InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
FFIEC updates BSA/AML examination manual
On June 21, the Federal Financial Institutions Examinations Council (FFIEC) published updated versions of four sections of the Bank Secrecy Act/Anti-Money Laundering (BSA/AML) Examination Manual (Manual), which provides examiners with instructions for assessing a bank or credit union’s BSA/AML compliance program and compliance with BSA regulatory requirements. The revisions can be identified by a 2021 date label on the FFIEC BSA/AML InfoBase and include the following updated sections: International Transportation of Currency or Monetary Instruments Reporting, Purchase and Sale of Monetary Instruments Recordkeeping, Reports of Foreign Financial Accounts, and Special Measures. The FFIEC notes that the “updates should not be interpreted as new instructions or as a new or increased focus on certain areas,” but are intended to “offer further transparency into the examination process and support risk-focused examination work.” In addition, the Manual itself does not establish requirements for financial institutions as these requirements are found in applicable statutes and regulations. (See also FDIC FIL-12-2021 and OCC Bulletin 2021-10.) As previously covered by InfoBytes, in February the FFIEC updated the following sections of the Manual: Assessing Compliance with Bank Secrecy Act Regulatory Requirements, Customer Identification Program, Currency Transaction Reporting, and Transactions of Exempt Persons.
CFPB publishes rulemaking agenda
On June 11, the Office of Information and Regulatory Affairs released the CFPB’s spring 2021 rulemaking agenda. According to a Bureau announcement, the information released represents regulatory matters the Bureau is “currently pursuing under interim leadership pending the appointment and confirmation of a permanent Director.” Any changes made by the new permanent director will be reflected in the fall 2021 rulemaking agenda. Additionally, the Bureau indicates that it plans to continue to focus resources on actions addressing the adverse impacts to consumers due to the ongoing Covid-19 pandemic, and highlighted an interim final rule issued in April that addresses certain debt collector conduct associated with the CDC’s temporary eviction moratorium order (covered by InfoBytes here). The Bureau will also continue to take concrete steps toward furthering the agency’s “commitment to promoting racial and economic equity.”
Key rulemaking initiatives include:
- Small Business Rulemaking. Last September, the Bureau released a Small Business Regulatory Enforcement Fairness Act of 1996 (SBREFA) outline of proposals under consideration, convened an SBREFA panel last October, and released the panel’s final report last December (covered by InfoBytes here and here). The Bureau reports that it anticipates releasing a notice of proposed rulemaking (NPRM) for the Section 1071 regulations this September to “facilitate enforcement of fair lending laws as well as enable communities, governmental entities, and creditors to identify business and community development needs and opportunities of women-owned, minority-owned, and small businesses.”
- Consumer Access to Financial Records. The Bureau notes that it is considering rulemaking to implement section 1033 of Dodd-Frank in order to address the availability of electronic consumer financial account data. The Bureau is currently reviewing comments received in response to an Advance Notice of Proposed Rulemaking (ANPR) issued last fall regarding consumer data access (covered by InfoBytes here).
- Property Assessed Clean Energy (PACE) Financing. As previously covered by InfoBytes, the Bureau published an ANPR in March 2019 seeking feedback on the unique features of PACE financing and the general implications of regulating PACE financing under TILA. The Bureau notes that it continues “to engage with stakeholders and collect information for the rulemaking, including by pursuing quantitative data on the effect of PACE on consumers’ financial outcomes.”
- Automated Valuation Models (AVM). Interagency rulemaking is currently being pursued by the Bureau, Federal Reserve Board, OCC, FDIC, NCUA, and FHFA to develop regulations for AVM quality control standards as required by Dodd-Frank amendments to FIRREA. The standards are designed to, among other things, “ensure a high level of confidence in the estimates produced by the valuation models, protect against the manipulation of data, [ ] avoid conflicts of interest, require random sample testing and reviews,” and account for any other appropriate factors. An NPRM is anticipated for December.
- Amendments to Regulation Z to Facilitate LIBOR Transition. As previously covered by InfoBytes, the Bureau issued an NPRM in June 2020 to amend Regulation Z to address the sunset of LIBOR, and to facilitate creditors’ transition away from using LIBOR as an index for variable-rate consumer products. A final rule is expected in January 2022.
