NCUA’s Record Retention Deregulation Rule
One of the most common questions we receive through our compliance inbox concerns record retention. The NCUA recently issued a Final Rule on record retention that grants credit unions more flexibility but not more guidance. The NCUA’s record retention regulation resides in Part 749 and requires all federally insured credit unions to have a written vital records preservation program…but it does not give a lot of information about what that program should look like. Part 749.2 states:
“The board of directors of a credit union is responsible for establishing a vital records preservation program within 6 months after its insurance certificate is issued. The program must be in writing and contain procedures for maintaining duplicate vital records at a vital records center. The procedures must include: designated staff responsible for vital records preservation, a schedule for the storage and destruction of records, and a records preservation log detailing for each record stored, its name, storage location, storage date, and name of the person sending the record for storage. It is recommended credit unions include in these procedures a method for using duplicate records to restore vital member services in the event of catastrophic act. Credit unions which have some or all of their records maintained by an off-site data processor are considered to be in compliance for the storage of those records if the service agreement specifies the data processor safeguards against the simultaneous destruction of production and back-up information.” (Emphasis added.)
The NCUA requires the factors listed in the emphasized portion but much of the rest of the rule is guidance.
On June 16, 2026, the National Credit Union Administration published, in the Federal
Register, a Final Rule to improve and update the vital records preservation program regulation and accompanying guidelines. The Rule is part of the agency’s deregulation agenda and takes steps to separate guidance from regulation. You can read our Final Rule Summary here.
First, a little background
The NCUA’s first vital records preservation program rule was issued in 1972 to ensure that vital records could be reconstructed in the event of a catastrophe. Part 749 was updated over the years, with the last update occurring in 2007. Appendix A, originally introduced in 2001, had never been updated.
The Board issued an Advanced Notice of Proposed Rulemaking (ANPR) on April 24, 2024 to explore potential changes to Part 749. On March 11, 2026, the Board issued a Proposed Rule which recommended removing Appendices A and B from Part 749 and making other changes to streamline the regulation. The Final Rule adopts the Proposed Rule largely as offered, with a minor change regarding the establishment of a vital record log.
What does the Final Rule change?
Rather than adding more requirements to the guidance, the Final Rule removes the portions of the regulation it considers guidance and streamlines some of its definitions.
1. Appendices A and B, which address guidelines for Record Retention and Catastrophic Act Preparedness, respectively, have been removed to clarify their status as guidance.
The NCUA stated in the Final Rule, “Appendix A was added to part 749 as “suggested guidelines” based on the frequency of requests for assistance from credit unions. However, many commenters to the ANPR stated that, in practice, Appendix A is followed as if it were a requirement; thus, the Board concluded that Appendix A has become an obstacle to sound record retention practices and has resulted in credit unions retaining unused and obsolete records. The Board proposed removing Appendix B because, upon reconsideration, the benefit of having the guidance in proximity to the regulation does not outweigh the potential for misinterpretation.”
2. The Final Rule removes language from 749.2 that details the requirements of the vital records log. The original language above states that the log should include a record’s name, storage location, storage date, and name of the person sending the record for storage. The new language states only that the log may be in electronic or any other format.
3. The Final Rule removes the definition of a vital records center in this section. It adds language stating that if a credit union contracts with a third-party vendor to maintain its records, it is responsible for maintaining effective oversight and ensuring the records meet the requirements of the section. This may be especially helpful for some smaller credit unions.
When does the final rule kick in?
The Final Rule is effective on July 16, 2026.
Comments or questions? Please reach out to us at [email protected] !