InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
Fed finalizes rule updating capital planning and stress testing requirements
On January 19, the Federal Reserve Board adopted a final rule updating the agency’s capital planning and stress testing requirements applicable to large bank holding companies and U.S. intermediate holding companies of foreign banking organizations. Among other things, the final rule, which is generally similar to the Fed’s September 2020 notice of proposed rulemaking (covered by InfoBytes here), conforms the capital planning, regulatory reporting, and stress capital buffer requirements for firms with $100 billion or more in total assets (Category IV) with the tailored regulatory framework approved by the Fed in 2019 (covered by InfoBytes here). The final rule also makes additional changes to the Fed’s stress testing rules, stress testing policy statement, and regulatory reporting requirements related to “business plan changes and capital actions and the publication of company-run stress test results for savings and loan holding companies.” In addition, the Fed’s capital planning and stress capital buffer requirements will now apply to covered saving and loan holding companies subject to Category II, III, and IV standards under the tailoring framework. The Fed notes that firms in the lowest risk category are on a two-year stress test cycle and will not be subject to company-run stress test requirements. The final rule takes effect 60 days after publication in the Federal Register.
Agencies release SARs/AML consideration FAQs
On January 19, the Financial Crimes Enforcement Network (FinCEN), Federal Reserve Board, FDIC, NCUA, and the OCC, in consultation with staff at certain other federal functional regulators, published answers to frequently asked questions concerning suspicious activity reporting (SAR) and other anti-money laundering (AML) considerations. The answers clarify financial institutions’ commonly asked questions about SARs/AML regulatory requirements and are provided to assist financial institutions with their Bank Secrecy Act (BSA)/AML compliance obligations in order to enable them “to focus resources on activities that produce the greatest value to law enforcement agencies and other government users of [BSA] reporting.” Topics discussed include (i) law enforcement requests for financial institutions to maintain accounts; (ii) receipt of grand jury subpoenas and law enforcement inquiries and SAR filings; (iii) maintaining customer relationships following the filing of SARs; (iv) filing SARs based on negative news identified in media searches; (v) information provided in SAR data and narrative fields; and (vi) SAR character limits. The agencies note that the FAQs do not alter existing BSA/AML requirements or establish new supervisory expectations, but have been developed in response to recent recommendations as described more thoroughly in FinCEN’s Advance Notice or Proposed Rulemaking issued last September on AML program effectiveness (covered by InfoBytes here).
CFPB finalizes rule stating supervisory guidance lacks force of law
On January 19, the CFPB issued a final rule codifying the Interagency Statement Clarifying the Role of Supervisory Guidance issued by the CFPB, OCC, Federal Reserve Board, FDIC, and the NCUA on September 11, 2018 (2018 Statement). As previously covered by InfoBytes, the October 2018 joint proposal amended the 2018 Statement by (i) clarifying that references in the Statement limiting agency “criticisms” includes criticizing institutions “through the issuance of [matters requiring attention] MRAs and other supervisory criticisms, including those communicated through matters requiring board attention, documents of resolution, and supervisory recommendations”; and (ii) adding that supervisory criticisms should be “specific as to practices, operations, financial conditions, or other matters that could have a negative effect on the safety and soundness of the financial institution, could cause consumer harm, or could cause violations of laws, regulations, final agency orders, or other legally enforceable conditions.”
The Bureau notes that it chose to issue a final rule that is specific to the Bureau and Bureau-supervised institutions, rather than a joint version including the five agencies as it did with the proposal. However, the final rule adopts the proposed rule without substantive change. The final rule is effective 30 days after publication in the Federal Register.
Similar announcements were issued by the OCC, FDIC, and NCUA.
Brainard weighs benefits and risks of using AI in financial services industry
On January 12, Federal Reserve Governor Lael Brainard spoke at the AI Academic Symposium hosted by the Fed’s Board about the increased use of artificial intelligence (AI) in the financial services industry. Brainard reflected that since she first shared early observations on the use of AI in 2018 (covered by InfoBytes here), the Fed has been exploring ways to better understand the use of AI, as well as how banking regulators can best manage risk through supervision while supporting the responsible use of AI and providing equitable outcomes. “Regulators must provide appropriate expectations and adjust those expectations as the use of AI in financial services and our understanding of its potential and risks evolve,” Brainard noted, adding that the Fed is currently collaborating with the other federal banking agencies on a potential request for information on the risk management of AI applications in financial services.
Emphasizing the “wide ranging” scope of AI applications, Brainard commented that financial services firms have been using AI for operational risk management, customer-facing applications, and fraud prevention and detection. Brainard also suggested that machine learning-based fraud detection tools could also have the potential to increase the detection of suspicious activity “with greater accuracy and speed,” while potentially enabling firms to respond in real time. Brainard also acknowledged the potential of AI to improve accuracy and fairness of credit decisions and improve overall credit availability.
