Banking Regulation, Capital and Compliance

Introduction and Context

Banks perform maturity transformation: they fund relatively short-term liabilities, such as deposits, to provide longer-term loans and investments. They also transform risk, operate payment systems, create money through lending, and connect households and firms to financial markets. These functions generate substantial social benefits, but they also create vulnerabilities. A bank may be profitable and solvent yet unable to meet immediate withdrawals; alternatively, it may have sufficient liquidity today but insufficient capital to absorb future losses.

Banking regulation exists to reduce these vulnerabilities and protect the wider financial system. It seeks to ensure that banks are safe and sound, customers are treated fairly, financial crime is detected, and failing institutions can be managed without disproportionate damage to taxpayers or the economy. Regulation is not costless: compliance systems require investment, reporting can be burdensome, and stringent requirements may increase the price or reduce the availability of credit. Effective regulation therefore balances resilience, efficiency, competition, innovation and financial inclusion.

This chapter examines prudential supervision, Basel capital and liquidity standards, deposit insurance, resolution, consumer protection, anti-money laundering and counter-terrorist financing (AML/CFT), know-your-customer (KYC) requirements, sanctions compliance, regulatory reporting, and the economic effects of regulation.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain why banks require specialized regulation and supervision.
2. Distinguish capital adequacy, liquidity, solvency and leverage.
3. Calculate and interpret selected Basel capital and liquidity ratios.
4. Explain deposit insurance, resolution planning and the role of lender-of-last-resort facilities.
5. Describe KYC, AML/CFT, sanctions controls and consumer-protection obligations.
6. Assess the purpose and limitations of regulatory reporting.
7. Analyse the economic and ethical trade-offs created by financial regulation.

1. Why Banks Are Regulated

Bank regulation addresses several forms of market failure and systemic risk.

Information asymmetry. Depositors cannot continuously assess a bank’s loan portfolio, liquidity position or operational controls. Without reliable disclosure and supervision, depositors may withdraw funds whenever they fear weakness, even if the bank is fundamentally sound.

Externalities and systemic risk. The failure of one institution can impair payment systems, reduce confidence, force asset sales and spread losses to other institutions. Individual banks may not consider these economy-wide costs when choosing their risk level.

Moral hazard. Deposit insurance, central-bank support and the expectation that a large bank will be rescued can weaken market discipline. Banks may take greater risks if they believe losses will be transferred to an insurer, government or other institutions.

Consumer vulnerability. Retail customers may have less expertise and bargaining power than financial institutions. Regulation addresses misleading advertising, unfair contract terms, unauthorized transactions, data misuse and unsuitable products.

Financial integrity. Banks can be used to launder criminal proceeds, finance terrorism, evade sanctions and facilitate corruption. AML/CFT and sanctions controls protect the integrity of the financial system.

Regulation is delivered through legislation, prudential rules, licensing, supervision, enforcement, resolution frameworks and private-sector governance. A useful distinction is between microprudential regulation, which focuses on the safety of individual institutions, and macroprudential regulation, which addresses risks arising across the financial system or over the credit cycle.

2. Prudential Supervision

Prudential supervision is the ongoing assessment of a bank’s financial condition, governance and risk-management capacity. Supervisors typically combine off-site analysis with on-site examinations.

Off-site supervision uses regulatory returns, audited financial statements, stress tests, liquidity data, large-exposure reports and market information. On-site supervision examines loan files, models, controls, board minutes, information systems, compliance processes and internal-audit work.

A common supervisory framework evaluates:

• capital adequacy and solvency;
• asset quality and credit concentration;
• earnings and loss-absorption capacity;
• liquidity and funding stability;
• market, operational, cyber and conduct risks;
• governance, risk culture and internal controls; and
• compliance with laws and supervisory directives.

Supervisors increasingly use a risk-based approach. Resources are concentrated on institutions, products and activities posing the greatest risk. This approach is more efficient than applying identical supervisory intensity to every bank, but it requires reliable data and professional judgment. Rules cannot eliminate judgment: a bank may satisfy a ratio while having weak underwriting, poor governance or unrealistic assumptions.