- Reviewing Existing Regulations. The Bureau notes in its announcement that while it will conduct an assessment of a rule implementing HMDA (most of which took effect January 2018), it will no longer pursue two HMDA proposed rulemakings previously listed in earlier agendas related to the reporting of HMDA data points and public disclosure of HMDA data. Additionally, the Bureau states that it finished a review of Regulation Z rules implementing the Credit Card Accountability Responsibility and Disclosure Act of 2009 and plans to publish any resulting changes in the fall 2021 agenda.
The Bureau’s announcement also highlights several completed rulemaking items, including (i) a final rule that formally extended the mandatory compliance date of the General Qualified Mortgage final rule to October 1, 2022 (covered by InfoBytes here); (ii) proposed amendments to the mortgage servicing early intervention and loss mitigation-related provisions under RESPA/Regulation X (covered by a Buckley Special Alert) (the Bureau anticipates issuing a final rule before June 30, when the federal foreclosure moratoria are set to expire); and (iii) a proposed rule (covered by InfoBytes here), which would extend the effective date of two final debt collection rules to allow affected parties additional time to comply due to the ongoing Covid-19 pandemic (the Bureau plans to issue a final rule in June on whether, and for how long, it will extend the effective date once it reviews comments).
Federal regulators discuss Covid-19 responses and priorities
On May 19, the House Financial Services Committee held a hearing entitled “Oversight of Prudential Regulators: Ensuring the Safety, Soundness, Diversity, and Accountability of Depository Institutions.” Committee Chairwoman Maxine Waters (D-CA) opened the hearing by expressing her concerns about the “harmful deregulatory actions” taken by the previous administration’s appointees to “roll back key Dodd-Frank reforms and other consumer protections.” She noted, however, that she was pleased that the Senate is moving forward to reverse the OCC’s true lender rule and commented that she has asked House leadership to address the related Congressional Review Act resolution as soon as possible.
Fed Vice Chair for Supervision Randal K. Quarles provided an update on the Fed’s Covid-19 regulatory and supervisory efforts, noting that the Fed has “worked to align [the Fed’s] emergency actions with other relief efforts as the economic situation improves” and is maintaining or extending some measures to promote continued access to credit. When Congresswoman Velazquez inquired how government programs like the Paycheck Protection Program helped to stabilize businesses and improve the overall economy, Quarles answered, “We would have experienced a much deeper and more durable economic contraction, and would have had more lasting economic scarring with closed businesses and defaulting obligations [] had those programs not been put in place.”
OCC Comptroller Michael Hsu discussed the agency’s increasing coordination with other federal and state regulators on fintech policy, in addition to OCC efforts to strengthen Community Reinvestment Act (CRA) regulations and address climate change. The OCC has been encouraging innovation, Hsu said, but added that his “broader concern is that these initiatives were not done in full coordination with all stakeholders. Nor do they appear to have been part of a broader strategy related to the regulatory perimeter.” In his written testimony, Hsu emphasized his concerns with providing charters to fintechs, noting that in doing so, it would “convey the benefits of banking without its responsibilities,” but also “that refusing to charter fintechs will encourage growth of another shadow banking system outside the reach of regulators.” Hsu expressed in his oral statement the importance of finding “a way to consider how fintechs and payment platforms fit into the banking system” and emphasized that it must be done in coordination with the FDIC, Fed, and the states. He also explained that “the regulatory community is taking a fragmented agency-by-agency approach to the technology-driven changes taking place today. At the OCC, the focus has been on encouraging responsible innovation. For instance, we updated the framework for chartering national banks and trust companies and interpreted crypto custody services as part of the business of banking.” When Congressman Bill Huizenga (R-MI) asked how the OCC planned to address the “true lender” rule, which would soften the regulations for national banks to sell loans to third parties, Hsu stated that the OCC originally intended to review the rule, but that after the Senate passed S.J.Res. 15 to invoke the Congressional Review Act and provide for congressional disapproval and invalidation of the rule (covered by InfoBytes here), the agency decided to leave it up to congressional deliberation and will monitor it instead.
