In 2025, the National Credit Union Administration (NCUA), along with other federal agencies, began a major initiative to review, and revise, as appropriate, all its regulations. This review follows Executive Order 14192, Unleashing Prosperity Through Deregulation.
In 2026 and beyond, NCUA’s mission is to enable access to financial services by facilitating safe, sound, and resilient credit unions. With public input, NCUA is reviewing all existing regulations to ensure that the regulations documented in Title 12, Chapter VII of the Code of Federal Regulations are focused on the safety, soundness, or resilience of credit unions.
As part of the Deregulation Project, NCUA initially will propose changing or removing regulations that are:
- Obsolete;
- Duplicative of statutory requirements;
- Intended to serve as guidance, not requirements; or
- Overly burdensome.

As part of this effort, NCUA is providing the following resources to assist the public in understanding the scope and impact of the proposed changes.
List of Proposed Regulation Changes
12 CFR 704.8 and 704.15 – Corporate Credit Unions
Summary:
The NCUA Board (Board) is proposing to amend its regulations for corporate credit unions by removing the requirement that a corporate credit union’s asset and liability management committee (ALCO) must have at least one member who is also a member of the corporate credit union’s board of directors. The proposed rule would also remove filing and notification requirements related to a corporate credit union’s annual report and any management letter or other report issued by its independent public accountant. The intended effect is to reduce unnecessary regulatory burden and provide corporate credit unions with greater flexibility.
Link to full proposal: https://www.federalregister.gov/public-inspection/2025-22487/corporate-credit-unions
Simplified Summary: The NCUA Board proposes removing a requirement that a corporate credit union’s ALCO must have at least one member who is also a member of the corporate credit union’s board of directors. The proposed rule also removes filing and notification requirements related to a corporate credit union’s annual report and independent public accountant’s management letter or other report.
Proposed Changes in the Rule:
- Change 1: ALCO Committee Representation (12 CFR 704.8)
- The Board now proposes to rescind the requirement for each corporate credit union’s ALCO to have at least one member who is also a member of the board of directors.
- Impact on Credit Unions: Corporate credit union boards would have the ability to determine their ALCO membership. The change would also reduce burden on board members.
- Change 2: Filing requirements related to a corporate credit union’s annual report (12 CFR 704.15)
- The Board proposes to:
- Rescind the requirement to file a copy with NCUA of an annual report within 180 days after the end of the calendar year and any management letter or other report issued by its independent public accountant within 15 days after receipt by the corporate credit union.
- Rescind the requirement for NCUA to make the annual report available for public inspection.
- Rescind requirements related to untimely filings.
- Remove the requirement to report on the engagement of an independent public accountant.
- NCUA can access this information through other means. The proposed changes only remove the requirements for the corporate credit union to file the documents with NCUA but does not limit NCUA’s access to the information.
- The change related to the independent public accountant engagement is intended to reduce burden. Corporate credit unions would still need to inform NCUA when its independent public accountant is dismissed or resigns.
- Impact on Credit Unions: Eliminating these filing requirements will remove unnecessary and unduly burdensome requirements on corporate credit unions.
- The Board proposes to:
12 CFR 715 – Supervisory Committee Audits and Verifications
Summary:
The NCUA Board is proposing to amend its regulations governing supervisory committee audits to eliminate unnecessary, redundant, and overly prescriptive provisions. This action will reduce regulatory burden, increase operational flexibility for credit unions, and streamline the rules by removing requirements that are outdated or duplicative of other authorities. The intended effect of this proposal is to simplify compliance for credit unions without compromising the integrity of the audit process.
Link to full proposal: https://www.federalregister.gov/public-inspection/2025-22488/supervisory-committee-audits-and-verifications
Simplified Summary: The NCUA Board proposes to amend its regulations governing supervisory committee audits. The intended effect of this proposal is to simplify compliance for credit unions without compromising the integrity of the audit process.
Changes in the Rule:
- Change 1 – Updating definition of “Internal controls.”
- The Board is proposing to amend 12 CFR 715.2(h), which defines “Internal control” for part 715. NCUA proposes to remove the elements of the definition that are overly prescriptive and risk becoming obsolete. This change would make the definition more durable and allow federally insured credit unions (FICUs) and auditors to apply current, industry-accepted frameworks for evaluating internal controls.
- Change 2 – Verification of member accounts
- The Board is proposing to amend 12 CFR 715.8(a), which details specific methods for the verification of member accounts. The FCU Act, at 12 U.S.C. 1761d, requires the supervisory committee to verify member accounts at least once every two years. The regulation is overly prescriptive when it requires members’ accounts to be verified against the records of the treasurer of the credit union. The Board proposes to remove the words “of the treasurer” to state more generally that members’ accounts must be verified against the credit union’s records.