The supervisory review process complements minimum rules. A bank may be required to hold capital above regulatory minima because of rapid growth, concentrated exposures, weak controls, business-model risk or deficiencies identified in stress testing. Supervisors may also restrict dividends, require remediation plans, impose growth limits or replace management in serious cases.

3. Capital: The First Line of Loss Absorption

Bank capital is the residual financial resource available to absorb losses after liabilities have been recognized. It is not the same as cash. Capital can consist of common equity, retained earnings and qualifying instruments, while a bank may hold its assets in loans, securities or cash.

The Basel framework emphasizes risk-sensitive capital ratios. The basic relationship is:

Eligible capital is capital recognized by regulation. Risk-weighted assets (RWA) are exposures multiplied by regulatory risk weights or calculated through approved models. The ratio is dimensionless because both numerator and denominator are measured in monetary units.

3.1 Capital Components

Common Equity Tier 1 (CET1) is the highest-quality capital. It generally includes common shares and retained earnings, subject to regulatory adjustments such as deductions for certain intangible assets or deferred tax items.

Additional Tier 1 (AT1) consists of qualifying perpetual instruments capable of absorbing losses while the bank remains a going concern. Such instruments normally have no fixed maturity and may allow coupon cancellation under specified conditions.

Tier 2 capital supports loss absorption in a gone-concern or resolution context. It may include qualifying subordinated debt and certain general provisions, subject to limits and eligibility rules.

The exact percentages and implementation dates depend on the jurisdiction and applicable Basel adoption. Students should therefore distinguish internationally agreed standards from domestic legal requirements.

3.2 Risk-Weighted Assets

A simple illustration uses regulatory risk weights:

Here CU means currency units. If a bank has CET1 of CU5.2 million, its CET1 ratio is:

This calculation assumes the exposures and risk weights are already determined correctly and ignores credit-risk adjustments, off-balance-sheet conversion factors and other Basel requirements. It is an instructional example, not a substitute for regulatory reporting.

3.3 Leverage Ratio

Risk weights may underestimate risk or be manipulated through model assumptions. The leverage ratio provides a simpler, non-risk-weighted constraint:

The leverage exposure measure generally includes on-balance-sheet exposures and specified off-balance-sheet items, with regulatory adjustments. Because it does not distinguish low-risk from high-risk assets, it complements rather than replaces risk-sensitive capital ratios.

3.4 Capital Buffers and Stress Testing

Capital buffers are resources held above minimum requirements. A capital conservation buffer is intended to absorb losses during stress; breaching buffer levels may trigger restrictions on dividends, share repurchases and discretionary bonuses. A countercyclical capital buffer can be increased when system-wide credit growth is judged excessive and released during downturns. Systemically important banks may face additional requirements.

Stress testing asks whether a bank could remain viable under adverse assumptions such as recession, unemployment, falling property prices, higher interest rates, deposit outflows or exchange-rate depreciation. Stress tests do not forecast the future with certainty. Their value lies in identifying vulnerabilities, testing management actions and improving contingency planning.

4. Liquidity and Funding Regulation

Solvency concerns whether assets exceed liabilities after recognizing losses. Liquidity concerns the ability to meet obligations when due. A solvent bank can fail through a liquidity crisis if it cannot convert assets into cash quickly without unacceptable losses.

4.1 Liquidity Coverage Ratio

The Liquidity Coverage Ratio (LCR) is designed to ensure that a bank holds enough high-quality liquid assets to cover net cash outflows over a specified short stress horizon, commonly 30 calendar days under Basel standards.

High-quality liquid assets (HQLA) are assets that can be converted into cash rapidly with limited loss, subject to eligibility, haircuts and concentration rules. Net cash outflows equal expected cash outflows minus permitted inflows, subject to regulatory caps and stress assumptions. A ratio of at least 100% means that the prescribed HQLA stock covers the modeled net outflows.

