(1) In addition to the information obtained from the call report required by 32-1-231, the department may also require a bank to furnish a special report in writing, verified as required by 32-1-231, when in its judgment the special report is necessary to inform it fully of the actual financial condition and affairs of the bank. A willfully false statement in the report is perjury and must be punished accordingly.
(2) Each bank shall file a report of service and technology providers containing the information as set forth by the department by rule by July 31 of each year.
(3) A bank shall report an incident that allowed unauthorized access to customer data or interruption of customer services to the department immediately following discovery and without unreasonable delay.