Dodd-Frank Wall Street Reform & Consumer Protection Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 was Congress's comprehensive response to the 2008 financial crisis — the most sweeping overhaul of U.S. financial regulation since the New Deal. Its core goals: prevent the kind of systemic risk that nearly collapsed the global financial system, end "too big to fail" bailouts, rein in risky derivatives trading, and create stronger consumer financial protection. Dodd-Frank created several new agencies and frameworks: the Consumer Financial Protection Bureau (CFPB), which consolidated consumer financial protection authority from seven agencies; the Financial Stability Oversight Council (FSOC), which identifies and monitors systemically important institutions; the Orderly Liquidation Authority giving the FDIC power to wind down failing megabanks outside normal bankruptcy; and sweeping derivatives reform requiring central clearing and exchange trading of standardized swaps. The Volcker Rule prohibits banks from proprietary trading. The law has been partially rolled back — the 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act (EGRRCPA) raised the SIFI threshold from $50 billion to $250 billion in assets, freeing mid-size banks from enhanced oversight. Many of Dodd-Frank's core provisions remain intact and operational, though the CFPB has faced repeated legal and funding challenges.

Current Law (2026)

Legal Authority

• 12 U.S.C. § 5321-5333 — Financial Stability Oversight Council (FSOC) (10-member council chaired by Treasury Secretary; identifies and responds to systemic risks; designates systemically important nonbank financial companies for enhanced Fed supervision)
• 12 U.S.C. § 5365 — Enhanced prudential standards (banks with $250B+ assets subject to stress testing, capital planning, liquidity requirements, living wills, and risk management requirements)
• 12 U.S.C. § 5381-5394 — Orderly Liquidation Authority (FDIC may resolve a failing systemically important financial company if its failure would have serious adverse effects on the financial system — alternative to taxpayer-funded bailouts)
• 12 U.S.C. § 1851 — Volcker Rule (banking entities may not engage in proprietary trading or acquire/retain ownership interests in hedge funds or private equity funds, subject to exemptions for market-making, underwriting, hedging, and government securities)
• 12 U.S.C. § 5491-5603 — Consumer Financial Protection Bureau (CFPB) (independent bureau within the Federal Reserve; consolidates federal consumer financial protection authority; rulemaking, supervision, and enforcement for consumer financial products — mortgages, credit cards, student loans, payday lending, debt collection)
• 15 U.S.C. § 78u-6 — SEC Whistleblower Program (persons who provide original information leading to SEC enforcement actions with sanctions exceeding $1 million receive 10-30% of the amount collected)

How It Works

Dodd-Frank is the most comprehensive financial regulatory reform since the New Deal — a 2,300-page statute enacted in response to the 2008 financial crisis that reshaped regulation of banks, securities, derivatives, consumer finance, and systemic risk oversight.

Dodd-Frank's systemic risk architecture centers on the Financial Stability Oversight Council (FSOC) — chaired by the Treasury Secretary and including the heads of all major financial regulatory agencies — which monitors threats to financial stability and can designate nonbank financial companies as "systemically important financial institutions" (SIFIs). Banks with $250 billion or more in assets (the 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act raised the threshold from $50 billion) face enhanced prudential standards: annual stress tests, capital planning, liquidity requirements, "living wills" (resolution plans), and risk committee requirements. The Orderly Liquidation Authority gives the FDIC power to resolve a failing SIFI through structured unwinding — intended to prevent taxpayer-funded bailouts. The Volcker Rule — named for former Fed Chair Paul Volcker — prohibits banking entities from proprietary trading (trading for the bank's own profit rather than on customers' behalf) and restricts investments in hedge funds and private equity; exemptions cover market-making, underwriting, hedging, and government securities trading, and the rule has been modified since initial implementation to simplify compliance for smaller banks. Derivatives reform addressed the 2008 failure mode directly: Dodd-Frank mandated central clearing of standardized swaps through registered clearinghouses, swap execution facility trading, dealer registration with the CFTC or SEC, and mandatory margin, capital, and reporting requirements.

