Our Take: financial services regulatory update – September 8, 2023

Change remains a constant in financial services regulation. Read "our take" on the latest developments and what they mean.

Current topics – September 8, 2023

1. Agencies propose requirements and guidance to enhance large bank resolution

On August 29th, the Fed and FDIC (together, the Agences) issued several proposals related to resolution planning, including long term debt requirements and enhanced resolution planning requirements for insured depository institutions (IDIs) with over $50 billion in assets as well as guidance for both US banks and foreign banking organizations (FBOs) with over $250 billion in assets in Categories II and III of the Fed’s tailoring framework.

  • Resolution planning requirements for IDIs. The IDI proposal creates two categories of filers: (1) Group A: IDIs with over $100 billion in assets and (2) Group B: IDIs with between $50 billion and $100 billion in assets.1 Group A plans would alternate annually between interim submissions with select informational requirements and full submissions that would require more substantial and specific information than they do currently, including:
    • A resolution strategy using a bridge bank that would provide timely access to insured deposits and involve sale of business activities and asset portfolios to multiple acquirers over time (filers may, in certain circumstances, present alternate strategies as appropriate)
    • More rigorous valuation analyses of components like asset portfolios or lines of business that could be separated and sold in an severely adverse economic environment
    • Demonstration of the ability to stand up a virtual due diligence data room and valuation capabilities with a range of quantitative estimates of value to support various resolution options
    • More thorough descriptions of organizational structure, key personnel, cross-border activities, asset portfolios, deposit structure, digital services, and electronic platforms

Group B filers would be subject to many of the same expectations as Group A filers but would not need to include an executive summary, identified strategy, or failure scenario. The proposal would also subject IDIs to more intensive FDIC capability testing to assess the credibility of the plan and the ability to implement it. The FDIC would assess the degree of “engagement” of executives with the resolution planning process and, in the event that significant deficiencies were noted, could take enforcement actions under Section 8 of the FDIC Act.

  • Long-term debt requirements. Banks with over $100 billion in assets that are not global systemically important banks (G-SIBs) would be required to issue sufficient long-term debt to be recapitalized in resolution. Specifically, the proposal requires that they maintain long-term debt equal to the greater of: (A) 6% of total risk-weighted assets; (B) 3.5% of average total consolidated assets; or (C) 2.5% of total leverage exposure under the supplementary leverage ratio. The long-term debt would need to be unsecured, have maturities greater than one year and have plain vanilla features (e.g., no structured notes or credit sensitive instruments). The Agencies estimate that impacted banks currently maintain 75% of the required long-term debt and would need approximately $70 billion in new issuances, which they would have three years to issue.

The proposal would further subject banks to clean holding company requirements (e.g., prohibit entering into derivatives with external counterparties). It would not subject non-G-SIBs to total loss-absorbing capacity (TLAC) requirements but would disincentivize them from holding long-term debt issued by other banks.

  • Resolution plan guidance for US banks. The Agencies proposed enhanced guidance for resolution plans to be filed by Category II and III US banks with over $250 billion in assets as required by Section 165(d) of the Dodd-Frank Act.2 The guidance provides different sets of expectations for firms with multiple point of entry (MPOE) resolution strategies versus for firms with single point of entry (SPOE) strategies.3 Capability expectations are set out in the areas of capital, liquidity, governance, operations, legal entity rationalization, separability analysis, IDI resolution, and, for FBOs only, analysis of the resolution of US branches and interactions with the global resolution strategy. For firms with SPOE strategies, capital expectations include implementing Resolution Capital Adequacy and Positioning (RCAP) and Resolution Capital Execution Need (RCEN) capabilities to appropriately position loss-absorbing resources to support an orderly resolution process and estimate capital needs in resolution.4 The guidance also incorporates expectations for Resolution Liquidity Adequacy and Positioning (RLAP) and Resolution Liquidity Execution Need (RLEN) capabilities to estimate the amount of liquidity available and needed to enable material entities to continue operations until the firm is resolved.5 Regarding governance, the guidance outlines expectations for firms with SPOE strategies to establish triggers to enable timely escalation of resolution information to the Board and senior management, and develop playbooks for certain actions. The proposal also raises the expectations for the depth of firms’ analyses of potential divestiture options and continuity of payment, clearing, and settlement services and share and outsourced services. These banks’ next resolution plans are due by July 1, 2024 but the proposal seeks comment on whether more time should be provided to account for the updated guidance.
  • Resolution plan guidance for FBOs. The Agencies proposed guidance for Category II and III FBOs that is similar to that for US banks with a number of unique considerations for FBOs’ global footprints. The guidance removes the concept of Specified FBOs and instead describes expectations based on resolution strategy (MPOE or SPOE). Regarding capital, the proposal would bring parity with domestic filers by requiring RCAP and RLAP for FBOs with an SPOE strategy. In addition, it would expect FBO filers to outline how US resolution planning is complementary to their home country plans.

