Dear FIEB readers,
Whether you were attending a cookout, watching fireworks, or spending other quality time with family and friends, we hope the Fourth of July holiday provided relaxation.
With the second quarter of 2025 in the rearview mirror, we are seeing stable to strong earnings from published results. In Washington, D.C., the focus continues to be on burden reduction. The federal banking agencies and the National Credit Union Administration both are seeking comment on proposals to further reduce burden under the Economic Growth and Regulatory Paperwork Reduction Act of 1996. The Federal Deposit Insurance Corp. board approved a notice of proposed rulemaking to raise and index key regulatory thresholds, including those under the Federal Deposit Insurance Corporation Improvement Act of 1991. Federal banking agencies are proposing to rescind 2023 Community Reinvestment Act final rule.
Two of the largest American Institute of Certified Public Accountants (AICPA) conferences for our industry are just around the corner. This year, the AICPA banking conference and AICPA credit unions conference will occur concurrently Sept. 15-17, 2025, at the Gaylord National Resort & Convention Center, National Harbor, Maryland, just south of Washington, D.C. Here are the discount codes:
We hope to see you in September. We look forward to keeping you informed and welcome any feedback.
On June 30, 2025, the Office of the Comptroller of the Currency (OCC) released its “Semiannual Risk Perspective” highlighting key risks to the federal banking system, including credit, market, operational, and compliance risks. The report underscores the increase in commercial credit risk, particularly within the commercial real estate sector, due to growing geopolitical risks, sustained higher interest rates, and broad uncertainty.
On July 21, 2025, the Federal Deposit Insurance Corp. (FDIC), Federal Reserve Board (Fed), and OCC jointly issued their fourth notice requesting public comment to reduce regulatory burden under the Economic Growth and Regulatory Paperwork Reduction Act of 1996 (EGRPRA). The agencies are soliciting comments on the three remaining of the 12 categories: banking operations, capital, and the Community Reinvestment Act (CRA).
Comments are due Oct. 23, 2025.
On July 10, 2025, the National Credit Union Administration (NCUA) announced the next steps in its plans to voluntarily review agency regulations to identify outdated, unnecessary, and unduly burdensome rules for federally insured credit unions. The review, which will be conducted over the course of approximately two years, is part of the EGRPRA.
On July 15, 2025, the FDIC board approved a notice of proposed rulemaking to raise and index key regulatory thresholds, including those under 12 CFR Part 363, which is the regulation to implement Section 112 of the Federal Deposit Insurance Corporation Improvement Act of 1991 (FDICIA). The FDICIA subjects institutions above a certain asset size threshold to annual independent audits, assessments of the effectiveness of internal control over financial reporting, and compliance with designated laws and regulations, as well as related reporting requirements. It also includes requirements for audit committees. Many thresholds have not been updated in decades. The proposal would adjust the thresholds for cumulative inflation since adoption or last revision, with automatic reviews every two years or sooner if inflation exceeds 8%.
The comment period will be open for 60 days after publication in the Federal Register.
On July 16, 2025, the FDIC, OCC, and Fed jointly issued a proposal to rescind the CRA final rule issued in October 2023. Prior CRA regulations that were originally adopted in 1995, with certain technical amendments, would replace the final rule.
On July 14, 2025, the OCC announced it is removing references to supervising banks for disparate impact liability from the “Fair Lending” booklet of the “Comptroller’s Handbook” and has begun removing references in other issuances. In addition, the OCC has instructed its examiners that they should no longer examine for disparate impact.
On June 9, 2025, acting Comptroller of the Currency Rodney Hood released a letter in response to the Conference of State Bank Supervisors request that the OCC rescind its preemption regulations. In the letter, Hood stated that the OCC’s regulations align with federal law, Supreme Court precedent, and recent executive orders and emphasized that federal preemption supports a dual banking system where federally and state-chartered banks operate alongside each other. Hood concluded that the agency’s preemption regulations are lawful and contribute to the efficiency and effectiveness of the national banking system.
On July 14, 2025, the FDIC, OCC, and Fed issued a joint statement on risk management considerations for crypto asset safekeeping. The statement reaffirms a bank’s ability to engage in crypto asset safekeeping and highlights specific risk considerations such as cryptographic key management, legal and compliance risks, third-party risk management, and audit practices.
On June 27, 2025, the FDIC, OCC, and NCUA, with concurrence from the Financial Crimes Enforcement Network, issued in an FDIC press release, OCC News Release 2025-60, and an NCUA press release an order allowing banks and credit unions to obtain customers’ taxpayer identification numbers (TINs) from third-party sources instead of directly from the customers.