4.2 Net Stable Funding Ratio

The Net Stable Funding Ratio (NSFR) addresses structural funding over a longer horizon:

Available stable funding reflects the stability of funding sources, while required stable funding reflects the liquidity characteristics and maturity of assets and off-balance-sheet exposures. The standard is generally calibrated over a one-year horizon. LCR and NSFR are complementary: the LCR focuses on short-term stress; the NSFR focuses on funding stability.

Banks also manage intraday liquidity, collateral, payment-system obligations, concentration of funding, deposit stickiness and contingency funding lines. Supervisors expect credible liquidity contingency plans, including escalation procedures, communication strategies and access to eligible central-bank facilities.

5. Deposit Insurance and the Lender of Last Resort

Deposit insurance protects eligible depositors up to a specified limit if a bank fails. Its primary purposes are to protect small savers and reduce destabilizing runs. Coverage may be funded by premiums paid by banks, government contributions or a combination of sources.

Deposit insurance creates moral hazard because insured depositors have less incentive to monitor banks. Good systems therefore use limited coverage, clear eligibility rules, risk-sensitive premiums, prompt payout procedures and strong supervision. Coverage should generally protect ordinary depositors without guaranteeing all wholesale creditors or investors.

A central bank may act as lender of last resort, providing liquidity to a solvent but temporarily illiquid institution against appropriate collateral and, traditionally, at a penalty rate. Modern facilities vary considerably. Emergency lending must be coordinated with supervisors and resolution authorities because liquidity support cannot solve a fundamentally insolvent institution.

6. Resolution of Failing Banks

Resolution is the organized process for dealing with a failing or likely-to-fail bank while preserving critical functions and avoiding unnecessary disruption. The objective is not to protect shareholders from losses; shareholders and subordinated investors should normally bear losses before public funds are used.

Common resolution tools include:

• sale of business: transferring viable assets and liabilities to another institution;
• bridge bank: placing critical operations in a temporary institution;
• bail-in: writing down or converting eligible liabilities into equity;
• asset separation: transferring troubled assets to an asset-management vehicle; and
• liquidation: closing the bank and distributing recoveries under insolvency law.

A credible resolution regime requires recovery and resolution plans, tested operational capabilities, access to information, depositor preference where applicable, cross-border cooperation and sufficient loss-absorbing resources. The principle of “no creditor worse off” commonly requires that creditors receive at least what they would have received in ordinary liquidation, subject to the relevant legal framework.

7. Consumer Protection and Conduct Regulation

Prudential regulation protects the institution and financial system; conduct regulation protects customers and market integrity. Important obligations include transparent pricing, accurate disclosure, responsible lending, fair treatment, complaint handling, privacy, accessibility and protection from unauthorized payments.

Responsible lending requires more than checking whether a customer has collateral. Institutions should assess income, expenses, existing obligations, repayment capacity and the risks of interest-rate changes. Product governance should identify the target market and prevent products from being distributed in ways likely to cause foreseeable harm.

Conduct risk may arise through mis-selling, hidden fees, aggressive collections, conflicts of interest, discriminatory service, benchmark manipulation or misuse of customer data. Senior management and boards are responsible for establishing a culture in which revenue targets do not override legal and ethical duties.

8. AML/CFT, KYC and Sanctions Compliance

Money laundering commonly involves placement of illicit proceeds into the financial system, layering transactions to obscure their origin, and integration into apparently legitimate wealth. Terrorist financing may involve relatively small sums and can use lawful as well as unlawful funds. Consequently, AML/CFT controls must identify suspicious patterns rather than focus only on transaction size.

A risk-based AML/CFT programme generally includes:

1. enterprise-wide risk assessment;
2. customer identification and verification;
3. beneficial-ownership identification;
4. customer-risk classification;
5. ongoing transaction and relationship monitoring;
6. enhanced due diligence for higher-risk customers;
7. suspicious-transaction reporting;
8. record retention and staff training; and
9. independent testing and board oversight.

