Credit Union Service Contracts
AI Analysis
The NCUA finalized a deregulatory rule that removes 12 CFR 701.26, the section governing FCU credit union service contracts, and aligns part 721 to clarify FCU authority in shared operational arrangements. The rule is intended to reduce administrative burden and compliance complexity while the agency says existing expectations for written contracts, vendor oversight, and safe-and-sound third-party risk management remain unchanged.
Key dates
- 2026-02-25
- NCUA issued the proposed rule removing 12 CFR 701.26; public comments were invited through April 27, 2026
- 2026-04-27 Deadline
- Public comment deadline on the proposal
- 2026-08-06
- Final rule published in the Federal Register at 91 FR 50674
- 2026-09-08 Deadline
- Final rule becomes effective
Suggested considerations
- Compliance teams may wish to remove references to 12 CFR 701.26 from policies, procedures, and training materials once the rule is effective.
- Firms should consider confirming that contract templates still include written terms addressing audit rights, information security, business continuity, indemnification, performance metrics, data ownership and return, termination, and dispute resolution.
- Credit unions involved in shared operational arrangements may wish to review whether documentation now reflects the updated clarification in 12 CFR 721.3.
- Firms may wish to confirm that third-party risk management, vendor oversight, and due diligence controls remain aligned with existing supervisory expectations despite the regulatory deletion.
What changed
The final rule rescinds 12 CFR 701.26, which had addressed FCU authority to enter written contracts for assets or services relating to daily operations and required those agreements to be in writing. NCUA states that the contractual authority already exists under the FCU Act and incidental powers authority, so the regulation was redundant. The Board also amended 12 CFR 721.3 to formally clarify that credit unions may act as representatives in shared operational arrangements with other credit unions or organizations, and that fixed assets may be shared. NCUA emphasized that removal of 701.26 does not change the expectation that contracts should be written or that FCUs should manage third-party risks prudently. The agency specifically noted that the deleted provision did not impose substan
Compliance impact
The practical impact is moderate: the rule removes a prescriptive regulatory citation but does not eliminate the underlying authority or supervisory expectations around written contracts and vendor oversight. NCUA says the change should lower administrative costs and complexity, while poor third-party risk management could still draw supervisory concern under existing safety-and-soundness expectat
Who is affected
Related regulations
References
AI-generated analysis. May contain errors or omissions — verify with the original NCUA source before acting. Full disclaimer.
What the NCUA said
Final rule. The NCUA Board (Board) is revising its regulations governing the organization and operation of federal credit unions (FCUs) by eliminating a provision related to credit union service contracts. The Board intends to reduce administrative costs and compliance complexity with this revision, enabling FCUs to…
Extract from NCUA . Read the full notice at the source for the authoritative text.