(a) Unless the Director otherwise informs the Enterprise in writing, an Enterprise must cease offering a new product or engaging in a new activity immediately upon discovering or receiving notice from the Director that the Enterprise has -
(1) Offered a new product or commenced a new activity without submitting a Notice;
(2) Offered a new product or commenced a new activity after submitting a Notice but before approval is granted, and before the expiration of the time provided for the Director to make a determination under §§ 1253.3 and 1253.4;
(3) Offered a new product after the Director disapproved it; or
(4) Failed to adhere to any terms, conditions or limitations established by the Director in his or her approval of a new product or activity.
(b) Within five (5) business-days of the discovery or notice of any of the events described in paragraph (a) of this section, the Enterprise must provide the Director a written description of the failure or failures of controls that resulted in the offering of the new product or commencement of the new activity in contravention of this regulation, and the steps that the Enterprise has taken or will take to remediate the control failures. The Enterprise must provide the board of directors of the Enterprise and chief risk officer, internal audit, and compliance officer of the Enterprise with a copy of the written description on the same date the description is provided to the Director of FHFA.
(c) In the event that the Enterprise elects to resubmit the Notice of a new product or new activity that was undertaken in contravention of this regulation, the resubmission must provide sufficient documentation of the effectiveness of the remediation efforts described in paragraph (b) of this section.
(d) Failure to comply with paragraphs (a) or (b) of this section above may result in FHFA's taking enforcement action, including pursuant to 12 U.S.C. 4631 (orders to cease and desist), 12 U.S.C. 4632 (temporary orders to cease and desist), and 12 U.S.C. 4636 (civil money penalties).