CRA Modernization, What Changed and What It Means for Your Compliance Program

The Community Reinvestment Act hasn't had a major regulatory update since 1995. The 2024 final rule, jointly issued by the OCC, FDIC, and Federal Reserve, represents the most significant change to CRA regulations in nearly three decades. For community banks, the rule introduces new assessment area concepts, revises how lending is evaluated, expands community development definitions, and creates new data collection requirements. This guide covers what actually changed, what stays the same for smaller institutions, and what your compliance team needs to update.

Key Takeaways:

• The final rule creates new assessment area types and expands assessment areas beyond physical branch footprints for larger banks
• Small banks (under $600 million in assets) retain the existing CRA framework with an option to be evaluated under the new rules
• New retail lending tests use metrics-based evaluations instead of purely qualitative assessments
• Data collection requirements increase significantly, with new implementation dates phased through 2027

What the CRA Requires: A Quick Refresher

The Community Reinvestment Act (12 U.S.C. § 2901) requires federal regulators to evaluate whether banks meet the credit needs of their communities, including low- and moderate-income (LMI) neighborhoods. CRA doesn't mandate specific loans or investments, it requires banks to demonstrate they're not ignoring the communities where they take deposits.

Under 12 CFR Part 228 (Federal Reserve) and parallel OCC and FDIC regulations, banks are evaluated through periodic CRA examinations that result in one of four ratings: Outstanding, Satisfactory, Needs to Improve, or Substantial Noncompliance.

CRA ratings have real consequences. A less-than-satisfactory rating can delay or block applications for branches, mergers, acquisitions, and holding company formations. Regulators can impose conditions on approvals, and public CRA ratings attract scrutiny from community organizations and the press.

New Assessment Area Framework

The most significant structural change is how banks define and are evaluated within their assessment areas.

Under the old rule: Assessment areas were based on where a bank had physical branches and deposit-taking ATMs. If your branches were in three counties, those three counties defined your assessment area. Lending outside that footprint was irrelevant for CRA purposes.

Under the new rule, for large banks ($2 billion+ in assets):

• Facility-based assessment areas (FBAAs): Still defined by branch locations, but with updated delineation requirements
• Retail lending assessment areas (RLAAs): New areas created where a bank originates a significant volume of loans outside its branch footprint, targeting online and non-branch lending
• Outside retail lending area: Captures remaining lending outside FBAAs and RLAAs

This means large banks that generate significant lending volume through online channels or mortgage correspondents will be evaluated in those geographies, even without branches there.

For community banks (under the current small bank threshold): The facility-based assessment area remains the primary framework. Small banks are not required to delineate RLAAs. However, community banks may opt into the new framework if it benefits their evaluation.

Retail Lending Test Changes

The new retail lending test replaces qualitative judgment with metrics-based benchmarks for large banks. Under the old framework, examiners made largely subjective assessments of whether a bank's lending was "reasonable." The new rule creates two quantitative measures:

Retail Lending Volume Screen: Measures the bank's overall lending volume in each assessment area relative to its deposit base. A bank that takes deposits in a community but does minimal lending there will face scrutiny.

Retail Lending Distribution Analysis: Evaluates the distribution of lending across borrower income levels and census tract income categories. This analysis compares the bank's lending to:

• Market benchmarks: The aggregate lending of all reporters in the assessment area
• Community benchmarks: The demographic composition of the assessment area

The bank's performance against both benchmarks determines the evaluation. This dual-benchmark approach is more rigorous than the prior qualitative standard.

For small banks: The existing small bank lending test (a qualitative assessment of the bank's loan-to-deposit ratio, lending within assessment areas, distribution across income levels, and responsiveness to community credit needs) remains available. Small banks may opt into the new retail lending test if they prefer.

Community Development Changes

The final rule significantly expands what qualifies as "community development" for CRA purposes.

Expanded definitions include:

• Affordable housing for LMI individuals (unchanged)
• Community services targeted to LMI individuals (unchanged)
• Economic development activities that finance small businesses and small farms (revised)
• Revitalization and stabilization activities in LMI, underserved, and distressed areas (expanded)
• New: Activities in Native Land Areas
• New: Disaster preparedness and climate resilience activities in designated areas
• New: Activities benefiting persistent poverty counties

The expanded definitions create new opportunities for community banks to earn CRA credit. Investments in disaster resilience infrastructure, lending to businesses in persistent poverty counties, and financing projects in Native Land Areas now count toward community development.

Community development financing test (large banks): Evaluates the dollar volume and impact of community development loans, investments, and services. This replaces the investment test and service test with a single, combined evaluation.

