When a bank has links from it own web site to subsidiaries, (insurance co. for example)does there have to be a disclosure indicating that the individual is leaving the banks website? I thought there would be but don't know where to find documentation of that....I need to prove it to the IT people if I am correct. Thanks

There is no existing regulatory requirement for the notice that you are leaving the bank's site at all.

It is a good practice so the user is aware that security, cookie and similar policies and content control are out of your hands and could be different. it isn't difficult to do. And you will see this often on regulators web sites. Perhaps they are leading by example!

The OCC published a bulletin on Weblinking that has some of the best information on this.

You will find OCC Bulletin 2001-31 helful.