The NCUA has issued no AI-specific rule, letter to credit unions, or model risk framework: its own AI resource page states that 'NCUA has not issued AI specific rules or regulation' and that AI is supervised under existing technology-neutral requirements for safety and soundness, third-party due diligence, and consumer compliance. The agency co-signed the March 2021 interagency AI request for information, launched a Credit Union AI Resource Center in August 2025, and received a May 2025 GAO recommendation (GAO-25-107197) to expand model risk guidance that today covers only interest rate risk models. Neither the 2025 nor the 2026 supervisory priorities letter (25-CU-01, 26-CU-01) mentions artificial intelligence, and the NCUA did not join the April 2026 revised interagency model risk management guidance issued by the OCC, Federal Reserve, and FDIC.
| Full name | National Credit Union Administration |
| Role | Prudential supervisor and share insurer for credit unions |
| Force on banks | Supervisory guidance |
| Applies to | Federal credit unions and federally insured state-chartered credit unions (roughly 4,400 institutions); not banks |
| Key document | Credit Union Artificial Intelligence Resource Center (Aug 2025, updated Apr 2026) — the NCUA's only AI-specific publication for credit unions |
| Latest move | Feb 2026 Senate testimony frames 'space to innovate responsibly' with AI as a 2026-2030 strategic-plan goal; Apr 2026 refresh of the AI resource page; no AI mention in the Jan 2026 supervisory priorities |
| Documents tracked | 9 · all documents → |
Unlike the bank regulators, the NCUA never adopted SR 11-7 / OCC 2011-12. Its model risk guidance lives in the examiner guide and addresses interest rate risk modeling only; GAO found in May 2025 that this leaves examiners and credit unions without detail on how to manage AI models, and recommended broader guidance. The NCUA agreed in principle but told its Board in July 2025 that model risk guidance alone would not fit all credit-union AI use cases and that any new requirements would have to go through formal rulemaking. It was not a party to the April 17, 2026 revised interagency model risk management guidance (OCC Bulletin 2026-13 / SR 26-2) and has not referenced it in any issuance we could find.
The second structural gap is vendor oversight. Most credit unions buy AI (underwriting, chatbots, fraud detection) from third parties, but the NCUA lost authority to examine technology service providers in 2002 and has asked Congress to restore it repeatedly since (most recently in a March 2022 House AI Task Force hearing and a March 2022 white paper). GAO reiterated that recommendation in 2025. In practice, therefore, the NCUA's AI expectations run through Letter 07-CU-13 on third-party relationships, the 2023 Financial Innovation rule, information-security rules (Part 748), and fair-lending law, with examiners told that 'AI is not treated differently than any other innovative technology.'
What has the NCUA actually published on AI?
| Date | Document | Status |
|---|---|---|
| Feb 12, 2026 | Hauptman Senate testimony (Feb 2026) — Written Testimony of NCUA Chairman Kyle S. Hauptman before the U.S. Senate Committee on Banking, Housing, and Urban Affairs | Final |
| Jan 14, 2026 | NCUA Letter 26-CU-01 — NCUA's 2026 Supervisory Priorities | In force |
| Sep 1, 2025 | NCUA AI Compliance Plan (2025) — NCUA Artificial Intelligence Compliance Plan | Final |
| Aug 1, 2025 | NCUA Credit Union AI Resource Center — Artificial Intelligence (AI) — Credit Union AI Resource Center and AI Resources page | In force |
| Jul 24, 2025 | NCUA Board AI briefing (Jul 2025) — Board Briefing: Artificial Intelligence and Its Use Within the Credit Union Industry and the NCUA | Final |
| Sep 21, 2023 | NCUA Financial Innovation Rule (2023) — Financial Innovation: Loan Participations, Eligible Obligations, and Notes of Liquidating Credit Unions (final rule) | In force |
| May 13, 2022 | NCUA testimony to House AI Task Force (2022) — Written Testimony of Kelly Lay, Director of the Office of Examination and Insurance, before the House Financial Services Task Force on Artificial Intelligence | Final |
| Mar 31, 2021 | 2021 Interagency AI RFI — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning | Final |
| Dec 1, 2007 | NCUA Letter 07-CU-13 — Evaluating Third Party Relationships | In force |
| Date | Type | Document / event |
|---|---|---|
| Apr 17, 2026 | Milestone | NCUA sits out the revised interagency model risk management guidance. The OCC, Federal Reserve, and FDIC issued revised model risk guidance superseding SR 11-7; the NCUA was not a signatory and credit unions remain without an equivalent framework. |
| Feb 12, 2026 | Speech | Hauptman Senate testimony (Feb 2026) — Written Testimony of NCUA Chairman Kyle S. Hauptman before the U.S. Senate Committee on Banking, Housing, and Urban Affairs. In written testimony to the Senate Banking Committee on February 12, 2026, NCUA Chairman Kyle Hauptman said the agency's 2026-2030 strategic plan would 'create space for credit unions to innovate responsibly, especially in leveraging artificial intelligence and cryptocurrencies,' and pointed to the AI Resources page added in August 2025 as the NCUA's vehicle for AI risk-management support. source ↗ |
| Jan 14, 2026 | Letter | NCUA Letter 26-CU-01 — NCUA's 2026 Supervisory Priorities. Letter to Credit Unions 26-CU-01, issued January 14, 2026, sets NCUA examination priorities for 2026 under a 'no regulation by enforcement' policy: balance-sheet management (credit, interest rate, liquidity, capital), operational risk (payment systems, fraud prevention), and compliance risk including BSA/AML. source ↗ |
