Changeflow GovPing Banking & Finance Prohibition on Use of Reputation Risk by Regula...
Priority review Rule Added Final

Prohibition on Use of Reputation Risk by Regulators: Final Rule

Favicon for www.occ.treas.gov OCC News Issuances
Detected April 7th, 2026
Email

Summary

The OCC and FDIC issued a joint final rule prohibiting banking regulators from using reputation risk as a basis for supervisory criticism or adverse action against institutions. The rule also bars agencies from requiring or encouraging banks to terminate or modify relationships with third parties based on political, social, religious views, constitutionally protected speech, or lawful but politically disfavored activities. The rule codifies the agencies' removal of reputation risk from their supervisory frameworks and will take effect 60 days after Federal Register publication.

What changed

The final rule fundamentally changes how OCC and FDIC conduct bank supervision by explicitly prohibiting any use of reputation risk as a supervisory tool. The rule defines reputation risk as any action that could negatively impact public perception of an institution for reasons unrelated to its financial or operational condition, and eliminates this concept from the supervisory framework entirely. Banks and their employees can no longer be required, instructed, or encouraged by regulators to terminate contracts, discontinue business relationships, or modify services based on a third party's political, religious, or social views.\n\nFor affected financial institutions, this rule provides clear protection against de-banking pressure from regulators based on subjective reputational concerns. National banks, federal savings associations, and their examining personnel should expect that supervisory criticism tied to reputation risk will no longer be issued, and any prior informal guidance on this basis is now superseded by binding regulation. Third-party business relationships involving constitutionally protected activities or politically sensitive lawful business cannot be the basis for regulatory action.

What to do next

  1. Review and update third-party due diligence policies to align with new restrictions on regulator pressure
  2. Monitor for Federal Register publication to confirm compliance deadline
  3. Ensure staff understand that regulatory criticism on reputation risk grounds is no longer permissible

Source document (simplified)

OCC Bulletin 2026-12 | April 7, 2026

Prohibition on Use of Reputation Risk by Regulators: Final Rule

Share This Page:


To

Chief Executive Officers of All National Banks, Federal Savings Associations, and Federal Branches and Agencies; Department and Division Heads; All Examining Personnel; and Other Interested Parties


Summary

The Office of the Comptroller of the Currency (OCC) and the Federal Deposit Insurance Corporation (FDIC) issued a final rule to codify the elimination of reputation risk from their supervisory programs. Among other things, the final rule prohibits the agencies from criticizing or taking adverse action against an institution on the basis of reputation risk. The final rule also prohibits the agencies from requiring, instructing, or encouraging an institution to close an account, to refrain from providing an account, product, or service, or to modify or terminate any product or service on the basis of a person’s or entity’s political, social, cultural, or religious views or beliefs, constitutionally protected speech, or solely on the basis of politically disfavored but lawful business activities perceived to present reputation risk.

The final rule will be effective 60 days after publication in the Federal Register.

Note for Community Banks

The proposed rule would apply to community banks.

Highlights

  • The agencies have removed reputation risk from their supervisory frameworks and are codifying this change through a regulation.
  • The final rule prohibits the agencies from criticizing, formally or informally, or taking adverse action against an institution on the basis of reputation risk.

Background

  • Banking regulators’ use of the concept of reputation risk as a basis for supervisory criticisms increases subjectivity in banking supervision without adding material value from a safety and soundness perspective. The agencies have not clearly explained how banks should measure the reputation risk from different activities, business partners, or clients. Different stakeholders may have different perspectives on how activities or relationships impact an institution’s reputation. In addition, focusing on reputation risk can distract institutions and the agencies from devoting resources to managing core financial risks.
  • The final rule defines “reputation risk” as the risk, regardless of how the risk is labeled by the institution or by the agencies, that an action or activity, or combination of actions or activities, or lack of actions or activities, of an institution could negatively impact public perception of the institution for reasons unrelated to the financial or operational condition of the institution.
  • Under the final rule, the agencies are prohibited from requiring, instructing, or encouraging an institution or its employees to refrain from contracting with or to terminate or modify a contract with a third party, including an institution-affiliated party, on the basis of reputation risk.
  • Under the final rule, the agencies cannot require, instruct, or encourage an institution or its employees to refrain from doing business with or to terminate or modify a business relationship with a third party, including an institution-affiliated party, on the basis of reputation risk.
  • The final rule prevents the agencies from requiring, instructing, or encouraging an institution to enter into a contract or business relationship with a third party on the basis of reputation risk.
  • The final rule further prohibits the agencies from requiring, instructing, or encouraging an institution or an employee of an institution to terminate a contract with, discontinue doing business with, or modify the terms under which it will do business with a person or entity on the basis of the person’s or entity’s political, social, cultural, or religious views or beliefs, constitutionally protected speech, or solely on the basis of the third party’s involvement in politically disfavored but lawful business activities perceived to present reputation risk.
  • The final rule also makes conforming amendments to OCC and FDIC regulations, including part 1 and part 30 of OCC regulations, to eliminate references to reputation risk.

Further Information

Please contact Joanne Phillips, Counsel; or Collin Berger, Attorney, Chief Counsel’s Office, at 202-649-5490.

Adam J. Cohen
Senior Deputy Comptroller and Chief Counsel

Related Link


Topic(s):

Named provisions

Definition of Reputation Risk Prohibition on Supervisory Criticism Prohibition on Third-Party Relationship Termination Protection for Constitutionally Protected Activities

Get daily alerts for OCC News Issuances

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
OCC
Compliance deadline
June 6th, 2026 (60 days)
Instrument
Rule
Legal weight
Binding
Stage
Final
Change scope
Substantive
Document ID
OCC Bulletin 2026-12

Who this affects

Applies to
Banks Government agencies
Industry sector
5221 Commercial Banking
Activity scope
Banking supervision Third-party risk management Account relationship management
Geographic scope
United States US

Taxonomy

Primary area
Banking
Operational domain
Compliance
Topics
Consumer Finance Consumer Protection

Get alerts for this source

We'll email you when OCC News Issuances publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.