On July 3, 2025, the FDIC issued the 2025 edition of its “Consumer Compliance Supervisory Highlights,” summarizing key consumer compliance issues observed during 2024. The most frequently cited violations involved the Truth in Lending Act (Regulation Z), Flood Disaster Protection Act, Truth in Savings Act (Regulation DD), Electronic Fund Transfer Act (Regulation E), and Home Mortgage Disclosure Act (Regulation C). Consumer complaints processed by the FDIC increased 14% over the previous year.
On July 1, 2025, the Consumer Financial Protection Bureau (CFPB) withdrew a $95 million enforcement action against the Navy Federal Credit Union related to overdraft fee practices. The original settlement, issued under prior leadership, alleged the credit union charged fees without proper consent. The rescission reflects a broader rollback of regulatory actions under the bureau’s current leadership.
On June 16, 2025, the FDIC, OCC, and Fed requested comment on potential actions to help consumers, businesses, and financial institutions mitigate risk of payment fraud, with a particular focus on check fraud.
Comments are due Sept. 18, 2025.
On June 27, 2025, the Fed stated that the results of the annual bank stress test showed that large banks are well positioned to weather a severe recession while staying above minimum capital requirements and continuing to lend to households and businesses. Under this year’s hypothetical recession, the aggregate decline in the common equity tier 1 capital ratio is 1.8%.
On July 10, 2025, the Fed proposed revisions to its supervisory rating framework for large bank holding companies. The aim is to better assess whether these institutions are “well managed.” The proposed changes focus on enhancing the evaluation of governance and risk management practices, ensuring they align with the complexity and risk profile of each firm.
Comments are due Aug. 14, 2025.
On June 27, 2025, the FDIC, OCC, and Fed requested comment on a proposal to modify the enhanced supplementary leverage ratio standards, which apply to global systemically important bank holding companies (GSIBs) in the U.S. and their depository institution subsidiaries. The proposal would tie the enhanced supplementary ratio to the banking organization’s systemic risk profile, amongst other recommendations.
Comments are due Aug. 26, 2025.
On July 23, 2025, the SEC responded to an April 2025 8th U.S. Circuit Court of Appeals request for information on whether the SEC intended to review or reconsider its climate-related disclosure rules. The request followed the SEC’s March 2025 decision to discontinue its defense of related litigation challenging those rules. In its July 2025 filing, the SEC asked the court to proceed with the litigation and to decide the case. The SEC also indicated the court’s decision would inform the SEC’s future action on the rules. Commissioner Caroline Crenshaw provided a related statement.
On July 2, 2025, the Division of Corporation Finance (CorpFin) announced updates to the Financial Reporting Manual to reflect amendments to the SEC’s disclosure rules. The update incorporates changes to Regulation S-X Acquisition Rules 3-05, 3-14, 8-04, and 8-06, which now consolidate into Section 2900. Additional revisions were made to reflect the 2020 amendments to Rules 3-10 and 3-16 relating to financial disclosures for guaranteed securities.
CorpFin noted that the current update does not include revisions related to other rulemakings, including those on the qualifications of accountants, management’s discussion and analysis, selected financial data, supplementary financial information, special purpose acquisition companies, shell companies, and projections.
On June 26, 2025, the SEC hosted a roundtable to discuss executive compensation disclosure. Chair Paul Atkins and commissioners Hester Peirce and Mark Uyeda emphasized that disclosure requirements should prioritize material, decision-useful information for investors. Crenshaw added that rules should promote transparency, comparability, and investor focus while being regularly assessed for materiality, cost, and alignment with long-term value creation.
On June 9, 2025, the SEC hosted a roundtable on decentralized finance (DeFi), featuring remarks from Atkins and commissioners Peirce, Crenshaw, and Uyeda. Atkins and Uyeda emphasized the need for regulatory frameworks that address risk while enabling innovation. Peirce noted that DeFi code is protected under the First Amendment, though individuals operating platforms that facilitate securities transactions may still fall within the SEC’s jurisdiction. Crenshaw cautioned that DeFi must be grounded in clear investor protections.
On July 9, 2025, Peirce issued a statement reflecting on the evolving conversation around tokenized securities. She noted that while blockchain technology may enhance capital formation and collateral efficiency, the core legal and regulatory principles remain unchanged and must guide innovation in this space. Peirce encouraged market participants to engage proactively with staff when developing tokenization models.
On July 1, 2025, CorpFin issued a statement outlining key disclosure considerations for crypto asset exchange-traded products (ETPs). The guidance emphasizes the importance of providing clear and comprehensive disclosures related to ETPs such as custody arrangements, net asset value calculation methodologies, risk factors, and other material aspects of the offering.
On June 26, 2025, the SEC’s Division of Economic and Risk Analysis released updated data on broker-dealers, merger and acquisition (M&A) activity, and business development companies (BDCs). The report highlights continued consolidation among broker-dealers and provides insights into regulatory and registration trends for M&A advisers and BDCs.