The CFPB is Dodd-Frank's most visible consumer-facing creation — consolidating consumer financial protection authority previously scattered across seven agencies into a single bureau within the Federal Reserve with rulemaking, supervisory, and enforcement authority over mortgages, credit cards, student loans, payday lending, debt collection, and credit reporting. The Bureau's single-director structure was upheld by the Supreme Court in Seila Law v. CFPB (2020) but modified to allow presidential removal of the director without cause, making it somewhat less independent. The SEC Whistleblower Program — one of the most successful in federal law — pays 10–30% of sanctions exceeding $1 million to persons who provide original information leading to enforcement actions; the program has awarded over $2 billion to whistleblowers since inception and substantially increased the volume and quality of tips the SEC receives.

How It Affects You

State Variations

• State insurance regulation was largely preserved (Dodd-Frank created the Federal Insurance Office for monitoring but not direct regulation)

Implementing Regulations

• 12 CFR Part 249 (FRB / Regulation WW), 12 CFR Part 329 (FDIC), and 12 CFR Part 50 (OCC) — Liquidity Risk Measurement Standards (Liquidity Coverage Ratio and Net Stable Funding Ratio): the U.S. implementation of the Basel III liquidity standards for large banks, issued jointly by three agencies — Part 249 covers Federal Reserve-supervised bank holding companies and state member banks, Part 329 covers FDIC-supervised state nonmember banks, and Part 50 covers OCC-supervised national banks and federal thrifts. All three rules impose identical substantive requirements; the agency split reflects the three-agency structure of U.S. bank supervision. These parallel rules impose two distinct liquidity requirements:

  • Liquidity Coverage Ratio (LCR) (§ 249.10 / § 329.10 / § 50.10): covered institutions must maintain an LCR of ≥1.0 on each business day — meaning the stock of High-Quality Liquid Assets (HQLA) (cash, central bank reserves, U.S. Treasuries, certain agency securities, and Level 2A/2B assets) must equal or exceed the institution's projected net cash outflows over a 30-day stress period; the stress scenario assumes a significant deposit run, loss of wholesale funding, and increased collateral calls; the LCR is calculated daily and reported monthly
  • Net Stable Funding Ratio (NSFR) (§ 249.100 / § 329.100 / § 50.100): covered institutions must maintain an NSFR of ≥1.0 on an ongoing basis — meaning the Available Stable Funding (ASF) (equity, long-term liabilities, stable retail deposits, which receive higher ASF factors) must equal or exceed the institution's Required Stable Funding (RSF) (illiquid assets, long-term loans, committed credit facilities, and other assets that require stable funding); the NSFR measures 1-year structural liquidity; assets with longer effective maturities or less liquid characteristics receive higher RSF factors
  • Applicability and thresholds: full LCR and NSFR requirements apply to "covered companies" — banking organizations with ≥$250 billion in total consolidated assets, ≥$10 billion in on-balance-sheet foreign exposure, or that are Category I/II under the Federal Reserve's tailoring framework; "modified" (less stringent) requirements apply to Category III/IV firms; institutions below thresholds are not subject to these Parts
  • HQLA categories: Level 1 assets (central bank reserves, U.S. Treasury securities, GNMA securities) receive no haircut; Level 2A assets (GSE securities, certain corporate bonds rated AA or higher) receive a 15% haircut; Level 2B assets (high-grade equities, lower-rated corporate bonds) receive 25–50% haircuts and are capped at 15% of HQLA

  The LCR and NSFR are two pillars of the Basel III post-2008 crisis framework implemented in the U.S. after Dodd-Frank. They address different time horizons: the LCR ensures a 30-day survival buffer (short-term stress resilience), while the NSFR ensures institutions have stable funding for their balance sheet over a year (structural liquidity). The 2023 Silicon Valley Bank failure — which occurred despite SVB meeting LCR requirements — renewed debate about whether the LCR adequately captures concentrated, uninsured deposit flight risk. Federal Reserve and FDIC post-mortem analyses noted that SVB's high proportion of uninsured deposits created faster-than-modeled runoff. The 2024 Basel III endgame reproposals included adjustments to LCR outflow assumptions for uninsured deposits.