FDIC Chairman Jelena McWilliams discussed, among other things, the FDIC’s policy of granting industrial loan company charters. As previously covered by Infobytes, the agency approved a final rule in December 2020 establishing certain conditions and supervisory standards for the parent companies of industrial banks and ILCs. McWilliams defended the FDIC’s new rule during the hearing, stating it “ensures that the parent company serves as a source of financial strength for the ILC while providing clarity about the FDIC's supervisory expectations of both the ILC and its parent company.”
NCUA Chairman Todd Harper also outlined agency measures taken in response to the pandemic. Among other things, Harper noted that the NCUA is supporting low-income credit unions through the Community Development Revolving Loan Fund and that the agency is working to strengthen its Consumer Financial Protection Program (CFPP) to ensure fair and equitable access to credit. During the hearing, Harper stated, “there is an increased emphasis on fair lending compliance, and agency staff are studying methods for improving consumer financial protection supervision for the largest credit unions not primarily supervised by the CFPP.”
Agencies issue MRMG; seek comments on BSA/AML compliance
On April 9, the Federal Reserve Board, FDIC, and OCC, in consultation with FinCEN and the NCUA, issued a joint statement on the use of risk management principles outlined in the agencies’ “Supervisory Guidance on Model Risk Management” (known as the “model risk management guidance” or MRMG) as it relates to financial institutions’ compliance with Bank Secrecy Act/anti-money laundering (BSA/AML) rules. While the joint statement is “intended to clarify how the MRMG may be a useful resource to guide a bank’s [model risk management] framework, whether formal or informal, and assist with BSA/AML compliance,” the agencies emphasized that the MRMG is nonbinding and does not alter existing BSA/AML legal or regulatory requirements or establish new supervisory expectations. In conjunction with the release of the joint statement, the agencies also issued a request for information (RFI) on the extent to which the principles discussed in the MRMG support compliance by financial institutions with BSA/AML and Office of Foreign Assets Control requirements. The agencies seek comments and information to better understand bank practices in these specific areas and to determine whether additional explanation or clarification may be helpful in increasing transparency, effectiveness, or efficiency. Comments on the RFI are due within 60 days of publication in the Federal Register.
Fed formalizes stance on supervisory guidance
On March 31, the Federal Reserve Board issued a final rule codifying the Interagency Statement Clarifying the Role of Supervisory Guidance issued by the CFPB, FDIC, NCUA, and OCC on September 11, 2018 (2018 Statement). As previously covered by InfoBytes, an October 2018 joint proposal amended the 2018 Statement by (i) clarifying that references in the 2018 Statement limiting agency “criticisms” includes criticizing institutions “through the issuance of [matters requiring attention] and other supervisory criticisms, including those communicated through matters requiring board attention, documents of resolution, and supervisory recommendations”; and (ii) adding that supervisory criticisms should be “specific as to practices, operations, financial conditions, or other matters that could have a negative effect on the safety and soundness of the financial institution, could cause consumer harm, or could cause violations of laws, regulations, final agency orders, or other legally enforceable conditions.” The final rule is effective 30 days after publication in the Federal Register, and mirrors final rules issued by the CFPB, OCC, FDIC, and NCUA.
Prudential regulators exploring how institutions use AI
On March 29, the FDIC, Fed, OCC, CFPB, and NCUA issued a request for information (RFI) seeking input on financial institutions’ use of artificial intelligence (AI), which may include AI-based tools and models used for (i) fraud prevention to identify unusual transactions for Bank Secrecy Act/anti-money laundering investigations; (ii) personalization of customer services; (iii) credit underwriting; (iv) risk management; (v) textual analysis; and (vi) cybersecurity. The RFI also solicits information on challenges financial institutions face in developing, adopting, and managing AI, as well as on appropriate governance, risk management, and controls over AI when providing services to customers. Additionally, the agencies seek input on whether it would be helpful to provide additional clarification on using AI in a safe and sound manner and in compliance with applicable laws and regulations. According to FDIC FIL-20-2021, while the agencies support responsible innovation by financial institutions and believe that new technologies, including AI, have “the potential to augment decision-making and enhance services available to consumers and businesses, . . . identifying and managing risks are key.” Comments on the RFI are due 60 days after publication in the Federal Register.
