CFPB Examination Procedures for Automated Account Actions
The CFPB treats algorithmic decisions like human ones under existing law.
The CFPB treats algorithmic decisions like human ones under existing law.
NCUA expects credit unions to own AI risk and document vendor oversight, even without formal rules.
Banks must verify human identity before AI executes wire transfers.
Banks must build AI governance rules regulators won't write before examiners arrive.
Regulators exempt agentic AI from model risk rules, forcing banks to build their own controls.
AI agents must prove authorization and leave audit trails to meet NACHA's 2026 fraud rules.
Regulators are holding banks accountable for AI systems that documentation alone cannot justify.
Scope determines whether a SOC 2 report actually protects your bank or just looks certified.
Most community banks have deployed AI but lack governance to match the risk.
Regulators named agentic AI as the gap NIST's framework must fill.