• 12 CFR Part 248 (Fed Reserve), 12 CFR Part 44 (OCC), 12 CFR Part 351 (FDIC), 17 CFR Part 255 (SEC), and 17 CFR Part 75 (CFTC) — The Volcker Rule Implementing Regulations (collectively "Regulation VV" across five agencies): the five parallel regulations applying the Volcker Rule prohibition to different supervised institutions:

  • Proprietary trading prohibition: a "banking entity" may not engage in "proprietary trading" — buying or selling financial instruments for a trading account not primarily for customer benefit; the definition of "trading account" has been the central compliance challenge; banks must document that their trading desks are serving customer flows rather than speculating; quantitative metrics (inventory turnover, revenue relative to risk taken, customer-facing revenues) serve as proxies for distinguishing permitted market-making from prohibited proprietary trading
  • Covered fund restriction: banking entities may not hold ownership interests in "covered funds" (private equity funds, hedge funds, and similar vehicles relying on 15 U.S.C. §§ 80a-3(c)(1) or 80a-3(c)(7) registration exemptions); exemptions permit organizing/offering covered funds to customers, de minimis seed capital investment during a new fund's development period (up to 3% of the fund's interests or 3% of the banking entity's Tier 1 capital), and other limited permitted activities
  • Permitted activities: market-making (if the banking entity holds no more than reasonable near-term demand); underwriting; portfolio hedging of correlated risks; trading U.S. government/agency securities; trading by regulated insurance affiliates; foreign banking entity trading entirely outside the U.S.; and liquidity management investing
  • 2019 simplification tiering: the 2019 joint final rule created three compliance tiers based on trading activity size — banks with ≤$10B in trading assets/liabilities have a compliance presumption; banks with ≤$20B have simplified compliance; only banks with >$20B face full reporting, CEO attestation, and quantitative metrics requirements; this tiering freed most community and regional banks from complex Volcker compliance documentation while maintaining oversight of G-SIBs and large broker-dealers

  Recent rulemakings: 84 FR 61974 (October 2019) — joint five-agency simplified final rule implementing tiered compliance; 85 FR 46422 (August 2020) — further revision expanding the covered fund exclusions for qualifying foreign excluded funds, credit funds, and venture capital funds; the 2020 rule significantly narrowed the covered fund prohibition for foreign funds that don't conduct banking activities primarily in the U.S.

• 12 CFR Part 237 — Swaps margin and capital requirements: definition of "insured depository institution" for purposes of swap margin rules under Title VII

• 12 CFR Part 265 — Rules regarding delegation of authority: delegations of authority to the Division of Financial Stability for FSOC-related functions

• 12 CFR Part 327 — FDIC assessments: special assessment methodology pursuant to the March 2023 systemic risk determination (Silicon Valley Bank/Signature Bank failures)

• 12 CFR Part 243 — Resolution Plans (Regulation QQ): the Federal Reserve Board's implementing rule for Section 165(d) of Dodd-Frank, requiring large bank holding companies to file annual "living wills" — detailed plans for how they could be rapidly and orderly resolved through bankruptcy in the event of material financial distress or failure, without extraordinary government support and without destabilizing the broader financial system. The living will framework is the regulatory answer to the "too big to fail" problem identified during the 2008 crisis:

  • § 243.2 — Covered companies: applies to U.S. bank holding companies with $250 billion or more in total consolidated assets, and foreign banking organizations with $250 billion or more in combined U.S. assets; the threshold was raised from $50 billion by the 2018 Economic Growth Act; as of 2026, approximately 8 institutions are subject to the full resolution planning requirement, including JPMorgan Chase, Bank of America, Citigroup, Wells Fargo, Goldman Sachs, Morgan Stanley, and major foreign banks' U.S. subsidiaries
  • § 243.4 — Resolution plan contents: each plan must describe in detail: (1) the strategy for rapidly and orderly resolving the covered company under the U.S. Bankruptcy Code without destabilizing the financial system; (2) the company's organizational structure, material entities, and core business lines; (3) the company's interconnections and interdependencies with financial system participants; (4) information regarding foreign subsidiaries and branches, including cross-border resolution obstacles; (5) operational continuity of critical operations; and (6) the company's capital and liquidity needs during resolution; plans must identify the single point of entry or multiple point of entry resolution strategy
  • § 243.8 — Feedback and deficiency findings: the Fed and FDIC jointly review resolution plans; if they jointly determine a plan is not credible or would not facilitate an orderly resolution, they issue a notice of deficiencies and the company must resubmit within 90 days; if the resubmitted plan is still deficient, the agencies may jointly impose requirements or restrictions on the company's activities, and ultimately may require the company to divest assets or operations to address structural impediments to resolution
  • § 243.11 — Confidentiality: resolution plans are treated as confidential supervisory information and are not publicly disclosed in full; the agencies publish public summaries; the confidentiality is designed to prevent markets from using plan information to front-run a firm's distress (a "bank run" triggered by resolution plan details), but critics argue it limits public accountability