However, Brainard also discussed AI challenges, including the “black box problem” that can arise with complex machine learning models that “operate at a level of complexity” which is difficult to fully understand. This lack of model transparency is a central challenge she noted, stressing that financial services firms must understand the basis on which a machine learning model determines creditworthiness, as well as the potential for AI models to “reflect or amplify bias.” With respect to safety and soundness, Brainard stated that “bank management needs to be able to rely on models’ predictions and classifications to manage risk. They need to have confidence that a model used for crucial tasks such as anticipating liquidity needs or trading opportunities is robust and will not suddenly become erratic.” She added that “regulators must provide appropriate expectations and adjust those expectations as the use of AI in financial services and our understanding of its potential and risks evolve.”
SBA releases PPP guidance and expansion rules
On January 8, the Small Business Administration (SBA) announced the Paycheck Protection Program (PPP) will re-open the week of January 11, with only community financial institutions able to make “First Draw” PPP loans on Monday, January 11, and “Second Draw” PPP loans on Wednesday, January 13 (re-opening to all participating lenders “shortly thereafter”). The SBA also released two interim final rules and associated guidance relating to the relaunch of the PPP, as dictated by the Consolidated Appropriations Act, 2021 (HR133). The Act, which was signed by President Trump on December 27, extends certain emergency authorities and temporary regulatory relief contained in the CARES Act, including an extension of the eviction moratorium until January 31. Under a section titled, the Economic Aid to Hard-Hit Small Businesses, Nonprofits, and Venues Act (Economic Aid Act), the legislation also provides an additional $284 billion for the PPP, extending the authority to make PPP loans through March 31, amending certain aspects of the program, and allowing for certain businesses to take second loans. The SBA notes that the new issuances satisfy the Economic Aid Act’s requirement that the agency promulgate rules to carry out the PPP provisions within 10 days of enactment:
- SBA Guidance. The guidance covers access to capital for minority, underserved, veteran, and women-owned business concerns and details the set-asides for loans issued by community development financial institutions, minority depository institutions, and certain small depository institutions. Most notably, the guidance states that the SBA will only accept PPP loan applications from community financial institutions for at least the first two days when the PPP loan portal re-opens.
- First Interim Final Rule. The interim final rule incorporates the Economic Aid Act’s amendments required to be implemented by regulation within 10 days of enactment. It also consolidates and restates SBA’s previous interim final rules and guidance covering the PPP (such as those governing borrower eligibility, lender eligibility, and PPP application and origination, and loan forgiveness). The interim final rule implements the various changes to the PPP made by the Economic Aid Act, including:
- Allowing additional expenses and forgivable uses for PPP funds, including certain operational expenditures, certain costs related to property damage due to public disturbances that occurred during 2020, certain supplier costs, and certain protective equipment expenditures. The expanded forgivable expenses may be utilized by borrowers who obtained PPP loans before the enactment of the Act so long as they have not already had their loans forgiven.
- Provisions stating that lenders (i) may rely on any certification or documentation submitted by applicants for both initial and second PPP loans, and (ii) may not be subject to enforcement action or penalties relating to loan origination or forgiveness, so long as (a) the lender acts in good faith relating to loan origination or forgiveness, and (b) all relevant federal, state, local and other statutory and regulatory requirements are satisfied.
- Certain streamlined conditions for loans of up to $150,000, including simplified loan forgiveness application and simplified certification of revenue for second loans.
- Second Interim Final Rule- PPP Second Draw. The interim final rule implements the key provisions of section 311 of the Economic Aid Act, allowing for a second PPP draw. Specifically, the Economic Aid Act allows for certain businesses to take a second loan under the PPP with a maximum draw amount of $2 million. In order to qualify, businesses must generally: (i) employ no more than 300 employees; (ii) have used or will use the full amount of their first PPP loan; and (iii) demonstrate at least a 25 percent reduction in gross receipts in the first, second, or third quarter of 2020 relative to the same quarter in 2019. Applications submitted after January 1, 2021 can utilize gross receipts from the fourth quarter of 2020. Additionally, the Economic Aid Act includes restrictions on types of eligible businesses, including entities involved in political and lobbying activities. Qualified borrowers may receive a loan amount of up to 2.5X the average monthly payroll costs during the 1-year period prior to the date of the loan or in calendar year 2019.
Additionally, in response to the Consolidated Appropriations Act, the Federal Reserve Board extended the termination date of the Main Street Lending Program facilities to January 8, in order to allow more time to process and fund loans that were submitted to the portal on or before December 14, 2020. The SBA also extended the deadline to apply for the Economic Injury Disaster Loan (EIDL) program to December 31, pending the availability of funds.