- Change 3 – Auditor engagement letter
- The Board is proposing to amend 12 CFR 715.9(b), which requires the scope of work with an outside, compensated auditor to be documented in an engagement letter contracted with the supervisory committee. The Board proposes to remove the overly prescriptive requirement that the engagement letter must be signed by both parties.
- Change 4 – Copy of Audit Reports
- The Board is proposing to amend 12 CFR 715.10(a) by removing the sentence that requires a supervisory committee to provide NCUA with a copy of audit reports upon request. This requirement is unnecessary as NCUA has the authority to access all federally insured credit union books and records during its examination and supervision activities.
- Change 5 – Objectives of a Financial Audit
- The Board proposes to remove two sentences from 12 CFR 715.12(b) that describe the objective of a financial statement audit compelled by NCUA.
- This language is unnecessary. The provision already requires an audit be performed in accordance with Generally Accepted Auditing Standards (GAAS), and GAAS already establishes the objectives of a financial statement audit.
- The adverse opinion or disclaimer of opinion commentary in the regulation is best read as guidance and could cause confusion if auditing standards evolve to provide different objectives or expectations for financial statement audits.
12 CFR 748 Appendix A – Guidelines for Safeguarding Member Information
Summary:
The NCUA Board (Board) is proposing to remove Appendix A to part 748, guidelines for safeguarding member information, from the Code of Federal Regulations (12 CFR Part 748 Appendix A). Appendix A was issued to satisfy NCUA’s statutory obligation to establish appropriate standards for federally insured credit unions (FICUs) to protect the security and confidentiality of customer records and information and to protect against unauthorized access to or use of such records. The Board now believes that the placement of Appendix A in the CFR may be confusing because Appendix A is not a regulation but rather a set of guidelines intended to assist FICUs with their statutory compliance obligations. The Board proposes to remove Appendix A from the CFR and publish its contents as a Letter to Credit Unions, which enables more efficient revisions, streamlines NCUA’s regulations, and ensures guidance is conveyed as guidance.
Link to full proposal: https://www.federalregister.gov/public-inspection/2025-22488/supervisory-committee-audits-and-verifications
Simplified Summary: The NCUA Board proposes removing guidelines for safeguarding member information from 12CFR 748, Appendix A because it may be confusing to have guidance presented through regulation. These guidelines are intended to assist FICUs with their statutory compliance obligations—they are not independently enforceable. The Board will remove Appendix A from the CFR and publish its contents online.
Change in the Rule:
- Change: Remove guidance from regulations
- The Board intends to remove the content of Appendix A from the Code of Federal Regulations. The guidelines provided by Appendix A related to Safeguarding Member Information are guidance, and the content will be published online later should the rule be finalized. This option will be a better vehicle for conveying and updating this information and will help to streamline NCUA’s regulations.
12 CFR 748 Appendix B – Guidance on Response Programs for Unauthorized Access to Member Information and Member Notice
Summary:
The NCUA Board (Board) is proposing to remove Appendix B to part 748, Guidance on Response Programs for Unauthorized Access to Member Information and Member Notice. Appendix B was issued in June 2005. Its purpose was to provide federally insured credit unions (FICUs) with guidance for creating programs to address and respond to instances of unauthorized access to member information. The Board now believes that the placement of Appendix B in the Code of Federal Regulations (CFR) may be confusing because Appendix B itself is guidance to assist FICUs in developing the response programs required pursuant to regulation. The Board instead would publish the content of Appendix B as guidance. This will be a better vehicle for conveying and updating this information and will help to streamline NCUA’s regulations.
Link to full proposal: https://www.federalregister.gov/public-inspection/2025-22490/guidance-response-programs-for-unauthorized-access-to-member-information-and-member-notice
Simplified Summary: The NCUA Board proposes 12 CFR 748 Appendix B be removed from the regulation and published as guidance to assist FICUs.
Change in the Rule:
- Change: Remove guidance from rule
- The Board intends to publish the content of Appendix B as guidance. This will be a better vehicle for conveying and updating this information and will help to streamline NCUA’s regulations.
Frequently Asked Questions
Today’s Action
What rulemakings are currently proposed?
12 CFR 704.8 & 704.15 – Corporate Credit Unions:
NCUA proposes:
- Providing greater flexibility related to composition of the asset and liability management committee (ALCO) by removing the requirement that at least one ALCO member be a member of the board of directors.