| Sep 1, 2025 | Report | NCUA AI Compliance Plan (2025) — NCUA Artificial Intelligence Compliance Plan. Published in September 2025 under the AI in Government Act of 2020 and OMB Memorandum M-25-21, the NCUA AI Compliance Plan describes how the agency governs its own AI use, not how credit unions should. source ↗ |
| Aug 1, 2025 | Guidance | NCUA Credit Union AI Resource Center — Artificial Intelligence (AI) — Credit Union AI Resource Center and AI Resources page. The NCUA's Credit Union AI Resource Center, added to ncua.gov in August 2025 and last updated April 28, 2026, is the agency's only AI-specific publication for credit unions. source ↗ |
| Jul 24, 2025 | Report | NCUA Board AI briefing (Jul 2025) — Board Briefing: Artificial Intelligence and Its Use Within the Credit Union Industry and the NCUA. On July 24, 2025 NCUA staff briefed the Board on AI use in credit unions and at the agency, announced a new AI resource page for credit unions, and responded to GAO's May 2025 recommendation on model risk management by concluding that updating model risk guidance alone would be insufficient and that any new AI requirements would need formal rulemaking. source ↗ |
| May 19, 2025 | Milestone | GAO-25-107197 recommends NCUA broaden its model risk management guidance. GAO found NCUA's model risk guidance covers only interest rate risk models (last updated October 2016) and that NCUA, unlike the OCC, Fed, and FDIC, cannot examine technology service providers. NCUA generally agreed with the model-risk recommendation. |
| Sep 21, 2023 | Regulation | NCUA Financial Innovation Rule (2023) — Financial Innovation: Loan Participations, Eligible Obligations, and Notes of Liquidating Credit Unions (final rule). On September 21, 2023 the NCUA Board unanimously approved the Financial Innovation final rule, effective 30 days after Federal Register publication, to give credit unions 'flexibility to take advantage of advanced technologies and opportunities offered by the financial technology sector.' It replaced prescriptive limits on indirect lending, loan participations, and eligible-obligation purchases with policy, due-diligence, and risk-management requirements, codifying prior supervisory letters on third-party due diligence. source ↗ |
| May 13, 2022 | Speech | NCUA testimony to House AI Task Force (2022) — Written Testimony of Kelly Lay, Director of the Office of Examination and Insurance, before the House Financial Services Task Force on Artificial Intelligence. On May 13, 2022, NCUA examination chief Kelly Lay told the House Task Force on Artificial Intelligence that the NCUA was testing machine-learning models on quarterly Call Report data and NLP on unstructured exam documents, that AI and ML algorithms 'must be tested to prevent the intrusion of underlying historical bias,' and that Congress should restore the NCUA's authority to examine third-party technology vendors, which lapsed in 2002. source ↗ |
| Jul 1, 2021 | Milestone | Interagency AI RFI comment period closes. The five agencies, including the NCUA, extended the original June 1 deadline to July 1, 2021; no follow-on interagency AI guidance was ever issued. |
| Mar 31, 2021 | Consultation | 2021 Interagency AI RFI — Request for Information and Comment on Financial Institutions' Use of Artificial Intelligence, Including Machine Learning. On March 29, 2021 the NCUA joined the OCC, Federal Reserve, FDIC, and CFPB in a request for information on financial institutions' use of AI and machine learning, published in the Federal Register on March 31, 2021. source ↗ |
| Dec 1, 2007 | Letter | NCUA Letter 07-CU-13 — Evaluating Third Party Relationships. Letter to Credit Unions 07-CU-13, issued in December 2007, is the NCUA's foundational third-party risk guidance and the framework examiners apply to AI vendors today. source ↗ |
- Whether the NCUA acts on GAO's May 2025 recommendation with broader model risk guidance or, as staff suggested in July 2025, a formal rulemaking on AI
- Any congressional move to restore NCUA authority to examine third-party technology service providers, which the agency has requested since 2002
- Whether the 2027 supervisory priorities letter names AI for the first time, after the 2025 and 2026 letters did not
- Updates to the Credit Union AI Resource Center, last modified April 28, 2026
Does the NCUA have AI guidance for credit unions?
No binding or formal guidance. The NCUA's AI resource page (launched August 2025) says the agency 'has not issued AI specific rules or regulation' and that existing technology-neutral rules apply. It lists NIST, Treasury AIEOG, COSO, and CISA materials and sets expectations for due diligence on AI vendors and board oversight, but it is a resource page, not a Letter to Credit Unions.
Does the 2026 revised model risk management guidance (SR 26-2 / OCC 2026-13) apply to credit unions?
No. It was issued by the OCC, Federal Reserve, and FDIC only. The NCUA never adopted the 2011 guidance either; its model risk guidance covers interest rate risk models and GAO recommended in May 2025 that it be broadened. Many credit unions nonetheless use SR 11-7 / SR 26-2 as a voluntary benchmark.
Can the NCUA examine my AI vendor?
No. The NCUA's authority to examine third-party technology service providers expired in 2002 and Congress has not restored it despite repeated NCUA and GAO requests. Responsibility for vendor due diligence, contract terms, and ongoing monitoring sits with the credit union under Letter 07-CU-13 and the 2023 Financial Innovation rule.
Follow every move these regulators make
6 curated AI stories for banking executives · Every morning · Free
Subscribe to BankingNewsAI →