In its first 100 days, the second Trump Administration has made substantial strides in reshaping financial regulation around a deregulatory, pro-innovation agenda. While the deregulatory posture is familiar from the Administration’s first term, the current approach reflects a more systematic and coordinated strategy, supported by aligned leadership across the regulatory agencies, a unified Congress and a judiciary increasingly skeptical of agency discretion. Each of these institutions has played a role in rolling back Biden Administration rules and policies, contributing to a near-term easing of compliance burdens and foreshadowing a longer-term shift in how regulatory power is exercised and contested.
This Our Take Special Edition details actions by these actors over the last 100 days across the following topics:
Our take
The CFPB lives – with a dramatically diminished size and mission. While the CFPB remains intact, the combination of staffing cuts, continued litigation, and the reduced mission outlined in the April 16th enforcement memo significantly reduces what actions it can and will take going forward. It is all but certain to proceed with settling lawsuits against past rulemaking, likely with the rescission of rules in question.
States stepping in. While some states are likely to step up consumer financial protection enforcement, this will not come without time, administrative effort, and likely litigation on the preemption of federal law. While all of that plays out, financial institutions should prepare to navigate a more fragmented regulatory environment with state-level compliance obligations layered on top of core federal statutes.
Don’t stop complyin’. Meanwhile, financial institutions should not interpret the CFPB’s retreat as permission to scale back their compliance programs. Lapses in consumer protection can still damage firms’ competitive standing, draw criticism from both sides of the aisle, and trigger reputational or legal risk. Firms that remain committed to fairness, transparency, and customer responsiveness will be better positioned to adapt – no matter how the policy environment evolves.
Our take
Long-awaited capital relief is nigh. With the Fed’s proposals to reform stress testing and Bessent’s and Hill’s confirmation that the agencies are working on rulemaking to reform the SLR, banks are poised to receive changes that make their capital requirements more predictable, transparent and aligned with market intermediation activities. But while some rules are being rewritten or withdrawn, expectations around financial resilience remain. Firms should maintain robust internal capital adequacy frameworks, monitor comment period developments closely, and prepare to justify assumptions in stress testing models – especially if the Fed begins publishing those models. Institutions that can demonstrate thoughtful scenario design, risk-aligned buffers, and disciplined capital planning will be best positioned to benefit from the coming shift.
International accords under pressure. Bessent’s comments on the U.S. diverging from the Basel III endgame standards reflect the Administration’s skepticism around the necessity of following international agreements. He sent a new signal that the regulators will not just remove the gold plating (or additional requirements) from the original Basel III endgame proposal; they may exclude aspects of the global standards altogether. Differing standards across jurisdictions are not a new phenomenon but the implications for international supervisory cooperation and for globally active U.S. banks will need to be considered.
Focusing bank ratings on financial risk will spark debate. The regulators’ remarks around reducing focus on non-financial factors and taking a fresh look at the bank ratings framework could have the most rapid and significant impact of all the plans under consideration. No formal rulemaking is required to effect these changes, rather each agency can move forward by updating exam scheduling and staffing, as well as examiner handbooks and training. The reforms are targeted at fundamentally curtailing supervisory discretion in favor of objective financial metrics and statutory requirements. Such changes will spark a debate on the importance of maintaining strong management and governance standards – as well as the potential impact to consumers and other market participants.
1 Finalized in 2020, the SCB replaced the static 2.5% capital conservation buffer to set a capital requirement that would change based on the latest year’s Fed-modeled stressed capital losses and four quarters of planned dividends.
Our take
The doors are open but proceed carefully. By permitting banks to engage in crypto activities without seeking prior approval, banks are now encouraged to begin developing and executing crypto strategies and those that have been preparing crypto strategies are now enabled to more quickly unleash them. We expect to see additional regulatory clarity around stablecoins and asset classification (e.g., securities, commodities) in the not-too-distant future, which will further open the doors for additional market participants and crypto activities. However, new products and services come with attendant risks that will be essential for banks to manage to ensure that these innovations develop in a way that protects consumers, promotes safety and soundness, and preserves financial stability. Considerations include:
Our take
Unsupervised but not unnecessary. The formal removal of reputational risk from supervisory materials is a significant pivot in tone and discretion. But banks must still make – and be prepared to defend – hard choices about which clients align with sound risk management practices and their stated values. They need to build and follow documented, risk-based client acceptance frameworks with denials tied to clear factors like AML, legal, operational risk or weak business purpose. However, banks will now have the opportunity to revisit some of the infrastructure built around their reputation risk management programs to focus on strategic considerations rather than supervisory pressures.
Public and political attention on debanking continues. Banks should still expect pressure regarding client selection and other sources of potential reputation risk from the same broad range of stakeholders as ever, even as the nature of that pressure evolves thematically alongside prevailing political sentiment. They must continue to carefully monitor this dynamic to balance headline risk with their broader risk management goals, strategic mission and corporate values.
Future-proofing change. If passed, the FIRM Act would permanently bar agencies from reinstating reputational risk-based supervision absent Congressional action, reducing the likelihood of “regulatory whiplash” if a future administration were to refocus on reputational risk. However, it remains unclear whether the Act will pass a Congress balancing other legislative priorities and whether it can overcome a potential Senate filibuster.
Our take
Doors open to deals. With less supervisory invasiveness, banks will be able to turn their focus to market-based considerations for mergers and partnerships, including strategy, operational efficiencies, and management succession. The FDIC’s proposal to rescind its September 2024 merger policy will reduce uncertainty and remove procedural hurdles that had chilled deal activity, particularly among mid-size banks. Still, streamlined review does not mean lowered expectations. Institutions pursuing mergers or launching de novos should be prepared to demonstrate clear statutory alignment, sound governance, and a sustainable business model. In the case of fintech-driven partnerships or acquisitions, firms should reinforce third-party risk management frameworks and ensure that compliance, operational resilience, and customer outcomes are central to integration plans. Even as process hurdles fall, strategic decision-making must remain rigorous. Boards and executives should continue to weigh long-term value, risk tolerance, and reputational impact – not just regulatory posture – in evaluating growth opportunities. The opportunity is real, but the expectations remain: safety, transparency, and durable value creation.