Comments on all of the proposals are due by November 30th.

Our Take

As expected from FDIC Chairman Gruenberg’s recent speech, these proposals represent one front of the Agencies’ response to the spring bank failures. The lower asset threshold of the IDI and long-term debt requirements ($50 billion and $100 billion, respectively) further rolls back regulatory relief for banks with under $250 billion in assets, reflecting the Agencies’ heightened understanding of the challenges and risks facing such banks. As the resolution plans of the failed banks were limited or had not yet been submitted due to extended deadlines, the IDI proposal would require all filers to develop the necessary capabilities to submit annual filings and significantly increase the information and capabilities they demonstrate in their plans. In particular, many Group A institutions will need to substantially rework their resolution strategies, either by creating a new bridge bank strategy or enhancing the analysis in their current plans, including providing detailed information on assets and liabilities to be transferred to the bridge, proposed asset sales / wind downs, and an approach to exiting the bridge. While Group B filers would not need to describe resolution strategies, their initial filing could be particularly burdensome and require significant build up of resolution teams as they have not submitted filings since 2018. Further, due to increased expectations for FDIC capability testing, IDIs would need to enhance their resolution-related operations, including by expanding their readiness playbooks with regard to interdependencies, communications, employee retention, and governance. If they have not done so already, they should develop capabilities to stand up a virtual data room and assess their ability to provide key information (e.g., deposit data) in a timely manner. In light of growing reliance on technology and third parties, IDIs should also document their digital services and electronic platforms as well as review agreements with internal and external service providers to ensure that critical services can be maintained in resolution.

Regarding the proposed long-term debt requirements, some large non-G-SIBs may not have significant difficulties in adjusting their debt but other in-scope banks may face net new issuance in a higher rate environment. The proposed requirements would likely increase the cost of capital for impacted banks, as many of these firms currently fund themselves largely with low-cost deposits. The proposal would effectively increase the leverage of these firms by requiring issuance of a substantial amount of high-cost long-term debt while the recent Basel III endgame proposal may also require an additional capital raise. The relatively short time frame under which firms must issue additional debt may lead to greater investor power over pricing and terms. While the spreads between TLAC debt and non-convertible debt have been historically negligible, the additional costs of incremental issuance in this higher rate environment will place additional pressure on bank earnings.

The overall effect of the proposed resolution planning guidance is to meaningfully heighten capability expectations for Category II and III banks, bringing requirements for these firms more in line with the US G-SIBs and largest and most complex FBOs. Category II and III firms should carefully re-evaluate their resolution strategies, taking into consideration the enhanced capability expectations in the proposed guidance, potential impacts to capital structure from the proposed long-term debt requirements, the feasibility of assumptions currently used in the resolution plan, and, for FBOs, interactions with the global resolution strategy. Firms adopting SPOE strategies should assess the resources needed to implement significant capability enhancements, with capital and liquidity analysis, governance triggers and playbooks, operational capabilities including analysis related to qualified financial contracts, legal entity rationalization, and separability among the most substantial. Firms with MPOE strategies likewise would require significant upgrades, particularly with respect to liquidity analysis, including demonstration of how the failure scenario results in material financial distress and related impacts to liquidity buffers, operational capabilities, separability analysis, and detailed analysis of how an IDI subsidiary can be resolved within the legal framework and without serious adverse effects on US financial stability. Finally, the expectations for FBOs to analyze US branch resolution impacts and interaction with the global resolution strategy would require extensive coordination between US operations and the head office, and may give rise to additional challenges where global resolution strategies are set by home country regulators.