- Removing filing requirements related to a corporate credit union’s annual report where the information is already available to NCUA through other means.
12 CFR 715 – Supervisory Committee Audits:
NCUA proposes:
- Revisions to the definition of “internal control” to simplify the language;
- Changes to language specifically referring to the Treasurer’s books and records;
- Removing overly prescriptive details about how an audit engagement letter must be signed;
- Removing a redundant statement that a credit union must provide a copy of its audit upon NCUA's request; and
- Removing unnecessary requirements related to the objectives of financial audits.
12 CFR 748 Appendix A – Guidelines for Safeguarding Member Information
NCUA proposes:
- Removing “Guidelines for Safeguarding Member Information” from the regulations.
If finalized, Appendix A’s guidelines will be available on NCUA.gov.
12 CFR 748 Appendix B – Guidance on Unauthorized Access
NCUA proposes:
- Removing “Guidance on Response Programs for Unauthorized Access to Member Information and Member Notice” from the regulations.
If finalized, Appendix B’s guidelines will be available on NCUA.gov.
To provide comments on the proposed rules, visit Regulations.gov.
Close and return to topWhen will the proposed changes take effect? How will today’s action impact supervision and examination?
Once a Notice of Proposed Rulemaking is published to the Federal Register, the public has time to provide comments and suggestions. When the comment period closes, NCUA will review feedback and make final determinations before issuing a Final Rule. That timeframe isn’t fixed but will be expeditious.
Credit unions should continue to follow regulations as they exist in the Code of Federal Regulations until relevant rule changes are final. The first round of regulatory changes should not significantly impact a credit union’s exam or supervision.
Close and return to topDeregulation Project in General
What is the NCUA Deregulation Project?
The NCUA Deregulation Project is a long-term initiative to review and revise NCUA regulations and policies to ensure the agency is focused on fulfilling our mission and statutory requirements. In 2026 and beyond, NCUA’s mission is to enable access to financial services by facilitating safe, sound, and resilient credit unions.
This project is in response to Executive Order 14192, "Unleashing Prosperity Through Deregulation," and aims to prioritize the safety, soundness, and resilience of credit unions while eliminating unnecessary costs and unduly burdensome requirements.
NCUA encourages the public to provide feedback on the specific proposed changes through Regulations.gov.
Close and return to topWhy is NCUA proposing to change these specific items rather than prioritize other changes?
The Deregulation Project is a long-term initiative that necessitates a thorough review of all NCUA regulations.
We anticipate there will be many proposed changes over the coming year. Through careful examination and deliberation, NCUA prioritized its initial review by focusing on regulations fitting into the following four categories. Those categories are:
- Obsolete Regulations – NCUA identified regulations that may be outdated or that rely on activities no longer commonly used by credit unions or the agency.
- Duplicative of Statute – NCUA has identified regulations that are duplicative of existing statutes. In addition, some NCUA regulations simply refer to other agencies’ regulations, which exist elsewhere.
- Overly Burdensome Requirements – NCUA evaluated regulations that may create unnecessary burden, making it harder for credit unions to serve their members, properly allocate resources, or that block the industry from exploring new innovations.
- Guidance – NCUA identified certain regulations that contain guidance, adding to unnecessary compliance burdens.
The four criteria described above will be used to prioritize initial proposed changes. NCUA may also consider additional regulatory changes as appropriate.
Close and return to topWill NCUA consider additional changes to its regulations?
Yes. NCUA is currently reviewing all its regulations and anticipates further changes.
Close and return to topHow will I know when the changes are final?
After the comment period closes, NCUA will review and analyze all comments received. Based on the review, NCUA will decide whether to proceed with the rulemaking process.
Should NCUA choose to proceed with an action, we will publish a Final Rule in the Federal Register. Unless stated otherwise, most Final Rules take effect 30 days after publication.
Upon the publication of a Final Rule in the Federal Register, NCUA communicates with the public through letters to credit unions, press releases, and other communications to address any questions about implementation.
Close and return to topWhat is not changing?
NCUA will continue to prioritize safety and soundness.
The changes will not reduce your exam frequency or rigor, modify internal controls or cybersecurity expectations, or member-protection requirements.
Until final rules are issued, credit unions should continue following existing regulation. Examiners will not cite a credit union for not adopting changes pending final Board approval.
Close and return to topHow do I provide comments and share feedback on the proposed rules?
Using Regulations.gov, search for the rule.
Once you have found the docket, click on the comment box. There you can type or upload a file with your comments.
Be sure to hit submit once you’ve completed your input.
You will receive a comment tracking number.
Close and return to top