KYC is the process of understanding who the customer is, who controls an entity, the purpose of the relationship and the expected activity. Customer due diligence is broader and includes ongoing monitoring. Enhanced due diligence may be required for politically exposed persons, high-risk jurisdictions, complex ownership structures, correspondent banking and unusual activity.

Sanctions compliance differs from AML/CFT. Sanctions may prohibit dealings with listed persons, entities, countries, sectors or activities. A bank must screen customers, beneficial owners, transactions and payment messages against applicable lists, while managing false positives and updating data promptly. A sanctions alert should be investigated under documented procedures; automatic rejection of every name match can disrupt legitimate commerce, while weak screening can create severe legal and reputational exposure.

Privacy and fairness matter. AML systems should collect information proportionately, restrict access, protect data and avoid discriminatory profiling. Suspicious-transaction reporting must preserve confidentiality where required by law and should not result in unjustified disclosure to the customer.

9. Regulatory Reporting and Compliance Governance

Regulatory reporting converts a bank’s activities into standardized information for supervisors. Reports may cover capital, liquidity, large exposures, related parties, asset quality, interest-rate risk, operational incidents, complaints, AML alerts and recovery indicators.

High-quality reporting depends on data lineage: the bank must be able to trace a reported figure from the regulatory return to source systems, accounting records and underlying transactions. Governance should define data owners, validation controls, reconciliations, approval responsibilities, correction procedures and escalation channels.

The three-lines model is widely used:

• first line: business units own risks and operate controls;
• second line: risk management and compliance set frameworks and challenge the first line; and
• third line: internal audit independently evaluates governance and controls.

External auditors, boards, regulators and financial-intelligence authorities provide additional oversight. Compliance is not merely a legal department function; it is an enterprise-wide responsibility.

Technology can improve monitoring through automated data validation, network analysis, anomaly detection and machine learning. However, AI systems may produce opaque decisions, biased alerts, excessive false positives or missed emerging typologies. Institutions must maintain human oversight, model validation, explainability appropriate to the use case, cybersecurity and audit trails. Automation does not transfer accountability away from management.

10. Economic Effects and Critical Evaluation

Regulation produces benefits by reducing bank failures, protecting depositors, improving market confidence and limiting contagion. Strong capital and liquidity positions can stabilize lending during downturns because banks are better able to absorb losses and resist funding shocks.

Regulation also imposes costs. Higher capital requirements may reduce return on equity unless lending prices or efficiency adjust. Liquidity requirements can make some long-term or illiquid lending more expensive. Reporting and AML controls increase operating costs, and excessive de-risking may exclude charities, migrants, small firms or customers in remote areas from formal finance.

There may be unintended effects. Activity can migrate from regulated banks to less-regulated non-bank financial intermediaries. Complex rules may encourage regulatory arbitrage, in which institutions restructure transactions to obtain more favorable treatment without reducing economic risk. Uniform rules may also disadvantage small banks if compliance costs have large fixed components.

The appropriate policy objective is not zero risk. Eliminating all bank failures would require prohibitive costs and could weaken incentives for prudent management. The objective is a resilient, competitive and fair system in which failures can occur without causing disproportionate social damage.

Applied Case: Illustrative Riverside Bank Liquidity Stress

Background. Riverside Bank is a mid-sized retail bank with CU100 million of HQLA and modeled 30-day net cash outflows of CU80 million. Its CET1 capital is CU12 million and RWA are CU150 million. Rumors concerning a technology outage lead several corporate depositors to withdraw funds.

Problem. Management must determine whether the bank meets its principal quantitative buffers and whether its liquidity plan is credible.

Analysis. The initial LCR is:

The initial CET1 ratio is:

Suppose the withdrawals increase modeled net cash outflows to CU110 million and reduce HQLA to CU92 million after asset sales and collateral effects. The stressed LCR becomes:

The bank therefore falls below a 100% LCR benchmark under the stated assumptions. This does not automatically prove insolvency, but it requires escalation, communication with the supervisor, activation of contingency funding and review of asset-sale and collateral plans. Management should also investigate the technology outage, preserve customer access, communicate accurately and assess whether operational risk has affected confidence.