Agencies propose new flood insurance Q&As
On March 11, the FDIC, OCC, Federal Reserve Board, NCUA, and the Farm Credit Administration issued a notice and request for public comment on 24 proposed interagency questions and answers regarding the 2019 private flood insurance rule (covered by InfoBytes here). The new Q&As supplement interagency questions and answers proposed last year (covered by InfoBytes here), which were intended to reduce compliance burdens for lenders related to flood insurance laws. The new Q&As are designed to help lenders comply with private flood insurance provisions found in the Biggert-Waters Flood Insurance Reform Act of 2012, and address mandatory and discretionary acceptance of private flood insurance policies by lenders if such insurance is required. Comments on the proposed additions to the interagency Q&As are due 60 days after publication in the Federal Register.
FFIEC updates BSA/AML examination manual
On February 25, the FFIEC published updated versions of four sections of the Bank Secrecy Act/Anti-Money Laundering (BSA/AML) Examination Manual (Manual), which provides examiners with instructions for assessing a bank’s or credit union’s BSA/AML compliance program and compliance with BSA regulatory requirements. The revisions can be identified by a 2021 date on the FFIEC BSA/AML InfoBase and include the following updated sections: Assessing Compliance with Bank Secrecy Act Regulatory Requirements, Customer Identification Program, Currency Transaction Reporting, and Transactions of Exempt Persons. The FFIEC notes that the “updates should not be interpreted as new instructions or as a new or increased focus on certain areas,” but are intended to “offer further transparency into the examination process and support risk-focused examination work.” In addition, the Manual itself does not establish requirements for financial institutions as these requirements are found in applicable statutes and regulations. (See also FDIC FIL-12-2021 and OCC Bulletin 2021-10.)
Agencies provide Texas winter storm guidance
On February 22, the Federal Reserve Board, OCC, FDIC, NCUA, and the Conference of State Bank Supervisors issued a joint statement covering supervisory practices for financial institutions affected by winter storms in Texas. Among other things, the agencies called on financial institutions to “work constructively” with affected borrowers, noting that “prudent efforts” to adjust or alter loan terms in affected areas “should not be subject to examiner criticism.” Institutions facing difficulties in complying with any publishing and reporting requirements should contact their primary federal and/or state regulator. Additionally, the agencies noted that institutions may receive Community Reinvestment Act consideration for community development loans, investments, and services that revitalize or stabilize federally designated disaster areas. Institutions are also encouraged to monitor municipal securities and loans impacted by the winter storms.
Additionally, HUD announced it will make disaster assistance available to Texas by providing foreclosure relief and other assistance to homeowners living in counties affected by the severe winter storms. Specifically, HUD is providing an automatic 90-day moratorium on foreclosures of FHA-insured home mortgages for covered properties in the affected counties and is making mortgage insurance available to those victims whose homes were destroyed or severely damaged. Additionally, HUD’s Section 203(k) loan program will allow individuals who have lost homes to finance the purchase of a house, or refinance an existing house along with the costs of repair, through a single mortgage. The program will also allow homeowners with damaged property to finance the rehabilitation of existing single-family homes.
Agencies release SARs/AML consideration FAQs
On January 19, the Financial Crimes Enforcement Network (FinCEN), Federal Reserve Board, FDIC, NCUA, and the OCC, in consultation with staff at certain other federal functional regulators, published answers to frequently asked questions concerning suspicious activity reporting (SAR) and other anti-money laundering (AML) considerations. The answers clarify financial institutions’ commonly asked questions about SARs/AML regulatory requirements and are provided to assist financial institutions with their Bank Secrecy Act (BSA)/AML compliance obligations in order to enable them “to focus resources on activities that produce the greatest value to law enforcement agencies and other government users of [BSA] reporting.” Topics discussed include (i) law enforcement requests for financial institutions to maintain accounts; (ii) receipt of grand jury subpoenas and law enforcement inquiries and SAR filings; (iii) maintaining customer relationships following the filing of SARs; (iv) filing SARs based on negative news identified in media searches; (v) information provided in SAR data and narrative fields; and (vi) SAR character limits. The agencies note that the FAQs do not alter existing BSA/AML requirements or establish new supervisory expectations, but have been developed in response to recent recommendations as described more thoroughly in FinCEN’s Advance Notice or Proposed Rulemaking issued last September on AML program effectiveness (covered by InfoBytes here).