What This Bill Does · Plain English
Summary · Congress.gov
Chief Risk Officer Enforcement and Accountability Act This bill expands which financial companies must establish a risk committee and appoint a chief risk officer and provides statutory authority for requiring large bank holding companies to appoint a chief risk officer. Chief risk officers are responsible for the establishment of risk limits, monitoring compliance, and reporting any deficiencies to the risk committee. Risk committees are responsible for the oversight of the risk management practices of the entire company. Currently, large bank holding companies that are publicly traded are required to establish risk committees and, by regulation, have chief risk officers. Under the bill, risk committees and chief risk officers are also required for (1) privately held large bank holding companies, and (2) large banks that do not have a holding company. Additionally, the bill requires companies to notify regulators if the chief risk officer position is vacant within 24 hours of when the vacancy occurs. If the vacancy lasts 60 days or more, the company’s assets are capped at the amount held at the time the vacancy occurred. Further, the bill allows the Federal Reserve Board to require smaller bank holding companies to establish a risk committee and appoint a chief risk officer. Currently, the board is allowed to require smaller bank companies that are publicly traded to establish risk committees.
Action Timeline
2025-03-06
Referred to the House Committee on Financial Services.
2025-03-06
Introduced in House
2025-03-06
Introduced in House
Frequently Asked Questions
Did HR.1910 pass?
HR.1910 is still alive. Current stage: COMMITTEE. Pass likelihood: 43%.
What does HR.1910 do?
Chief Risk Officer Enforcement and Accountability Act This bill expands which financial companies must establish a risk committee and appoint a chief risk officer and provides statutory authority for requiring large bank holding companies to appoint a chief risk officer. Chief risk officers are responsible for the establishment of risk limits, monitoring compliance, and reporting any deficiencies to the risk committee. Risk committees are responsible for the oversight of the risk management practices of the entire company. Currently, large bank holding companies that are publicly traded are re…
Who sponsored HR.1910?
HR.1910 was sponsored by Sean Casten (D-Illinois).
Full Bill Text
119 HR 1910 IH: Chief Risk Officer Enforcement and Accountability Act U.S. House of Representatives 2025-03-06 text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. I 119th CONGRESS 1st Session H. R. 1910 IN THE HOUSE OF REPRESENTATIVES March 6, 2025 Mr. Casten (for himself, Mr. Sherman , Mr. David Scott of Georgia , Mr. Green of Texas , and Mr. Torres of New York ) introduced the following bill; which was referred to the Committee on Financial Services A BILL To amend the Financial Stability Act of 2010 to require certain large banking institutions to have a Chief Risk Officer, and for other purposes. 1. Short title This Act may be cited as the Chief Risk Officer Enforcement and Accountability Act . 2. Chief risk officer Section 165(h) of the Financial Stability Act of 2010 ( 12 U.S.C. 5365(h) ) is amended— (1) in paragraph (2)— (A) by striking that is a publicly traded company and each place such term appears; and (B) by inserting , and appoint a chief risk officer, as set forth in paragraph (4) after as set forth in paragraph (3) each place such term appears; (2) by redesignating paragraph (4) as paragraph (7); and (3) by inserting after paragraph (3) the following: (4) Chief risk officer (A) In general A chief risk officer required by this subsection shall be appointed by a company from among individuals with experience in identifying, assessing, and managing risk exposures of large, complex financial firms. (B) Responsibilities A chief risk officer shall be responsible for overseeing the following: (i) The establishment of risk limits on an enterprise-wide basis and the monitoring of compliance with such limits. (ii) The implementation of and ongoing compliance with the policies and procedures establishing risk-management governance, risk-management procedures, and risk-control infrastructure for the global operations of the company. (iii) The development and implementation of the processes and systems for implementing and monitoring compliance with the policies and procedures described under clause (ii), including— (I) processes and systems for identifying and reporting risks and risk-management deficiencies, including regarding emerging risks, and ensuring effective and timely implementation of actions to address emerging risks and risk-management deficiencies for the global operations of the company; (II) processes and systems for establishing managerial and employee responsibility for risk management; (III) processes and systems for ensuring the independence of the risk-management function; and (IV) processes and systems to integrate risk management and associated controls with management goals and the compensation structure of the company for the global operations of the company. (iv) The management of risks and risk controls within the parameters of the company’s risk-control framework, and monitoring and testing of the company’s risk controls. (C) Reporting responsibilities A chief risk officer shall— (i) report directly to both the risk committee described under paragraph (3) and the chief executive officer of the company; and (ii) be responsible for reporting risk-management deficiencies and emerging risks to the risk committee described under paragraph (3) and resolving risk-management deficiencies in a timely manner. (D) Vacancies (i) Notification to regulators With respect to a chief risk officer required by this subsection, if the office of a chief risk officer becomes vacant, the company shall— (I) not later than 24 hours after such vacancy occurs, notify the primary financial regulatory agency of the company, the primary financial regulatory agency of any depository institution subsidiary of the company, and any State agency with supervisory authority over the company or any depository institution subsidiary of the company of such vacancy; and (II) not later than 7 days after such vacancy occurs, submit a plan to the primary financial regulatory agency of the company, the primary financial regulatory agency of any depository institution subsidiary of the company, and any State agency with supervisory authority over the company or any depository institution subsidiary of the company on how the company will search for and promptly hire a well-qualified chief risk officer to fill the vacancy. (ii) Failure to fill vacancy With respect to a vacancy described under clause (i), if the company does not fill the vacancy within 60 days of the vacancy occurring— (I) the company shall notify the public, including on the website of the company, that the vacancy has existed for more than 60 days; and (II) the total assets of the company may not exceed the total assets of the company on the date the vacancy occurred until such time as the vacancy is filled. (5) Application to large banks with no bank holding company The primary financial regulatory agencies shall issue regulations requiring each bank that does not have a bank holding company and that has total consolidated assets of not less than $50,000,000,000 to establish a risk committee, as set forth in paragraph (3) and appoint a chief risk officer, as set forth in paragraph (4). (6) Primary financial regulatory agency for certain nonbank financial companies For purposes of this subsection, the primary financial regulatory agency for a nonbank financial company supervised by the Board of Governors shall be the Board of Governors. .
Loading intelligence layer…