  Living wills have evolved from largely academic exercises (the first round of plans filed in 2012 were widely criticized as cursory) to substantive structural commitments. The Fed and FDIC have issued "shortcoming" findings against major banks — requiring structural changes including legal entity rationalization (simplifying the corporate structure), developing playbooks for capital and liquidity distribution in resolution, and separating systemically important operations from the rest of the firm. JPMorgan, Goldman Sachs, Bank of America, and others have made significant organizational changes in response to resolution plan feedback. Recent rulemakings: 88 FR 64524 (September 2023) — major revision requiring biennial (rather than annual) full plan submissions, with triennial public summaries, and updated content requirements; resolved a long-standing criticism that annual cycles were too burdensome for both filers and reviewers.

• 12 CFR Part 234 — Designated Financial Market Utilities (Regulation HH): the Federal Reserve's implementing regulation for Dodd-Frank Title VIII (Payment, Clearing, and Settlement Supervision), which created a framework for designating and supervising systemically important financial market utilities (FMUs) — the clearinghouses, central counterparties (CCPs), and payment systems whose failure could threaten U.S. financial stability. Title VIII created a new category of regulated entities distinct from banks or broker-dealers. Key provisions:

  • § 234.3 — Risk management standards: every designated FMU must maintain rules, procedures, and operations meeting the Fed's risk management standards, covering: (a) legal basis — clear and enforceable rules and participation agreements across all jurisdictions; (b) governance — board structure, risk management committee, independent risk function; (c) financial resources — sufficient liquid resources to cover the default of its largest participant in extreme but plausible market conditions; (d) margin — sufficient collateral from participants to cover current and potential future exposure (with daily backtesting); (e) settlement finality — clear legal framework for when settlement is final and irrevocable; (f) default management — tested procedures for closing out a defaulting participant's positions without destabilizing the market; (g) operational risk — resilient systems, business continuity, disaster recovery
  • § 234.4 — Advance notice of rule changes: designated FMUs must provide the Fed at least 60 days' advance notice of any proposed change to their rules, procedures, or operations that could materially affect the nature or level of risks — allowing the Fed to object before implementation; the Fed may require modifications; this prior notice requirement gives regulators visibility into clearinghouse governance changes that could affect systemic risk
  • § 234.5 — Access to Federal Reserve accounts: designated FMUs may be authorized to maintain master accounts at Federal Reserve Banks — giving them direct access to the Fed's payment system and, critically, potential access to Fed emergency lending under Section 806 of Dodd-Frank; this provision was transformative — it means that in a severe liquidity crisis, a designated FMU could receive emergency Fed lending to prevent its failure, extending the Fed's lender-of-last-resort function to non-bank financial market infrastructure for the first time
  • § 234.6 — Interest on Fed balances: the Fed pays interest on balances maintained by designated FMUs at the Fed, at a rate determined by the Fed

  FSOC has designated eight financial market utilities as systemically important under Dodd-Frank: The Clearing House Payments Company (CHIPS), CLS Bank International, Chicago Mercantile Exchange (CME), DTCC's Depository Trust Company, National Securities Clearing Corporation, Fixed Income Clearing Corporation, Options Clearing Corporation (OCC), and ICE Clear Credit. These entities settle trillions of dollars in securities, derivatives, and payment transactions daily. The Regulation HH framework responded to the 2008 crisis lesson that clearinghouses and payment systems — while generally stabilizing forces — are themselves potential points of systemic failure if under-resourced. Recent rulemakings: 87 FR 64418 (October 2022) — amendments to the FMU standards incorporating lessons from COVID-19 market volatility and updating margin and liquidity standards.

