🇺🇸 Live Banking & Financial Services

Regulation Y (12 CFR 225)

Governs bank holding company formations, acquisitions, and permissible nonbanking activities, and sets capital adequacy and risk management requirements. Applies to bank holding companies and their subsidiaries.

View official source document

114

Rules extracted

1,928

Obligations decomposed

16.9x

Avg obligations per rule

🇺🇸 United States

Jurisdiction

What AuditDSS covers

Source

Regulation

Extracted

114

Rules

Decomposed

1,928

Obligations

16.9x

Decomposition ratio

Each rule is decomposed into an average of 16.9 atomic obligations — the smallest testable units that can be independently violated.

Fully extracted & scored

All 1,928 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.

Risk scoring

Every obligation in Regulation Y is scored across independent risk dimensions:

Obligation Weight

How critical within the regulatory framework

Violation Likelihood

How often breached in practice

Enforcement Evidence

Regulator enforcement history and penalties

Cascade Dependency

How many obligations depend on this one

Regulatory details

Full title: Regulation Y (12 CFR 225)
Regulatory body: Federal Reserve Board
Jurisdiction: 🇺🇸 United States
Document type: regulation
Effective date: January 1, 1971
Industry: Banking & Financial Services
Official source: View source document ↗

Who this applies to

bank holding companiesfinancial holding companiesstate member banks

Key requirements

prior approval for acquisitions
capital adequacy requirements
permissible nonbanking activities
source of strength doctrine
risk management expectations

Frequently asked questions about Regulation Y

What is Regulation Y?

Who does Regulation Y apply to?

Regulation Y applies to bank holding companies, financial holding companies, state member banks.

How many obligations does Regulation Y contain?

AuditDSS has decomposed Regulation Y into 1,928 atomic obligations from 114 rules. Each obligation is independently testable and risk-scored.

What are the key requirements of Regulation Y?

The key requirements include: prior approval for acquisitions, capital adequacy requirements, permissible nonbanking activities, source of strength doctrine, risk management expectations.

How can I assess my Regulation Y compliance?

Upload your compliance policy to AuditDSS. The platform maps your document against all 1,928 Regulation Y obligations using deterministic AI scoring — not checklists or LLM summaries. You get a risk-scored gap analysis showing exactly which obligations are covered, partially covered, or missing.

Which jurisdiction enforces Regulation Y?

Regulation Y is enforced in United States by Federal Reserve Board.

When did Regulation Y come into effect?

Regulation Y became effective on January 1, 1971.

What industry does Regulation Y apply to?

Regulation Y is primarily relevant to the Banking & Financial Services industry. AuditDSS covers 105 regulations in this industry sector.

Build a Regulation Y compliance pack

Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for Regulation Y — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.

Policy

High-level commitments and governance framework covering Regulation Y requirements.

Procedures

Step-by-step operational procedures to implement each policy commitment.

Forms & checklists

Ready-to-use forms, registers, and checklists for day-to-day compliance operations.

Multi-regulation

Combine Regulation Y with other regulations into a single unified compliance pack for your business.

Build Regulation Y compliance pack

Already have a policy? Assess it against Regulation Y

Upload your document

Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.

AI maps against 1,928 obligations

Your document is scored against every obligation in Regulation Y. Each claim is mapped to the obligation tree and evaluated for coverage.

Risk-scored gap report

Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.