Data Collection Requirements

The new rule creates significant new data collection and reporting obligations, particularly for large banks. Community banks face more modest changes.

For large banks ($2 billion+):

• Automobile loan data (new)
• Small business and small farm loan data aligned with Section 1071 definitions
• Community development activity data with standardized reporting
• Deposit data by assessment area
• Retail lending data by assessment area type (FBAA, RLAA, outside area)

For small banks:

• No new mandatory data collection requirements unless opting into the new framework
• Banks evaluated under the small bank lending test continue with existing data practices
• Community development data collection is voluntary but encouraged

The data infrastructure required for large banks is substantial. Banks that have not invested in geocoding, census tract mapping, and automated data capture will need to build or acquire these capabilities before the compliance dates.

Implementation Timeline

The final rule uses a phased implementation schedule:

Note: Litigation and regulatory challenges have affected portions of this timeline. Banks should monitor their primary regulator's guidance for the most current implementation dates and any stays or modifications.

Community banks operating under the small bank framework have the least disruption. The small bank lending test continues as an option, and no new data collection is mandatory unless the bank opts in.

What Community Banks Need to Update

Even if your bank continues under the small bank framework, the CRA modernization rule warrants several compliance program updates:

1. Assessment area review: Confirm your assessment area delineations comply with the updated requirements. Even for small banks, the rule clarifies that assessment areas must include whole census tracts (no partial tracts) and cannot arbitrarily exclude LMI geographies.

2. Community development tracking: Review your community development loans, investments, and services against the expanded definitions. Activities that previously didn't qualify, disaster resilience, Native Land Area projects, persistent poverty county lending, may now count toward your CRA evaluation.

3. Board reporting: Update your board CRA reporting to reflect the rule changes, particularly the expanded community development definitions and any changes to your assessment area.

4. Policy updates: Revise your CRA policy to reference the updated regulation and reflect any changes to your bank's CRA strategy.

5. Vendor and system updates: If your bank uses a CRA data management vendor, confirm the vendor is updating its system to accommodate the new rule's requirements, even if your bank isn't subject to the new data collection mandates.

For a detailed breakdown of CRA reporting mechanics, see our CRA reporting compliance guide.

How Canarie Helps Banks Track CRA Compliance Changes

Regulatory changes like CRA modernization create a cascade of compliance tasks, policy updates, system changes, training, board approvals, vendor coordination, and data collection preparations. Tracking these across spreadsheets and email threads creates gaps that examiners find.

Canarie turns each regulatory change into a set of assigned tasks with deadlines, responsible owners, and evidence capture. When the CRA rule's implementation milestones arrive, your compliance team has a documented record showing each required change was identified, assigned, completed, and approved, the kind of exam-ready evidence that shortens examinations.

See how Canarie turns regulatory changes into trackable compliance tasks →

Frequently Asked Questions

Does CRA modernization apply to banks under $600 million in assets?

Small banks (generally under $600 million, though the threshold is adjusted periodically) can continue to be evaluated under the existing small bank lending test. The new retail lending test and community development financing test are not mandatory for small banks. However, small banks may opt into the new evaluation framework if they believe it better reflects their CRA activities. Small banks that opt in would be subject to the same metrics-based evaluation and data requirements as larger institutions.

How do the new retail lending assessment areas (RLAAs) work?

RLAAs apply only to large banks. They are created when a bank originates a significant number of closed-end home mortgage loans or small business loans in a metropolitan statistical area (MSA) or non-metropolitan area outside its branch footprint. The threshold is based on loan count relative to total lending. Once an RLAA is triggered, the bank is evaluated on its lending distribution within that geography, including lending to LMI borrowers and in LMI census tracts.

What qualifies as disaster preparedness and climate resilience under the expanded community development definition?

The rule includes activities that support disaster preparedness and climate resilience in eligible geographies (LMI, underserved, distressed, and designated disaster areas). This can include financing for flood mitigation infrastructure, weatherization of affordable housing, community resilience planning, and loans to small businesses for disaster preparedness. The activity must have a primary purpose of serving the eligible geography or population, general environmental projects without a community focus do not qualify.

Will CRA modernization change how merger applications are evaluated?

CRA performance remains a statutory factor in merger and acquisition applications under the Bank Merger Act and the Bank Holding Company Act. The modernization rule doesn't change this requirement, but it does change how CRA performance is measured. Banks with CRA ratings under the new framework will have their performance evaluated against the new metrics-based standards. Banks considering mergers or acquisitions should factor CRA performance under the new rule into their strategic planning.