• 12 CFR Part 251 — Concentration Limit (Regulation XX): the Federal Reserve's implementing regulation for Section 622 of Dodd-Frank, which restricts any financial company from acquiring another financial company if, after the acquisition, the resulting company's consolidated liabilities would exceed 10 percent of the aggregate consolidated liabilities of all financial companies in the United States — a hard cap on financial sector concentration designed to prevent "too big to fail" from getting worse. Key provisions:

  • § 251.3 — The concentration limit: a financial company (bank holding companies, savings and loan holding companies, foreign banking organizations with U.S. operations, and nonbank financial companies designated by FSOC as systemically important) may not complete a covered acquisition — any merger, acquisition of assets, or takeover bid — if upon consummation, the resulting company's liabilities would exceed 10% of the aggregate liabilities of all U.S. financial companies; the aggregate liability figure is updated annually by the Fed based on financial regulatory data
  • § 251.4 — Exceptions: (a) failing institution — the Fed may grant prior written consent for an acquisition that exceeds the limit if the target institution is in default or in danger of default (the "too big to fail bailout" exception); (b) acquisitions of a de minimis amount of liabilities; (c) internal restructurings that don't increase aggregate exposure; the failing institution exception is the most significant and was used during the 2008 crisis (e.g., JPMorgan's acquisition of Bear Stearns and Washington Mutual)
  • § 251.5 — No evasion: financial companies may not structure acquisitions to evade the concentration limit — including through multiple smaller transactions designed to aggregate to an exceeding result
  • § 251.6 — Annual reporting: by March 31 of each year, financial companies at or near the concentration limit must report their consolidated liabilities to the Fed; this reporting allows the Fed to monitor proximity to the limit without waiting for a proposed acquisition

  As of 2026, only a handful of the largest U.S. financial companies — JPMorgan Chase, Bank of America, Citigroup — have consolidated liabilities large enough that a significant acquisition could approach the 10% limit. The practical effect of Regulation XX is less as a day-to-day constraint and more as a structural ceiling: it prevents the largest banks from becoming dramatically more concentrated through acquisition and gives the Fed leverage to review any major acquisition by a systemically important financial company. No major Part 251 amendments since the 2014 final rule (79 FR 14316).

• 12 CFR Part 382 — Qualified Financial Contract (QFC) Restrictions: the FDIC regulation implementing Section 210(c) of Dodd-Frank Title II, which requires covered financial companies to structure their derivatives, repurchase agreements, securities lending contracts, and other qualified financial contracts so that the FDIC's special resolution authority can operate without triggering the counterparty cascade that destroyed Lehman Brothers in 2008:

  • § 382.2 — QFC conformance requirement: covered financial companies — U.S. bank holding companies, savings and loan holding companies, or foreign banking organizations with $700 billion or more in total assets or $100 billion or more in off-balance-sheet exposure — must ensure their QFCs contain contractual provisions that recognize the FDIC's Title II rights; non-conforming QFCs must be amended (through ISDA protocol adherence or bilateral amendment) to remove provisions that would otherwise prevent orderly resolution
  • § 382.3 — U.S. special resolution regime recognition: covered entities must ensure counterparties cannot exercise default rights — termination, netting, collateral seizure — based solely on the FDIC's appointment as receiver or the transfer of the firm's assets to a bridge financial company; this directly overrides standard ISDA Master Agreement "close-out" rights that would otherwise allow counterparties to simultaneously terminate all trades the moment a bank failure is announced, a dynamic that amplified losses across the financial system in 2008
  • § 382.4 — Affiliate insolvency restriction: QFCs must also restrict cross-default rights triggered by the insolvency of the covered entity's affiliates; without this, a counterparty could terminate thousands of swap positions simply because a holding-company subsidiary entered a separate bankruptcy proceeding, spreading contagion sideways through the group
  • § 382.5 — Protocol compliance: covered entities may satisfy the conformance requirement by adhering to the ISDA Resolution Stay Protocol, an industry-standard multilateral protocol that accomplishes the required contractual amendments without bilateral renegotiation of thousands of individual ISDA agreements; major U.S. and foreign dealers have adhered en masse