1Since the imposition of a moratorium on IDI resolution plans in 2018 (the moratorium was lifted for IDIs with over $100 billion in assets in 2021), IDIs with between $50 billion and $100 billion in assets have not needed to submit resolution plans.

2Section 165(d) resolution plans focus on bank holding companies and all of their subsidiaries while IDI resolution plans focus on the IDI and its resolution by the FDIC.

3Under SPOE, only the holding company enters resolution while subsidiaries remain operational. Under MPOE, the holding company enters bankruptcy and subsidiary insured depositories enter resolution managed by the FDIC. All US G-SIBs currently outline an SPOE strategy while the majority of banks covered by the proposed guidance described MPOE strategies in their most recent plans.

4RCAP requirements are intended to ensure that firms’ material entities could operate while the parent company is in bankruptcy. They call for firms to have outstanding a minimum amount of total loss-absorbing capital and long-term debt to help ensure that the firm has adequate capacity to meet that need at a consolidated level. RCEN requires that firms have a methodology for estimating the amount of capital needed to support each material entity in case of bankruptcy, have internal TLAC to support the estimates, and incorporate the estimates into the governance framework.

5RLEN calls for firms to develop a methodology for estimating the liquidity needed in the event of a bankruptcy to stabilize the surviving material entities and allow for their continued operation. The methodology should be incorporated into the governance framework, which should ensure that high-quality liquid assets do not drop below the RLEN estimate. RLAP requirements call for firms to measure high-quality liquid assets at each material entity less net outflows to third parties and affiliates and ensure that liquidity is readily available to meet any deficits.

2. Chopra speaks on open banking and big tech

On September 7th, CFPB Director Rohit Chopra spoke at the Philadelphia Fed Fintech Conference on open banking and fostering competitiveness in the payments industry. He stated that next month the agency will release its long awaited open banking proposal, which will require that financial institutions make information available to consumers and authorized third parties while taking steps to protect sensitive data and provide disclosures to their users. However, he stated that these upcoming rules will not address other practices that limit competitiveness and consumer choice such as the rise of Big Tech payments platforms that impose “gates and toll booths” for third party access to their systems, including major mobile device companies’ payments infrastructure as “tap-to-pay” services increase in popularity.

Alongside Chopra’s remarks, the CFPB released a report on mobile device operating systems and tap-to-pay practices. The report finds that the largest mobile device companies limit payments competition by either (A) requiring that third parties use their infrastructure - and pay a fee- for the ability to conduct “tap-to-pay” services or (B) placing self-preferencing conditions on device manufacturers that use their operating systems. While it does not contain specific recommendations, it notes that the CFPB will “take appropriate steps to ensure that Big Tech companies do not impede the development of open ecosystems for digital payments.”

Our Take

The now-imminent open banking proposal has been a long time coming, and while banks, fintechs, and consumer groups have all advocated for clear rules around financial data sharing, the devil will ultimately be in the details of how they are implemented. Those details will determine to what extent the open banking rule will enable use cases including using data to support cash flow underwriting and account switching. One of the primary focuses for the CFPB will be to ensure that this rulemaking does not create a backdoor to data leaks, and we expect that the agency will emphasize data protection as a critical aspect of the regulation. Many open questions about these details remain, including the extent to which the rule will limit “secondary uses” of data by third parties, which are uses beyond those necessary to perform the services requested by the customer. Other questions include which parties will be liable in the event of a breach, details around technological standards for data sharing1 and whether the CFPB will introduce an authorization regime for self-regulatory organizations. As the rule would more easily allow customers to transfer account information, automatic payments features and billing history to other firms, all firms should evaluate how open data access could disrupt their business and operating models and/or create new opportunities.

