The Financial Industry Regulatory Authority’s (FINRA) 2026 Annual Regulatory Oversight Report is the most current and comprehensive statement of FINRA’s priorities and expectations for member firms. It does not create new legal obligations, but it is clearly designed as an exam and enforcement roadmap. The 2026 Report weaves together FINRA’s FINRA Forward modernization program, new and evolving risks (especially cyber‑enabled fraud and generative AI (GenAI)), and detailed observations on firms’ supervisory, operational, and financial controls. Firms should use it as a structured checklist for 2026 risk assessments, revisions to written supervisory procedures (WSPs), and enhancements to testing, surveillance, and training.

In today’s rapidly evolving digital landscape and expanded threat landscape, financial institutions feel at war and are under increasing pressure to balance innovation, data privacy, and regulatory demands. AI is accelerating that complexity, reshaping how organizations manage sensitive information and comply with a rapidly shifting legal environment.

On November 20, U.S. Senate Agriculture Committee Chairman John Boozman (R‑AR) and Senator Cory Booker (D‑NJ) released a new bipartisan discussion draft to create a federal spot‑market regime for “digital commodities” under the Commodity Futures Trading Commission (CFTC). The proposal, which expands upon the CLARITY Act approved by the House in July, would give the CFTC exclusive jurisdiction over cash and spot trading in covered non‑security crypto tokens, establish registration frameworks for exchanges, brokers, and dealers, impose listing and public‑information standards, require qualified custody and strict segregation of customer assets, enhance retail protections, and clarify bankruptcy treatment of customer property.

Federal banking regulators previewed near-term rulemaking plans that will shape the fintech landscape. The Federal Deposit Insurance Corporation (FDIC) expects to issue a stablecoin licensing proposal “before the end of the year,” and the FDIC reiterated that “a deposit is a deposit” even when tokenized. Separately, the Federal Reserve is targeting the fourth quarter of 2026 for operational rollout of “skinny” master accounts to widen access to payment rails for eligible depository institutions.

On October 29, the Federal Reserve’s Division of Supervision and Regulation issued a Statement of Supervisory Operating Principles that formalizes Vice Chair for Supervision Miki Bowman’s August direction to reset how the Fed supervises banks. The goal of this action is to strengthen supervision by focusing on identifying and acting early on the most important risks to safety and soundness, using proportionate, timely measures. This represents a significant change from prior practice, moving away from process-heavy supervision and toward judgment-driven oversight.

On November 10, 2025, the IRS issued Rev. Proc. 2025-31 (the Rev Proc.), which provides a safe harbor for investment trusts and grantor trusts to stake certain digital assets without jeopardizing their status as trusts for U.S. federal income tax purposes. The Rev. Proc. comes in response to the White House’s request made in July 2025 for published guidance on this topic.[1]

WASHINGTON, D.C. – Troutman Pepper Locke advised Piper Sandler & Co., a leading investment bank, as sole placement agent in Univest Financial Corporation’s $50 million private placement of fixed-to-floating rate subordinated notes. For more information, see the press release.

On November 5, the Federal Reserve Board announced that it had finalized revisions to its Large Financial Institution (LFI) rating system and the Insurance Supervisory Framework that change when a firm is considered “well managed” and recalibrated the enforcement stance tied to weaker component ratings. Under the new approach, a firm with at least two component ratings of Broadly Meets Expectations or Conditionally Meets Expectations and no more than one Deficient-1 will be deemed “well managed.” The Board also replaces the automatic presumption of an enforcement action for one or more Deficient-1 ratings with a case-by-case determination, while retaining a presumption of formal action for any Deficient-2. The Insurance Supervisory Framework was updated to remove a reference to reputational risk. The changes become effective 60 days after publication in the Federal Register. Governor Michael Barr dissented, warning the rule lowers safeguards and conflicts with statutory “well managed” requirements.

At The Clearing House Annual Conference, Comptroller of the Currency Jonathan Gould outlined an agency-wide strategy to defend and promote federal preemption across the banking system. As reported by Law360, he emphasized pairing court advocacy with public- and policymaker-facing engagement to rebuild political support that he said has eroded over the past 15 years.