  Part 382's core innovation is pre-committing large financial companies to not run for the exits. Standard derivatives contracts give counterparties the right to terminate and seize collateral the instant a default or insolvency event occurs — rational for individual firms but catastrophic in aggregate when the defaulting entity has hundreds of thousands of live contracts. By requiring FDIC-supervised covered entities to waive those rights contractually before any crisis occurs, Part 382 (alongside the analogous OCC rule at 12 CFR Part 47 and the Fed rule at 12 CFR Part 252) enables the Dodd-Frank "single point of entry" resolution strategy: the FDIC seizes the holding company, moves operating subsidiaries to a bridge institution, and keeps derivatives books running — rather than triggering a simultaneous termination storm that makes the failure larger and the cleanup more expensive.

• 12 CFR Part 1234 — Credit Risk Retention (FHFA, 20 sections): FHFA's implementation of Dodd-Frank Section 941 (codified at 15 U.S.C. § 78o-11), one of the most consequential post-crisis financial reforms — the "skin in the game" requirement. Section 941 mandated that federal regulators jointly require securitizers of asset-backed securities to retain at least 5% of the credit risk of any asset they securitize and sell to third-party investors. The logic: if securitizers retain exposure to the loans they originate and package, they have financial incentive to ensure those loans are soundly underwritten — eliminating the "originate-to-distribute" model that allowed lenders to make unsound mortgages, sell them into securities, and suffer no consequence when borrowers defaulted. The joint final rule was issued by OCC, FDIC, Fed Reserve, SEC, FHFA, and HUD in 2014 (79 FR 77602); FHFA's Part 1234 covers Fannie Mae, Freddie Mac, and the Federal Home Loan Banks. Note: FHFA's specific version covers transactions involving residential mortgage assets in securitizations; the parallel SEC rule (17 CFR Part 246) covers a broader range of ABS asset classes.

  • § 1234.3 — Base retention requirement: sponsors of securitizations must retain not less than 5% of the credit risk of securitized residential mortgage assets; the retained interest must be held for the life of the ABS or until paid off; no double-counting of retention across multiple securitization layers
  • § 1234.4 — Forms of retention: sponsors may satisfy the 5% requirement in three ways: (1) vertical interest — retaining 5% of each class or tranche of ABS issued (a ratable slice across all tranches); (2) horizontal residual interest — retaining the most subordinate class (first-loss equity position) in an amount equal to at least 5% of the aggregate fair value of all ABS interests; or (3) a combination of vertical and horizontal interests that together equal 5%; the vertical slice is simpler to calculate and certify; the horizontal position (retaining the first-loss tranche) provides stronger alignment because the equity absorbs losses first
  • § 1234.11 — Allocation to originators: a sponsor may allocate up to the full 5% retention obligation to an originator if the originator (a) meets the definition of an originator under the rule and (b) agrees in writing to retain the specified interest; this allows the economic burden of retention to be shifted to the entity that actually made the loans (the originator) when the originator is distinct from the securitization vehicle's sponsor
  • § 1234.12 — Hedging prohibition: a retaining sponsor may not hedge or transfer any retained interest; they cannot enter credit default swaps, total return swaps, or other instruments that offset the economic exposure of the retained position; the hedging prohibition is the enforcement mechanism that makes retention meaningful — without it, sponsors could retain 5% on paper while eliminating all actual economic exposure through derivatives
  • § 1234.13 — Qualified Residential Mortgage (QRM) exemption: residential mortgage loans meeting the QRM definition are exempt from the risk retention requirement at the securitization level; QRM is defined as a "Qualified Mortgage" under CFPB's Regulation Z (12 CFR § 1026.43) — generally, a loan with a debt-to-income ratio of 43% or less, full income verification, and no balloon payments or negative amortization; the exemption reflects Congress's intent that standard, well-underwritten mortgages need not be subject to additional retention requirements because their credit quality is already regulated under the ATR/QM framework; in practice, most agency-conforming loans (eligible for sale to Fannie/Freddie) qualify for the QRM exemption
  • §§ 1234.14–1234.17 — Qualifying commercial real estate loan exemption: commercial real estate loans securitized through CMBS transactions that meet specific underwriting standards (LTV, DSCR, amortization requirements) are subject to 0% retention — a complete exemption; the qualifying CRE standards are defined in detail (§ 1234.17) and include maximum loan-to-value ratios by property type, minimum debt service coverage ratios, and prohibitions on interest-only periods
  • § 1234.19 — General exemptions: additional exemptions for community-focused residential mortgages, government mortgage programs (FHA, VA, RHS loans — already subject to federal underwriting standards), and certain ABS issued by qualifying not-for-profit institutions

