On December 18, 2020, the Office of the Comptroller of the Current (OCC), Federal Reserve Board (FRB), and Federal Deposit Insurance Corporation (FDIC) announced an interagency notice of proposed rulemaking that would require supervised banking organizations to provide notification of significant computer security incidents to their primary federal regulator. Under the proposed rule, for incidents
On November 3rd, voters in Arizona, New Jersey, South Dakota, Montana, and Mississippi passed ballot measures to bring legal cannabis to each of their states. It’s not every year that we see states from opposite ends of the political spectrum agree on something with such vigor. In fact, loosening the laws surrounding cannabis—be it medical use, recreational use, or farming of hemp products—has consistently been one of the only areas receiving bipartisan support in a country divided on almost everything else.
The passage of these ballot measures means that the cannabis industry will generate even more revenue. Despite the massive dollar amounts currently associated with the cannabis industry, reliable banking services remain elusive, due to federal drug and money laundering laws and the Bank Secrecy Act (“BSA”). This post will summarize the recent cannabis legislation, and recap the main roadblocks facing the industry (and financial institutions) from a financial compliance perspective.
Continue Reading The State of Cannabis Affairs: New Legislation and a Regulatory Recap
We are pleased to offer the latest episode in Ballard Spahr’s Consumer Financial Monitor Podcast series — a weekly podcast focusing on the consumer finance issues that matter most, from new product development and emerging technologies to regulatory compliance and enforcement and the ramifications of private litigation. Following up on a recent blog post,
Regulators’ Joint Statement Attempts to Clarify AML Expectations Regarding Potential Corrupt ActorsOn August 21, the Treasury Department’s Financial Crimes Enforcement Network (FinCEN) and other banking regulators – specifically the Federal Reserve, the FDIC, the National Credit Union Administration, and the OCC – issued a joint statement that provides additional guidance in applying Bank Secrecy
Regulators Provide Greater Transparency into BSA/AML Enforcement ProcessOn August 13, 2020 the Federal Reserve System, Federal Deposit Insurance Corporation, National Credit Union Administration, and Office of the Comptroller of the Currency (the “Agency” or collectively the “Agencies”) issued a joint statement updating and clarifying their 2007 guidance regarding how they evaluate enforcement actions when financial institutions violate or fail to meet BSA/AML requirements. The Financial Crimes Enforcement Network (“FinCEN”) followed with its own statement on August 18, 2020, setting forth its approach when considering enforcement actions against financial institutions that violate the BSA.
Below are a few highlights from the two sets of guidance:
All in all, the two statements, particularly the joint statement, succeed in providing greater transparency into the regulators’ decision-making processes with regards to pursuing enforcement actions for violations of the BSA and for AML program deficiencies.
Continue Reading Federal Banking Agencies Issue Joint Statement On Enforcement of BSA/AML Requirements; FinCEN Follows With Its Own
In the past month, the Government Accountability Office (“GAO”), a non-partisan legislative agency that monitors and audits government spending and operations, has issued a series of reports urging banking regulators and certain executive branch agencies to adopt recommendations related to trade-based money laundering (“TBML”) and derisking. These reports underscore (1) the importance of TBML as a key, although still inadequately measured, component of money laundering worldwide, and (2) that the GAO remains interested in assessing how banks’ regulatory concerns may be influencing their willingness to provide services.
Taken together, the GAO’s recent activity signals that even in the face of unprecedented public health and regulatory challenges posed by COVID-19, the GAO still expects banking regulators and agencies alike to fulfill its prior commitments on other, unrelated topics.
Examiners Should Focus on Risk, Not Technical PerfectionOn April 15, 2020, the Federal Financial Institutions Examination Council (“FFIEC”) released updates to the Bank Secretary Act/Anti-Money Laundering (“BSA/AML”) examination manual (the “Manual”). As the FFIEC Interagency press release described, the Manual provides “instructions to examiners when assessing the adequacy of a bank’s BSA/AML compliance program.” The “release of the updated sections provides further transparency into the BSA/AML examination process and does not establish new requirements.” The press release further stated the revisions were made to, among other objectives, emphasize examiners should be “tailoring BSA/AML examination to a bank’s risk profile,” to “ensure language clearly distinguishes between mandatory regulatory requirements and supervisory expectations” for examiners, and to “incorporate regulatory changes since the last update of the Manual in 2014.”
