Regulatory change is once again shifting the path forward for financial institutions. From fair lending and small business reporting to Bank Secrecy Act (BSA)/anti-money laundering (AML) modernization, recent and proposed updates are creating a new compliance environment — one that calls for stronger governance, clearer documentation and a more strategic approach to risk management. 

For banks and credit unions, the message is clear: compliance cannot be treated as a static checklist. Institutions must be ready to explain not only what their policies say, but how decisions are made, how risks are monitored and how leadership is engaged in the process. 

Key Takeaways

One of the most significant changes comes from the Consumer Financial Protection Bureau’s (CRPB) April 2026 amendments to Regulation B. The final rule eliminates disparate impact liability under Regulation B and significantly narrows what constitutes unlawful discouragement. The framework now places greater emphasis on intentional discrimination rather than statistical outcomes alone. 

That shift does not mean fair lending analytics should be set aside. Instead, institutions should use data as an early-warning tool and pair it with stronger file review, control evaluation, governance and decision-level documentation. Underwriting, pricing, exceptions and second-review decisions should be documented in a way that supports a clear, defensible narrative. 

The revised discouragement standard also puts renewed focus on direct customer communications. Because the rule centers on oral, written or visual communications that could reasonably discourage someone from applying for credit, frontline training, scripting controls and oversight of applicant interactions remain critical. 

Special Purpose Credit Programs should also be reviewed carefully. The rule introduces tighter documentation expectations and, for certain lenders, restrictions on the use of protected characteristics as eligibility criteria. Institutions should revisit written plans, confirm the purpose and need for each program, and document why neutral alternatives would not achieve the same objectives. 

Section 1071 small business lending reporting is another area where early preparation matters. The CFPB’s 2026 final rule narrows the original framework by raising the covered transaction threshold to 1,000 annually and reducing the small business revenue definition to $1 million or less. While the Jan. 1, 2028 compliance date provides additional time, institutions should not wait to begin assessing product coverage, exclusions, data fields, system capabilities and accountability structures.