Our take
AI is moving fast and regulators expect firms to keep up. Regulators are sending a clear message: financial institutions don’t need permission to use AI, but they must manage the risks. There’s no AI-specific rulebook yet – and none expected soon – but existing expectations around model governance, operational risk, and third-party oversight already apply. Institutions should treat AI like any other material technology deployment: with defined accountability, documented risk assessments, and board-level visibility.
The adoption of AI by regulators themselves will also raise the bar. As examiners begin using AI to detect anomalies or assess consumer outcomes, firms must be prepared to match that level of sophistication in their own operations. Governance can’t be reactive. Financial institutions should formalize cross-functional AI working groups, align third-party risk management and model risk management frameworks to emerging AI use cases, and ensure that senior management understands both the capabilities and the constraints of AI tools. The future is not wait-and-see – it’s build-and-explain.
Our take
Enforcement is narrowing — and intensifying. The FinCEN GTO and momentum behind potential CTR threshold reform reflect a broader shift in financial crime oversight: away from one-size-fits-all compliance and toward risk-based, intelligence-driven enforcement. Regulators expect firms to respond with targeted monitoring, real-time alerts, and more operational agility. For institutions operating near high-risk corridors or serving MSBs, the burden of CTR filings and customer due diligence is intensifying – even as Congress weighs long-overdue updates to outdated thresholds.
This is a moment for financial institutions to double down on programmatic strength: reinforcing AML governance, modernizing CTR and BOI workflows, reviewing sanctions screening thresholds, and preparing for more targeted supervisory reviews. As regulators narrow their focus, firms must sharpen their own – and invest accordingly in the systems, staff, and controls that define credible compliance in 2025.
Our take
Back to the drawing board. The rescission of the 2023 CRA rule was expected following legal challenges, industry opposition, and recent statements from regulators. While industry welcomed the withdrawal, especially given data burden and compliance uncertainty, the return to the prior rule means banks must once again navigate a patchwork of informal examiner interpretations and legacy frameworks that don’t fully account for digital channels or evolving community needs. The Agencies have stated that they will work together to promote a consistent CRA approach but considering the challenges of coordination and complex considerations necessary to propose a new framework, alongside expected cuts to agency staff, we do not expect to see a new proposal any time soon.
Still, institutions should not treat this as a regulatory pause. Mergers, branch changes, and supervisory exams will continue to surface questions about CRA performance – and banks will be expected to demonstrate consistent commitment to community reinvestment. This is a time to focus on quality execution under the existing rule, while continuing to document, measure, and communicate CRA-related activities. In the absence of a forward-looking framework, strong governance and transparency remain the best defense.
Our take
Effective financial risk management remains in focus. While the Administration will likely continue to de-prioritize specific climate risk initiatives, banks must still recognize and manage the impact of physical and transitional climate risks on their strategies and clients. They should also expect examiners to continue evaluating how climate considerations are integrated into their credit, operational and market risk management programs, particularly for firms with significant exposure to areas and industries increasingly prone to natural disasters.
Communication of climate exposures is still an imperative. It is only a matter of time before the SEC’s climate risk disclosures are formally overturned by either a court ruling or new rulemaking. However, this will not eliminate the need for companies to understand and communicate their climate risk exposures and related risk management to key stakeholders, including boards, investors, counterparties and supervisors. In addition, many companies will remain subject to the European Union’s Corporate Sustainability Reporting Directive (CSRD) and California’s Climate Corporate Data Accountability Act (SB253), which requires large companies doing business in California to publicly disclose their greenhouse gas emissions, including Scope 1, 2, and 3 emissions, starting in 2026. Accordingly, companies need to continue to develop capabilities around climate data collection, scenario analysis, credit portfolio monitoring, analysis and reporting.
Our take
The SEC and CFTC are recalibrating toward innovation, cost-efficiency, and risk-based supervision. Acting Chair Uyeda and incoming Chair Atkins are steering the SEC away from sprawling, thematic rulemaking and back toward focused, statutory mandates. Firms can expect longer timelines, simpler disclosures, and a greater emphasis on feedback before proposals move forward. They should treat the extra time as an opportunity to shore up systems, assess existing frameworks and engage proactively with regulators. Atkins’ confirmation reinforces a shift toward regulatory restraint but implementation expectations remain high. Market participants that lead on transparency, access model design, and client coordination will be better positioned to shape and navigate the next generation of market infrastructure.
At the CFTC, the pivot is just as clear. The April enforcement memo reframes the agency’s posture around materiality and systemic risk, giving firms a stronger basis to self-report and resolve issues early. The 24/7 and perpetuals RFCs suggest a willingness to accommodate market evolution provided the risk management framework keeps up. Across both agencies, the message is consistent: rules should fit purpose, enforcement should fit risk, and markets should be given room to grow – under watchful but more predictable supervision.
The regulatory landscape is shifting – fast. In just 100 days, the Administration has undone key rules, reset agency priorities, and made clear that innovation, not intervention, will rule the day. But firms must not mistake flexibility for a license to relax core safeguards – supervisory accountability hasn’t disappeared and missteps can still carry real regulatory and reputational costs.
Here’s what firms should do now:
This is a window of opportunity – but also of recalibration. The firms that thrive will be those that innovate thoughtfully and remain tuned in to the full range of public, political, and market signals shaping what comes next.