, 1978).
10 See p. 4, supra.
21 See generally Pub. L. No. 95-630, Financial Institutions Regulatory and Interest Rate
Control Act o f 1978, Titles I-1II, IV, VI-1X, 92 Stat. 3461; H. Rept. 1383, 95th C ong., 2d
sess., at 4-22 (1978).
“ H. Rept. 1383, 95th C ong., 2d sess., at 13 (1978).
223
o f its regulatory system has been violated. Such reports are an integral part
o f the process o f regulating financial institutions, and they further the
regulatory agencies’ primary mission o f protecting the soundness o f these
institutions. Notwithstanding § 1112, the supervisory agencies have im
plicit authority to inform the proper law enforcement agency that their in
spection o f customer records shows that an individual may have violated a
priminal statute governing the management o f financial institutions they
regulate.
We must, however, point out that the contrary argument is strongly
grounded on the language and legislative history o f the Act. We cannot
say with certainty that the courts would not conclude that a supervisory
agency that has obtained access under § 1113(b) must give notice under
§1112 even when reporting evidence o f a crime relating to the manage
ment o f the institution. Furtherm ore, we are not aware o f anything in the
language or legislative history o f the Act that would lead to the conclusion
that supervisory agencies have implied authority to report that crimes
unrelated to their supervisory function may have been committed on the
basis o f an analysis o f a custom er’s financial records.
The next question is the scope o f the inform ation that may be included
in a report to a law enforcement agency under § 1103(c) or § 1113(h)(5), or
in a report under the supervisory agencies’ implied authority. These provi
sions permit notice to be given so that the law enforcement agency may
then seek access to the records under the formal provisions o f the Act,
which require customer notice.
The permissible scope o f referral therefore lies somewhere between two
poles. On the one hand, a report cannot be so detailed as to effectively
substitute for access to the records themselves. This would permit the for
mal access procedures to be bypassed.23 On the other hand, the report
must be sufficiently detailed in order to inform the law enforcement
agency that reasonable grounds exist to believe that an individual has vio
lated the law. Since the referral provisions contem plate access under the
Act, it would be reasonable to identify the records and provide an explana
tion in sufficient detail to permit the law enforcement agency to support a
formal proceeding for access. This requires a written statement giving a
“ demonstrable reason” to believe that the records are relevant to a
legitimate law enforcement inquiry.24 While the legislative history is silent
on the am ount o f detail that must be provided, the language of § 1110(c)
clearly contem plates a factual showing beyond mere conclusions. We sug
gest that this middle ground would be occupied by a description o f the pat
tern o f transactions shown in the custom er records that does not discuss
21 Indeed, § 1113(h)(4) explicitly forbids transfer except to facilitate investigation o f the in
stitution or a legal entity not a customer.
Act, § 1110(bMc).
224
particular, identifiable transactions, coupled with the supervisory agency’s
analysis of why this may relate to a potential violation.
M ary C. L aw ton
Deputy Assistant A ttorney General
Office o f Legal Counsel
225