  The credit risk retention rule was deeply contested during its development. The original 2011 NOPR proposed to define QRM narrowly (requiring 20% down payments as a condition for exemption), which industry and consumer advocates argued would exclude creditworthy borrowers from the exempted category. After years of public comment, the final 2014 rule aligned QRM with the CFPB's QM definition — a much broader population — which FHFA and other agencies concluded provided adequate underwriting rigor without an independent retention requirement. The practical result: for agency-eligible mortgages (conforming loans sold to Fannie/Freddie), the QRM exemption means there is effectively no skin-in-the-game requirement at the loan level, since both the originator (via rep-and-warranty exposure) and Fannie/Freddie (as guarantors retaining credit risk on the MBS) are already exposed. Risk retention operates more directly in private-label mortgage securitization — where non-QM loans are securitized without government backing — and in other ABS markets (auto loans, student loans, CLOs) where the federal guarantee structure doesn't provide equivalent protection.

  The six-agency joint rule produced parallel regulations across CFR titles: FDIC at 12 CFR Part 373 (covering FDIC-supervised state nonmember banks); OCC at 12 CFR Part 43 (national banks); Federal Reserve at 12 CFR Part 244 (Fed-supervised bank holding companies); FHFA at 12 CFR Part 1234 (GSEs and Federal Home Loan Banks, detailed above); SEC at 17 CFR Part 246 (registered broker-dealers and all ABS issuers not covered by the banking agency rules); and HUD at 24 CFR Part 267 (FHA-approved lenders participating in HMBS issuances). Substantive requirements are identical across all six implementations — the parallel structure reflects each agency's jurisdiction over its supervised entities rather than any policy divergence.

Pending Legislation

• HR 7132 — Lock independent funding/staffing for OFR and FSOC, index budgets. Status: Introduced.
• S 3578 — Add preliminary consultation before FSOC nonbank designation. Status: Introduced.
• HR 3716 (Rep. Green, D-TX) — Require GAO/banking agency reports on systemic-risk decisions for failed banks. Status: Passed House.
• HR 3682 (Rep. Foster, D-IL) — Require FSOC to try alternatives before nonbank designation. Status: Passed House.
• S 1806 (Sen. Ricketts, R-NE) — Strip SEC of unused Dodd-Frank rule powers. Status: Introduced.
• HR 3484 (Rep. Barr, R-KY) — Strip dormant SEC Dodd-Frank powers. Status: In committee.

Recent Developments

• The CFPB's funding mechanism was upheld in CFPB v. Community Financial Services Association of America (May 16, 2024, 7-2, Thomas, J.), finding the Bureau's draw from Federal Reserve revenues consistent with the Appropriations Clause
• Stress testing and capital requirements continue to be debated — banks argue requirements are too stringent; regulators argue they're essential for financial stability
• The Volcker Rule has been simplified through regulatory amendments but remains in effect for large banking entities
• FSOC has reconsidered its approach to designating nonbank SIFIs, shifting between entity-specific and activity-based approaches across administrations
• The SEC whistleblower program continues to produce large awards and has become a model for similar programs at other agencies
• In March 2026, Federal Reserve Vice Chair for Supervision Bowman delivered a speech on Basel III and bank capital regulation, outlining proposals to modify the four pillars of the regulatory capital framework for the largest banks: stress testing, the supplementary leverage ratio, the Basel III endgame rule, and the GSIB surcharge.
• FSOC proposed guidance on nonbank designations (March 2026): The Financial Stability Oversight Council issued proposed guidance on nonbank financial company designations, potentially revising the framework for identifying systemically important financial institutions (SIFIs) — a core Dodd-Frank mechanism that had been effectively dormant since 2017.