Approach and outcome. Riverside draws an eligible committed facility, obtains additional collateral, slows non-essential outflows and restores HQLA to CU120 million while net outflows fall to CU100 million. Its LCR becomes 120%. The board commissions an independent review of liquidity assumptions, deposit concentration, cyber resilience and disclosure practices.

Learning points. Ratios are decision tools rather than guarantees. Liquidity can deteriorate rapidly; capital and liquidity are related but not interchangeable; operational failures can become financial risks; and early escalation is more effective than concealing weakness.

Challenges, Ethics and Best Practices

Major challenges include regulatory complexity, cross-border inconsistencies, rapidly changing financial technology, cyber threats, climate-related financial risk, model uncertainty and the growth of non-bank finance. Supervisors must also balance confidentiality with transparency and innovation with consumer protection.

Best practice requires: strong board oversight; independent risk and compliance functions; conservative liquidity planning; credible recovery and resolution plans; accurate regulatory data; regular scenario analysis; clear customer communications; proportionate AML controls; tested sanctions screening; effective whistleblowing channels; and continuous staff training. Ethical conduct should be measured not only by technical compliance but also by whether customers, markets and society are treated fairly.

Chapter Summary

Banking regulation responds to information asymmetry, systemic externalities, moral hazard, consumer vulnerability and financial-crime risks. Prudential supervision combines rules, reporting, examinations, stress testing and supervisory judgment. Capital absorbs losses, while liquidity enables banks to meet obligations when due. Basel frameworks use risk-sensitive capital ratios, leverage constraints, the LCR and the NSFR, supported by buffers and supervisory review.

Deposit insurance protects eligible depositors but must be designed to limit moral hazard. Lender-of-last-resort support addresses temporary liquidity stress, whereas resolution manages failing institutions through tools such as sale, bridge banking and bail-in. Consumer protection governs fair treatment and responsible lending. AML/CFT, KYC and sanctions controls protect financial integrity, but must respect privacy and avoid unjustified exclusion. Accurate regulatory reporting and the three-lines model support accountability. Finally, regulation creates both resilience benefits and economic costs; effective policy seeks proportionate, risk-sensitive regulation rather than the impossible goal of eliminating all risk.

Key Terms

AML/CFT: Measures against money laundering and terrorist financing.

Bail-in: Writing down or converting eligible liabilities to absorb losses.

Basel framework: International standards for bank capital, liquidity and risk management.

Capital buffer: Capital held above minimum requirements to absorb stress losses.

CET1: Common Equity Tier 1, the highest-quality regulatory capital.

Consumer protection: Rules promoting fair, transparent and suitable treatment of customers.

Deposit insurance: A scheme protecting eligible deposits up to a stated limit.

HQLA: High-quality liquid assets that can be converted into cash quickly with limited loss.

KYC: Know-your-customer procedures for identifying and understanding customers.

Leverage ratio: Tier 1 capital divided by a broad exposure measure.

Liquidity: The ability to meet obligations when they fall due.

LCR: Liquidity Coverage Ratio for short-term stressed net cash outflows.

Macroprudential regulation: Regulation addressing risks across the financial system.

Microprudential regulation: Regulation focused on individual institutions.

NSFR: Net Stable Funding Ratio addressing structural funding stability.

Prudential supervision: Ongoing assessment of financial soundness and risk management.

Resolution: Organized management of a failing bank.

Risk-weighted assets: Exposures adjusted according to regulatory risk weights.

Sanctions compliance: Controls preventing prohibited dealings with listed persons, entities or jurisdictions.

Systemic risk: Risk that financial distress spreads across institutions or markets.

Review Questions

Short Answer Questions

1. Why can a solvent bank nevertheless experience a liquidity crisis?
2. What is the difference between microprudential and macroprudential regulation?
3. Identify the principal components of the Basel capital framework.
4. What is the purpose of customer due diligence?
5. Why is regulatory reporting important to supervisors?

