What's Happening?
The American Fintech Council (AFC) has submitted comment letters to the Office of the Comptroller of the Currency (OCC) and the Federal Deposit Insurance Corporation (FDIC), supporting proposed rule changes that would expand the circumstances under which
banks and fintech companies can share confidential supervisory information (CSI). The AFC argues that the current CSI framework creates unnecessary friction in bank-fintech partnerships, particularly during the pre-contractual due diligence phase. The council is advocating for three main reforms: extending business-purpose disclosure authority to cover the entire lifecycle of third-party relationships, including initial due diligence; permitting CSI sharing during merger and acquisition evaluations and pre-engagement assessments of senior leadership candidates; and establishing a structured route for qualifying entities like trade associations to receive institution-specific CSI for aggregated analysis, with publishable findings. The AFC also recommends embedding confidentiality provisions in existing commercial agreements rather than creating new standalone approval processes and opposes rigid requirements such as domestic incorporation mandates or granular personnel access logs.
Why It's Important?
This initiative by the AFC is significant for the U.S. financial industry, particularly for the rapidly evolving bank-fintech ecosystem. By advocating for broader CSI sharing, the AFC aims to improve transparency and risk assessment in partnerships between traditional banks and innovative fintech companies. The current restrictions on data sharing can lead to incomplete due diligence, increasing risks for both parties and potentially hindering the development of beneficial financial products and services. Modernizing these rules could foster more robust and secure collaborations, ultimately benefiting consumers through enhanced financial offerings. For banks, better access to supervisory information about potential fintech partners means more informed decision-making and reduced regulatory risk. For fintechs, the ability to disclose their supervisory standing could become a competitive advantage, especially in a market where banks are becoming more cautious about new technology relationships. This reform could streamline the partnership process, reduce operational inefficiencies, and promote innovation within a more secure regulatory environment.
What's Next?
The comment period for the proposed OCC and FDIC rulemakings is ongoing. Following the closure of this period, the agencies will review all submitted comments, including those from the AFC, before making final decisions on the rule changes. If adopted, these final rules would likely impact a significant portion of bank-fintech partnership frameworks operating under OCC and FDIC charters. The AFC's proposals aim to create a more efficient and effective examination process for all parties involved. The outcome of these regulatory updates will determine the extent to which banks and fintechs can more freely and securely share confidential supervisory information, potentially leading to a more integrated and innovative financial services landscape in the U.S. The broader effort by U.S. prudential regulators to update the legal infrastructure around bank-fintech partnerships will continue, with a focus on improving visibility into risk profiles before and during relationships.
Beyond the Headlines
The debate over supervisory data sharing between banks and fintechs touches upon the delicate balance between regulatory oversight, innovation, and data privacy. While increased transparency can mitigate risks in partnerships, it also raises questions about the scope of information sharing and the potential for unintended consequences, such as competitive disadvantages or misuse of sensitive data. The AFC's push for aggregated analysis by trade associations suggests a move towards collective intelligence in risk management, which could benefit the entire industry by identifying systemic vulnerabilities. However, the implementation of such a system would require robust safeguards to protect individual institution data. This regulatory evolution reflects a broader trend in the financial sector where traditional boundaries are blurring, necessitating adaptive legal frameworks that can accommodate new business models while maintaining financial stability and consumer protection. The success of these reforms will depend on finding a pragmatic approach that fosters collaboration without compromising the integrity of supervisory information.













