The Compliance 911 Show

 In this episode of Compliance 911, Len Suzio and Dean Stockford review key banking and compliance developments from June 2026, including new OCC rules affirming federal banks’ authority over real estate escrow interest and fees, updated FDIC guidance on official signs and advertising, and CFPB changes to Regulation B that have created uncertainty around disparate impact and fair lending enforcement. They also discuss a joint FinCEN advisory identifying red flags tied to fraud involving unauthorized employment, CFPB guidance on considering immigration status in ability-to-repay decisions, and expanded use of Section 314(b) information sharing for fraud and cyber-related activity. The episode concludes with FHA’s decision to make certain appraisal field reviews optional and an overview of the proposed 21st Century ROAD to Housing Act, which could provide regulatory relief for community banks through higher examination thresholds, brokered deposit reforms, streamlined bank formation, and support programs for smaller and newly chartered institutions.

Brought to you by GeoDataVision and M&M Consulting

In this episode of Compliance 911, Dean Stockford and Len Suzio discuss the OCC’s proposed Community Development benchmarks for CRA performance, focusing on why community development has historically been difficult for banks to measure and plan. Len explains how the proposed benchmarks are organized by activity type—CD lending, qualified investments, services, and combined lending/investment activity—as well as by performance rating, bank size, and annual measures such as Tier 1 capital, assets, and volunteer service hours. The episode highlights how these benchmarks may give community banks a clearer framework for setting CRA goals and evaluating satisfactory or outstanding community development performance. Listeners can also download GeoDataVision’s special PDF recap containing all 67 proposed Community Development lending, investing, and service benchmarks from the GeoDataVision website.

https://geodatavision.com/content/occ-proposed-elective-goals-for-cra-strategic-planning/

Brought to you by GeoDataVision and M&M Consulting

In this episode of Compliance 911, Len Suzio and Dean Stockford unpack the FDIC’s 2026 Consumer Compliance Supervisory Highlights, noting that while 98% of FDIC-supervised institutions earned satisfactory or better ratings, weaknesses in compliance management systems continue to create risk. The discussion focuses on the most common violation areas, including Truth in Lending, Electronic Fund Transfers, Flood, Truth in Savings, HMDA, and third-party oversight, emphasizing that disclosure accuracy, timely error resolution, operational discipline, and vendor management remain critical priorities for banks.

Brought to you by GeoDataVision and M&M Consulting

The episode “CRA: The Importance of Assessment Areas” explains why a bank’s CRA assessment area is one of the most important decisions it makes, because it directly affects both performance results and the benchmarks examiners use during CRA reviews. Len explains that while CRA rules require banks to include whole census tracts, deposit-taking facility areas, surrounding lending areas, and avoid excluding low- or moderate-income tracts, banks still have flexibility to define the area they can reasonably be expected to serve. The discussion emphasizes that overly large assessment areas can set banks up for poor CRA performance, even when the area is technically compliant, because the bank may be compared against markets it cannot realistically serve. Len gives an example of a one-branch bank in Los Angeles County that improved its CRA position by narrowing its assessment area to nearby census tracts where it actually lent and served customers. The episode concludes that banks should regularly review their CRA assessment areas, especially after branch changes or acquisitions, using mapping tools and performance data to ensure their areas are compliant, realistic, and aligned with their actual community lending activity.

Brought to you by GeoDataVision and M&M Consulting

The episode “AI Integration Into Compliance” explains how artificial intelligence is already becoming a practical tool for bank compliance teams as regulatory expectations rise, data volumes grow, and manual compliance processes become harder to sustain. Dean highlights three major areas where AI is creating value: transaction monitoring and AML, where machine learning can reduce false positives and detect suspicious activity more effectively; regulatory change management, where AI can scan updates and map them to internal policies and controls; and risk assessments/reporting, where AI can aggregate data to give management and boards clearer insights. However, the episode emphasizes that AI is not a plug-and-play replacement for compliance professionals. Banks must maintain strong governance, transparency, explainability, data controls, model validation, documentation, human oversight, and clear escalation paths. The key message is that AI should support compliance judgment—not replace it—and institutions should start with low-risk, high-pain use cases, clean and govern their data, collaborate across departments, and be ready to explain their AI tools to regulators.

Brought to you by GeoDataVision and M&M Consulting

This podcast explains that banks can strengthen their CRA exam performance by presenting additional lending activity that examiners may not otherwise consider, beyond the usual focus on small business, small farm, and community development loans. Len Suzio highlights several examples, including technically disqualified small business loans such as asset-based lines of credit, standby letters of credit for contractors, multifamily and small rental property financing reflected in HMDA data, affordable housing units supported by those loans, auto loans that help low-income borrowers access employment, and small business expansion loans that create jobs. The key point is that these activities can help paint a fuller, more favorable picture of how a bank is meeting community credit needs, but to receive consideration, banks must properly geocode the loans, collect relevant data, and ensure the information is reliable.

Brought to you by GeoDataVision and M&M Consulting

Cyber phishing remains one of the most significant and rapidly growing cybersecurity threats, accounting for the vast majority of successful cyberattacks and impacting both individuals and organizations on a daily basis. As highlighted by Dean Stockford and Len Suzio, phishing schemes exploit human trust—rather than technical vulnerabilities—through increasingly sophisticated tactics, many now powered by generative AI, which has driven a dramatic surge in highly convincing and personalized attacks. Real-world incidents, including major corporate breaches and multimillion-dollar fraud cases, demonstrate the severe financial and operational consequences. Given this evolving threat landscape, organizations must prioritize continuous employee training, strengthen email authentication and filtering systems, adopt AI-driven detection tools, and implement multi-factor authentication, all while tailoring their defenses to their specific risk profiles to effectively mitigate phishing risks.

Brought to you by GeoDataVision and M&M Consulting

In this episode, Len Suzio and Dean Stockford discuss the CFPB’s November 2025 proposed rulemaking on Section 1071 and explain how it could dramatically scale back the current small business lending data-collection requirements. Len highlights the biggest proposed changes, including moving to a single compliance date of January 1, 2028, sharply reducing the number of required data points, raising the reporting threshold from 100 to 1,000 small business loans in each of the prior two years, narrowing the definition of a small business from $5 million to $1 million in gross annual revenue, and excluding certain products like merchant cash advances, agricultural loans, and transactions of $1,000 or less. He argues that the most significant impact would come not from fewer data fields, but from the much smaller pool of covered lenders and loans, while also warning that the revised definition could create confusion with CRA reporting standards and increase the risk of errors.

Brought to you by GeoDataVision and M&M Consulting