The Federal Deposit Insurance Corporation (“FDIC”) also issued a press release regarding the updates. Its statement recognized “financial institutions are faced with uncertainty during this unprecedented time,” therefore the FDIC cautioned the update, “which supports tailored examination work, has been in process for an extended period and should not be interpreted as new instructions or as an augmented focus.”
The updates focus on four steps in the examination process:
The updates emphasize examiners should take a “risk-focused” approach to tailor the review of a regulated institution’s BSA/AML compliance program, meaning the examination should be tailored to the risk profile of that specific institution. The Manual updates incorporate guidance on more recent developments such as Customer Due Diligence (“CDD”) and Beneficial Ownership requirements and a recognition of innovations in collaborations among smaller institutions. Importantly, the Manual reminds examiners that banks have flexibility in the design of their BSA/AML compliance programs, and that minor weaknesses, deficiencies, and technical violations alone do not indicate an inadequate program.
Continue Reading FFIEC BSA/AML Examination Manual Updates Reveal Exam Process and Expectations
On December 3, 2019, four federal agencies – the Board of Governors of the Federal Reserve System, the Federal Deposit Insurance Corporation (“FDIC”), the Financial Crimes Enforcement Network (“FinCEN”), and the Office of the Comptroller of the Currency (“OCC”) – along with the Conference of State Bank Supervisors, released a statement (the “Statement”) “to provide clarity regarding the legal status of commercial growth and production of hemp and relevant requirements for banks under the Bank Secrecy Act and its implementing regulations.” The Statement represents the next step in the normalization of hemp growth and cultivation following its legalization under the Agriculture Improvement Act of 2018 (the “2018 Farm Bill”) and was, predictably, applauded by those in the banking community, including the American Banking Association.
Continue Reading Banking Regulators Ease SAR Reporting Requirements Applied to Hemp-Related Businesses
On July 22, 2019, the Board of Governors of the Federal Reserve System, the Federal Deposit Insurance Corporation, the National Credit Union Administration, the Office of the Comptroller of the Currency and the U.S. Department of Treasury’s Financial Crimes Enforcement Network (FinCEN) (collectively the federal banking agencies), issued a joint statement entitled Joint Statement on Risk-Focused Bank Secrecy Act/Anti-Money Laundering Supervision (the “statement”).
The specific emphasis of the statement is to reiterate that the federal agencies will take a risk-focused approach to examinations. The statement itself does not purport to create new requirements but rather is a tool to enhance transparency in the approach used by the federal banking agencies in planning and performing BSA/AML examinations. As the statement notes, it “aligns with the federal banking agencies’ long-standing practices for risk-focused safety and soundness examinations.”
At the outset, the federal banking agencies urge banks to conduct a comprehensive risk assessment, which are deemed “a critical part of sound risk management.” Specifically, banks themselves have unique risk profiles given each bank’s focus (i.e., “a bank with a localized community focus likely has a stable, known customer base”) and complexity, which must be assessed at the outset when developing and implementing an adequate BSA/AML program.
Of particular note, the federal banking agencies state that banks that “operate in compliance with applicable law, properly manage customer relationships and effectively mitigate risk by implementing controls commensurate with those risk are neither prohibited nor discouraged from providing banking services.” The statement goes on to assert that “banks are encouraged to manage customer relationships and mitigate risks based on customer relationships rather than declining to provide banking services to entire categories of customers.”
Continue Reading Joint Statement Issued by Federal Banking Agencies Highlights Importance of Banks’ Risk-Assessments
A recent court opinion emphasizes the sensitive issues involved in terminating potentially difficult employees — or, from the employee’s or perhaps the government’s perspective, in terminating whistleblowers who were retaliated against for being willing to point out compliance failures. Although this competing dynamic applies across all industries, a recent opinion from the U.S. Federal District Court for the Eastern District of Louisiana, Kell v. Iberville Bank, addressed such a situation in the Anti-Money Laundering (“AML”)/Bank Secrecy Act (“BSA”) context, in which a bank’s former compliance officer sued her former employer for allegedly terminating her in retaliation for raising uncomfortable issues about claimed insider abuse and the alleged failure to file a Suspicious Activity Report (“SAR”).
Continue Reading Case Highlights Potential Protections for BSA Whistleblowers