Long Answer Questions

1. Explain the economic rationale for banking regulation and discuss the main forms of market failure it addresses.
2. Compare the CET1 ratio, leverage ratio, LCR and NSFR, including the risks each is designed to control.
3. Describe how deposit insurance and lender-of-last-resort facilities can reduce financial instability while creating moral hazard.
4. Explain the stages of an effective AML/CFT and KYC programme.
5. Evaluate the role of resolution planning in reducing the need for taxpayer-funded bank rescues.

Analytical / Application Questions

1. A bank has HQLA of CU75 million and 30-day net cash outflows of CU90 million. Calculate its LCR and explain two management actions that could improve it.
2. A bank reports strong capital ratios but has concentrated corporate deposits, weak cyber controls and unreliable liquidity data. Analyse why ratios alone may not demonstrate safety and soundness.
3. A regulator proposes substantially higher capital requirements. Assess the likely effects on bank resilience, lending costs, competition, financial inclusion and regulatory arbitrage.

Multiple Choice Questions with Answers

Question 1

Which risk is primarily addressed by the Liquidity Coverage Ratio?

A. The risk that a bank cannot meet short-term stressed cash outflows

B. The risk that a bank’s common shares lose market value

C. The risk that a customer violates a sanctions law

D. The risk that a loan is incorrectly classified for tax purposes

Correct Answer: A. The risk that a bank cannot meet short-term stressed cash outflows

Question 2

A bank has eligible capital of CU8 million and risk-weighted assets of CU100 million. What is its capital ratio?

A. 0.8%

B. 8%

C. 12.5%

D. 80%

Correct Answer: B. 8%

Question 3

Which instrument is generally regarded as the highest-quality form of regulatory capital?

A. Short-term wholesale funding

B. Common Equity Tier 1

C. Unsecured customer deposits

D. Trade payables

Correct Answer: B. Common Equity Tier 1

Question 4

What is the principal purpose of deposit insurance?

A. To guarantee profits to bank shareholders

B. To eliminate all bank credit risk

C. To protect eligible depositors and reduce destabilizing runs

D. To replace prudential supervision

Correct Answer: C. To protect eligible depositors and reduce destabilizing runs

Question 5

Which activity is most directly associated with KYC?

A. Determining a bank’s dividend policy

B. Identifying and verifying a customer and understanding the relationship

C. Setting the central bank’s policy interest rate

D. Calculating a firm’s depreciation expense

Correct Answer: B. Identifying and verifying a customer and understanding the relationship

Question 6

A bank has CU120 million of HQLA and CU100 million of net cash outflows. What is its LCR?

A. 83.3%

B. 100%

C. 120%

D. 220%

Correct Answer: C. 120%

Question 7

Which resolution tool converts or writes down eligible liabilities to absorb losses?

A. Bail-in

B. Bridge lending

C. Deposit taking

D. Risk weighting

Correct Answer: A. Bail-in

Question 8

What is the main focus of macroprudential regulation?

A. The personal budget of each depositor

B. Risks affecting the financial system as a whole

C. The design of individual bank advertisements only

D. The calculation of employee salaries

Correct Answer: B. Risks affecting the financial system as a whole

Question 9

Why does a leverage ratio complement risk-weighted capital ratios?

A. It uses a broad exposure measure and does not rely entirely on risk weights

B. It measures only liquidity inflows

C. It guarantees that no bank can fail

D. It applies only to non-financial companies

Correct Answer: A. It uses a broad exposure measure and does not rely entirely on risk weights

Question 10

Which statement best describes sanctions compliance?

A. It is identical to calculating loan-loss provisions

B. It involves controls to prevent prohibited dealings with listed persons, entities or jurisdictions

C. It guarantees that all suspicious transactions are criminal

D. It replaces customer identification procedures

Correct Answer: B. It involves controls to prevent prohibited dealings with listed persons, entities or jurisdictions