While Chopra’s speech portends a focus on competition beyond traditional financial institutions, we do not anticipate a similar “open payments” rule for Big Tech companies any time soon. Considering that the forthcoming open banking proposal will arrive more than 13 years following the passage of Dodd-Frank and after numerous requests for feedback, panels and studies, it would be a similarly long path to develop a rule addressing the significantly different considerations associated with payments technology. For example, requiring open access to tap-to-pay technology would pose significant data security and financial crime risks that would need to be addressed. Instead, we expect that the CFPB will use its existing authority to enforce against unfair, deceptive or abusive acts or practices - as it has stated it would do to examine fintech startups and Big Tech companies - to scrutinize the use of data associated with payments, customer disclosures, fee structures and terms and conditions. This authority could also be strengthened in the near future if the CFPB moves forward with a Large Market Participant rule, which would set into motion the its ability under Dodd-Frank to designate larger firms within a specific market for more stringent supervision.

1For example, it remains unclear whether the final rule would allow all forms of information sharing - including the less-secure “screen scraping” method where computer programs read and copy data available on a website - or whether it would require the use of application programming interfaces (APIs), which can securely transfer data across firms.

3. On our radar

These notable developments hit our radar this week:

  • Barr speaks on the Fed’s role in supporting responsible innovation. On September 8, the Fed Vice Chairman of Supervision Michael Barr spoke on the benefits of the Fed’s new instant payment system FedNow which was released on July 20, 2023. It allows individuals and businesses to send instant payments through their depository institution accounts. He also highlighted the Fed’s recent efforts in promoting responsible innovation in financial services and noted that while a central bank digital currency (CBDC) is being explored, the Fed was far from any decision.
  • FDIC releases First Republic Bank supervision report. On September 8th, the FDIC released a report evaluating its supervision of First Republic Bank from 2018 until its failure in May 2023. It also describes reasons leading to the failure including loss of market and depositor confidence, rapid growth and loan and funding concentrations, overreliance on uninsured deposits and failure to sufficiently mitigate interest rate risk. In response, the report notes that regulators are actively reviewing existing regulatory requirements such as capital standards and the appropriate asset threshold for enhanced prudential standards. For more on regulatory responses to recent bank failures, see Our Take Special Edition: Bank failure reports.
  • International regulatory bodies release papers on crypto-assets: On September 7, the Financial Stability Board (FSB) and International Monetary Fund (IMF) published a report outlining a comprehensive approach to identify and respond to macroeconomic and financial stability risks associated with crypto-asset activities. The report notes that regulatory and supervisory oversight of crypto-assets should be a baseline to address macroeconomic and financial stability risks. It also sets out a roadmap to ensure effective, flexible and coordinated implementation of the comprehensive policy response for crypto-assets. Similarly, on September 7, the International Organization of Securities Commissions (IOSCO) issued a report with nine policy recommendations on decentralized finance that IOSCO plans to finalize by the end of 2023.
  • Three Fed nominees confirmed. On September 6th, the Senate confirmed Philip Jefferson to be the Fed’s Vice Chair and Lisa Cook to serve another term as Fed Governor. Similarly, on September 7, Adriana Kugler was confirmed as a new Governor.
  • SEC risk-based exam approach. On September 6th, the Division of Examinations of the SEC published a risk alert providing additional information regarding the division’s risk-based approach for both selecting registered investment advisers to examine and in determining the scope of risk areas to examine. It also provided a list of typically requested documentation. The intention of this notice is for advisers to understand what to expect in their next examination.
  • SEC approved CAT funding plan. On September 6, the SEC approved an amendment to adopt a new funding model for the Consolidated Audit Trail (CAT). The approved amendment establishes a framework that plan participants will use to recover the costs to create, develop, and maintain the CAT, including the method for allocating CAT costs among participants and the members of a national securities exchange or a member of a national securities association.
  • FSB releases public responses on enhancing third-party risk management and oversight. On September 5, the Financial Stability Board (FSB) released the comments it received from its June 22, 2023 report on Enhancing Third-Party Risk Management and Oversight: A toolkit for financial institutions and financial authorities. The FSB expects to publish the final toolkit by the end of 2023.
  • Gensler hearing. On September 12th, SEC Chair Gary Gensler will testify before the Senate Banking Committee.
Follow us