Fed targets Swiss bank for BSA/AML compliance deficiencies
On December 22, the Federal Reserve Board announced an enforcement action against a Swiss bank for alleged Bank Secrecy Act/anti-money laundering (BSA/AML) compliance risk management deficiencies found during a 2019 examination of the bank’s New York branch. The consent order outlines a number of corporate compliance and governance measures that the bank is required to undertake, such as: (i) submitting a joint written plan by the board of directors, risk committee, and senior management within 90 days that outlines measures for strengthening their respective oversight of the bank’s U.S. operations’ compliance, including “provid[ing] for a sustainable governance framework that, at a minimum, addresses, considers, and includes actions to improve policies, procedures, and controls for BSA/AML compliance across the U.S. operations”; (ii) providing a written revised customer due diligence program for the New York branch within 90 days, which must outline measures such as risk-based policies and procedures to ensure complete and accurate customer information is collected, retained, and analyzed for all account holders; (iii) submitting a revised suspicious activity monitoring and reporting program demonstrating that the New York branch is engaging in timely suspicious activity monitoring and reporting; and (iv) implementing independent testing within the New York branch to ensure compliance with all applicable BSA/AML requirements.
Agencies release annual CRA asset-size threshold adjustments
On December 17, the Federal Reserve Board and the FDIC announced the joint annual adjustments to CRA asset-size thresholds used to define small and intermediate small banks, which are subject to streamlined CRA evaluations and not subject to the reporting requirements applicable to large banks unless they choose to be evaluated as one. A “small” bank is defined as an institution that, as of December 31 of either of the prior two calendar years, had less than $1.322 billion in assets. An “intermediate small” bank is defined as an institution that, as of December 31 of both of the prior two calendar years, had at least $330 million in assets, and as of December 31 of either of the past two calendar years, had less than $1.322 billion in assets. This joint final rule became effective on January 1.
The OCC did not join in this announcement. As previously covered by a Buckley Special Alert, on May 20, the OCC announced the final rule to modernize the regulatory framework implementing the CRA. Its new CRA rule defines a small bank as an institution with $600 million or less in assets in four of the last five calendar quarters and an intermediate small bank as having $2.5 billion or less in assets in four of the last five calendar quarters.
Agencies propose computer-security incident notification rule
On December 18, the FDIC, Federal Reserve Board, and the OCC (collectively, “agencies”) issued a joint notice of proposed rulemaking (NPRM), which would require supervised banking organizations to promptly notify their primary regulator within 36 hours of becoming aware that a “‘computer-security incident” that rises to the level of a ‘notification incident’” has occurred. Additionally, the NPRM would require bank service providers “to notify at least two individuals at affected banking organization customers immediately after the bank service provider experiences a computer-security incident that it believes in good faith could disrupt, degrade, or impair services provided for four or more hours.” According to the agencies, these “notification incidents” are significant computer-security incidents that have the potential to “jeopardize the viability of the operations of an individual banking organization,” and may impact the safety and soundness of stability of the banking organization, leading to a disruption in the delivery of bank products and services, among other things. The agencies stress, however, that the required notice is intended to serve as an early alert and not as an assessment of the incident. According to a statement released by FDIC Chairman Jelena McWilliams, only computer-security incidents that meet the definition of a “notification incident” must be reported—a figure which is estimated to be roughly 150 incidents a year, according to a review of supervisory data and suspicious activity reports.
Comments on the NPRM are due 90 days after publication in the Federal Register.
Fed will maintain federal funds rates due to Covid-19 effects
On December 16, the Federal Reserve Board stated it intends to keep the target range for the federal funds rate at zero to 0.25 percent until the unemployment rate lowers and inflation has risen to two percent steadily. While the Board notes that “[o]verall financial conditions remain accommodative,” and “[e]conomic activity and employment have continued to recover,” the Covid-19 pandemic has still caused tremendous economic hardship that has left overall economic levels “well below their levels at the beginning of the year.” According to the Board, the Federal Open Market Committee (FOMC) is seeking to achieve maximum employment and inflation at the rate of two percent over the longer run before adjusting the current monetary policy. Additionally, the Board notes that it will continue to increase its holdings of Treasury securities by at least $80 billion per month and of agency mortgage-backed securities by at least $40 billion per month. FOMC will monitor the economic outlook and is prepared “to adjust the stance of monetary policy as appropriate if risks emerge that could impede the attainment of the Committee’s goals.”
Fed extends temporary repurchase agreement facility through September 2021
On December 16, the Federal Reserve Board announced extensions of its temporary U.S. dollar liquidity swap lines, as well as the temporary repurchase agreement facility for foreign and international monetary authorities (FIMA Repo Facility), through September 31, 2021. As previously covered by InfoBytes, the FIMA Repo Facility was established in March in response to the Covid-19 pandemic to allow central banks and other international monetary authorities with accounts at the Federal Reserve Bank of New York to enter into repurchase agreements with the Federal Reserve to temporarily exchange their U.S. Treasury securities held with the Federal Reserve for U.S. dollars, which can then be made available to institutions in their jurisdictions. While the FIMA Repo Facility was originally extended through March 31, 2021 (covered by InfoBytes here), the Board states that a “further extension . . . will help sustain recent improvements in global U.S. dollar funding markets by serving as an important liquidity backstop.”