On August 3, 2026, the OCC proposed a significant overhaul of its rules governing the disclosure of non-public OCC information, including confidential supervisory information (CSI). The proposal would expand the circumstances in which financial institutions may share CSI without prior OCC approval—including with affiliates, service providers, M&A counterparties and certain advisers—and would remove the rules’ express reference to potential criminal liability for unauthorized disclosures.

While the changes could make navigating NPOI substantially easier, they may also create new compliance considerations. As institutions gain greater flexibility to share sensitive supervisory information, they may need to reassess contractual protections and controls designed to prevent recipients from misusing that information.

We examine the proposed framework, the OCC’s shift away from criminal enforcement, and the practical implications for financial institutions and their counsel.  Click here to read the full post.