On June 25, 2025, the SEC extended the compliance date to June 30, 2026, from Dec. 31, 2025, for amendments requiring certain broker-dealers to perform daily customer reserve computations. Atkins stated the extension is intended to provide firms adequate time to implement and test operational changes without undue burden.
The SEC’s Small Business Capital Formation Advisory Committee met on July 22, 2025, to finalize its review of Regulation A and examine the regulatory framework for “finders.” The meeting also focused on potential enhancements to support small business capital formation, particularly for founders operating outside traditional capital hubs.
On July 15, 2025, Erica Williams, PCAOB chair since January 2022, announced her departure as of July 22, 2025. During her tenure, Williams led the PCAOB in finalizing seven projects addressing 24 rules and standards, enhancing enforcement efforts with record-breaking penalties, and improving international audit oversight – most notably by gaining historic access to inspect and investigate firms in China. The PCAOB described this period as one of record accomplishments in advancing investor protection and audit quality.
On July 21, 2025, the SEC announced the designation of George Botic to serve as acting chair. Botic became a PCAOB board member on Oct. 25, 2023. Prior to joining the board, he was the director of the PCAOB’s Division of Registration and Inspections.
On July 23, 2025, SEC Chair Paul Atkins announced he is soliciting candidates for all five PCAOB positions, including the chair. Applications are due Aug. 25, 2025.
The PCAOB on July 7, 2025, published “Audit Focus: Engagement Acceptance,” outlining key considerations and good practices for auditors evaluating whether to accept a new engagement. While intended for audit firms, the publication is equally relevant for executives and audit committees who play a vital role in ensuring a successful auditor selection and onboarding process.
Key points for consideration include:
Executives and audit committees can use this publication as a guide to strengthen their own readiness and transparency during auditor selection, ultimately supporting improved audit quality and risk mitigation.
On June 12, 2025, the AICPA issued an exposure draft: “Proposed Criteria for Controls Supporting Token Operations: Specific to Asset-Backed Fiat-Pegged Tokens.” This draft introduces a dual framework designed to enhance transparency, consistency, and assurance in the reporting of stablecoin operations. The first part outlines presentation and disclosure criteria, requiring detailed reporting on redeemable token quantities, redemption asset composition, and the comparison between the two. These criteria aim to address the current lack of standardization across issuers, improve stakeholder confidence, and support regulatory oversight.
The second part proposes control objectives across eight key areas, establishing a foundational framework for assessing the design and effectiveness of controls over stablecoin operations. The objectives address the following areas: token generation and management, client onboarding and maintenance, customer transaction processing, key and backup management, redemption asset management, vendor management, reporting, and IT general controls. Illustrative disclosures and implementation guidance are also provided to support practical application, while aligning with emerging regulatory expectations.
Comments are due Aug. 11, 2025.
On June 16, 2025, the CAQ published the results of the institutional investor survey conducted by KRC Research during May 2025, which focused on the use of AI in the audit process and the use of generative AI (GenAI) within portfolio companies. Overwhelmingly, investors expressed strong confidence in AI’s ability to enhance audit accuracy, efficiency, and risk assessment, with 90% believing it increases trust in audit results. Top benefits include improved error reduction, data analysis speed, and fraud detection. However, investors underscored the need for structured safeguards: The most critical measures cited were regular audits of AI systems, clearly defined usage policies, and transparency about AI applications. Concerns persist on data privacy, lack of human oversight, and insufficient regulatory clarity.
When considering GenAI in portfolio companies, institutional investors said they remain optimistic but cautious. Nearly all surveyed expressed confidence in companies’ ability to manage AI-related risks, though data protection and cybersecurity top their list of concerns. While over half consider current federal regulations to be clear and comprehensive, a notable minority believe gaps remain. Investors prioritize proactive governance, including regular risk assessments and formal AI policies, as essential to responsible AI use.
The CAQ’s “S&P 500 Sustainability Reporting and Assurance Analysis,” which examines sustainability disclosures and third-party assurance practices among S&P 500 companies, was updated in June 2025, reflecting its latest findings for the fiscal yearend 2023 reporting period. The CAQ reported that S&P 500 companies continue to embrace sustainability reporting as 99% disclosed ESG/sustainability information in 2023 (up slightly from 98% in 2022), with 73% of those obtaining third-party assurance for some of their data, up from 70% the prior year. Most companies had auditors check greenhouse gas emissions and one to three additional sustainability metrics. Specifically, 24% of companies relied on public company auditors (up from 21%), and 94% of those engaged the same firm that audits their financials.
Portions of AICPA materials reprinted with permission. Copyright 2025 by AICPA.