Unsafe or Unsound Practices and Matters Requiring Attention: Final Rule
AI Analysis
On August 27, 2026, the OCC and FDIC issued a joint final rule defining “unsafe or unsound practice” under section 8 of the Federal Deposit Insurance Act and establishing a uniform, narrower standard for Matters Requiring Attention (MRAs). Independent market commentary describes the rule as the first formal regulatory definition of the core supervisory concept and emphasizes its shift toward material financial risk, while creating a less coercive channel for lower-level supervisory concerns.
Key dates
- 2026-08-27
- OCC and FDIC issued the joint final rule through OCC Bulletin 2026-40. The bulletin applies to all OCC-supervised banks; it does not state the Federal Register publication date, effective date, or a firm compliance deadline.
Suggested considerations
- Firms should identify the final rule’s Federal Register publication and effective date, because the OCC bulletin itself does not state either date or a compliance deadline, and should monitor OCC and FDIC implementation guidance before relying on any transition treatment.
- Compliance teams may wish to inventory open MRAs, supervisory recommendations, enforcement matters, and examination findings and map each item to the final rule’s material-financial-risk, DIF-risk, actual-violation, or already-caused-harm criteria.
- Firms should consider separating board-level MRA remediation obligations from discretionary management responses to supervisory observations and documenting why a weakness is treated under one category rather than another.
- Risk and compliance functions may wish to enhance evidence files supporting assessments of likelihood, materiality, current and reasonably foreseeable conditions, and impacts on capital, asset quality, earnings, liquidity, and market-risk sensitivity.
- Banks should consider documenting how supervisory requirements and remediation plans are tailored to asset size, complexity, activities, capital structure, and other financial-risk factors, particularly where the institution has heightened systemic, concentration, liquidity, or operational complexity.
- Legal and compliance teams may wish to distinguish actual violations of banking or banking-related laws and regulations from prudential weaknesses, because an actual violation can support an MRA without separately satisfying the prudent-operation and material-risk test.
- Boards and senior management should consider reviewing governance procedures so that MRAs receive required escalation and tracking while supervisory observations are clearly identified as non-binding potential enhancements.
- Firms should consider preparing a process for requesting and retaining the objective facts and reasoning underlying an MRA or unsafe-and-unsound-practice determination, as the rule requires examiners to share that basis.
What changed
An unsafe or unsound practice is now defined as a practice, act, or failure to act that is contrary to generally accepted standards of prudent operation and either is likely, if continued, to materially harm the bank’s financial condition or present a material risk of loss to the Deposit Insurance Fund, or has already materially harmed the bank’s financial condition. “Likely” requires more than a merely possible risk; relevant financial-condition effects include impacts on capital, asset quality, earnings, liquidity, and sensitivity to market risk. Reputation risk unrelated to financial condition is excluded. An MRA may be issued only where the conduct is contrary to generally accepted standards of prudent operation and could reasonably be expected, under current or reasonably foreseeable
Compliance impact
The rule may reduce the scope of MRAs and section 8 enforcement theories for nonfinancial, documentation, process, or reputation concerns that lack a material financial-risk or legal-violation nexus, but it does not eliminate supervisory scrutiny or remediation obligations. Higher-risk banks may face lower materiality thresholds, more granular harm assessments, and more demanding remediation expec
Who is affected
Related regulations
References
AI-generated analysis. May contain errors or omissions — verify with the original OCC source before acting. Full disclaimer.
What the OCC said
The OCC and the FDIC issued a joint final rule to define the term "unsafe or unsound practice" for purposes of section 8 of the Federal Deposit Insurance Act and revise the supervisory framework for the issuance of matters requiring attention (MRA) and other supervisory communications.
Published by OCC . Read the full notice at the source for the authoritative text.