All in Regulatory Update

On April 5, 2022, the OFAC sanctioned the world’s largest and most prominent darknet market, Hydra Market (Hydra), in a coordinated international effort to disrupt proliferation of malicious cybercrime services, dangerous drugs, and other illegal offerings available through the Russia-based site. The operation was a collaborative initiative joined by the DOJ, FBI, DEA, IRS Criminal Investigation, and ICE.

On 3/29/2022, the FDIC announced that the Federal Financial Institutions Examination Council (FFIEC) had issued the 2022 edition of A Guide to HMDA Reporting: Getting It Right! for Home Mortgage Disclosure Act (HMDA)-related data collected in 2022 and reported in 2023. This longstanding compliance resource has regularly been used by financial institutions as a “go-to” HMDA resource as it can help financial institutions better understand HMDA requirements, including the data collection and reporting provisions.

On March 31, 2022, the FDIC issued the March 2022 edition of the Consumer Compliance Supervisory Highlights. The purpose of this publication is to enhance transparency regarding the FDIC’s consumer compliance supervisory activities and to provide a high-level overview of consumer compliance issues identified in 2021 through the FDIC’s supervision of state non-member banks and thrifts.

On March 29, 2022, the FDIC updated sections of the Consumer Compliance Examination Manual. The Consumer Compliance Examination Manual is a primary resource and reference tool for FDIC compliance examination staff when conducting Consumer Compliance and CRA examinations. It incorporates examination policies, procedures, and guidance and is available on the FDIC website as a resource for FDIC staff, bankers, and other members of the public.

On March 29, 2022, the FDIC, the Federal Reserve and the OCC issued reminders of their upcoming interagency final rule and provided clarification on the contact information banks must use to them when they experience a cyber notification incident. Starting May 1, 2022, banks regulated by the FDIC, Federal Reserve, or OCC (and their bank service providers) must comply with a new file rule that requires notification to regulators of certain computer-security incidents.

FinCEN has updated its “SAR Filings by Industry” webpage to include data from 2021. In addition to this webpage, FinCEN has an interactive map and and Interactive SAR Stats which allow BSA professionals to analyze what types of suspicious activity are being reported in their areas. As this data allows specific sorting of the data, BSA professionals are able to sort by many different fields including primary regulator, county, etc.

On March 24, 2022, the OFAC designated dozens of Russian defense companies, 328 members of the Russian State Duma, and the head of Russia’s largest financial institution. This is in line with OFAC’s actions to impose severe costs on the Russian Federation for its illegal, unwarranted, and baseless war against Ukraine. The European Union, the United Kingdom, and Canada have also taken similar actions which reflects continued unity to hold Putin accountable for the war that he started.