NCUA Boardroom. Credit/NCUA
The NCUA’s 2026 supervisory priorities marked a clear shift in tone and regulatory philosophy from the agency’s 2025 examination framework issued under then-Chairman Todd Harper, even as the underlying assessment of risk in the credit union system remains largely unchanged.
Both sets of priorities were grounded in the same core concerns: Deteriorating loan performance, elevated charge-offs, ongoing pressure on earnings and capital, and heightened exposure to interest-rate and liquidity risk. Delinquencies and net charge-off rates have remained near decade-plus highs, and both letters underscored that balance-sheet resilience continues to be the central safety-and-soundness challenge facing federally insured credit unions.
Where the two frameworks diverge most sharply iwas in emphasis and approach.
The 2025 priorities, issued under Harper, placed heavy weight on consumer financial protection and compliance execution, with detailed examiner focus on overdraft programs, fair lending, HMDA reporting, the Military Lending Act and Regulation E. Cybersecurity also stood out as a top-tier, standalone supervisory priority, with explicit references to board-level oversight, mandatory incident reporting, and the use of agency assessment tools.
By contrast, the 2026 priorities under Chairman Kyle Hauptman reflected a move toward risk-tailored supervision and burden reduction. While consumer protection and cybersecurity requirements remain fully enforceable, they are no longer highlighted as headline priorities. Instead, the agency’s focus shifted toward credit losses, liquidity stress, interest-rate sensitivity and earnings sustainability, reflecting the compounding effects of a prolonged high-rate environment.
Operational risk in 2026 is framed more holistically, with cybersecurity folded into broader concerns around payments systems, fraud prevention and third-party risk, rather than treated as a standalone category. Fraud, in particular, receives greater attention as a pervasive and evolving threat.
The 2026 letter also explicitly tied supervisory priorities to the NCUA’s broader deregulation and efficiency initiatives, emphasizing a “no regulation-by-enforcement” posture and examiner discretion based on individual risk profiles. That language was largely absent from the 2025 framework.
In short, the diagnosis has stayed the same, but the prescription has changed. Credit unions face many of the same risks in 2026 as they did in 2025, yet they can expect those risks to be examined through a more streamlined, flexible and institution-specific supervisory lens.
© Arc, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to TMSalesOperations@arc-network.com. For more information visit Asset & Logo Licensing.