Bank Holding Company Acquisitions: Regulatory Approvals and Timeline

The acquisition of a bank or bank holding company sits at the intersection of corporate M&A law and federal banking regulation. Unlike acquisitions of industrial or technology companies, where Hart-Scott-Rodino clearance and shareholder approval are the primary regulatory hurdles, bank acquisitions require separate approval from the Federal Reserve Board (and in many cases also from the OCC or FDIC), coordination with state banking departments, a public notice and comment period during which community organizations may file formal protests, an antitrust analysis conducted both by the banking agencies and the Department of Justice, and satisfaction of deposit concentration limits that do not exist in other M&A contexts.

This sub-article is part of the Financial Services M&A: Legal Guide. It covers the federal banking regulatory framework governing bank acquisitions; the Section 3 approval process under the Bank Holding Company Act; Change in Bank Control Act filings and when they apply; OCC and FDIC approval requirements for transactions involving national banks and state non-member banks; state banking department coordination; the components of a complete regulatory application; CRA evaluation and protest risk; antitrust analysis under the DOJ's 2024 guidance; deposit concentration limits at the federal and state levels; interstate merger considerations under the Riegle-Neal Act; post-closing integration requirements including core system conversion and regulatory examination scheduling; and the practical timeline from signing to closing.

Acquisition Stars advises acquirers and targets in bank and bank holding company transactions. Nothing in this article constitutes legal advice for any specific transaction.

Federal Banking Regulatory Framework Overview

The regulatory framework governing bank acquisitions is administered by four primary federal agencies: the Federal Reserve Board, the Office of the Comptroller of the Currency (OCC), the Federal Deposit Insurance Corporation (FDIC), and, for transactions with competitive implications, the Department of Justice. Each agency exercises authority derived from distinct statutory grants, and the allocation of jurisdiction depends on the charter type and Federal Reserve membership status of the institutions involved.

The Federal Reserve Board is the consolidated supervisor of bank holding companies under the Bank Holding Company Act of 1956 (BHC Act). When a bank holding company seeks to acquire another bank holding company or bank, the Federal Reserve holds the primary approval authority regardless of whether the target or its bank subsidiaries are national banks or state-chartered institutions. The Federal Reserve's Section 3 review is therefore the central regulatory proceeding in any BHC acquisition.

The OCC charters and supervises national banks (institutions with "National" or "N.A." in their name). When a bank merger involves a national bank as either the acquirer or surviving institution, the OCC must independently approve the merger under the Bank Merger Act, in addition to any Federal Reserve review of the holding company transaction. Similarly, the FDIC supervises state-chartered banks that are not members of the Federal Reserve System (state non-member banks), and the FDIC holds Bank Merger Act approval authority for mergers in which the surviving institution is a state non-member bank. The Federal Reserve holds Bank Merger Act authority for mergers involving state member banks as the surviving institution.

State banking departments regulate state-chartered institutions within their jurisdiction and must approve mergers, acquisitions, or changes of control affecting state-chartered banks. The scope of state approval requirements varies by state: some states have comprehensive approval processes that parallel the federal review, while others require only notice or a simplified consent. Transactions involving banks chartered in multiple states require engagement with multiple state banking departments, sometimes on overlapping timelines.

Bank Holding Company Act Section 3 Approval: Federal Reserve Review

Section 3 of the BHC Act requires any company to obtain Federal Reserve approval before acquiring direct or indirect control of a bank or bank holding company. The Federal Reserve's review is governed by a statutory framework that directs the agency to consider four primary factors: the financial and managerial resources of both the acquiring and target companies and their subsidiaries; the future prospects of those entities; the convenience and needs of the communities to be served; and the competitive effects of the transaction.

The Section 3 application is submitted to the Federal Reserve Bank of the acquirer's home district, which conducts the initial staff review before forwarding the application to the Board in Washington for formal action. Most applications are approved by the relevant Federal Reserve Bank under delegated authority from the Board, but significant transactions, those raising competitive concerns, or those receiving community protests may be referred to the full Board for decision.

The financial resources review examines the capital adequacy of both the acquirer and the target on a standalone and pro-forma combined basis. The Federal Reserve applies its capital adequacy standards, including the Basel III capital framework requirements applicable to bank holding companies, to assess whether the combined organization will meet minimum capital requirements and whether the acquisition will strain the acquirer's capital position. Acquirers that are already at or near minimum capital thresholds may need to raise additional capital before the application is filed.

The managerial resources review examines the qualifications, competence, and integrity of the acquirer's management team, including any prior regulatory enforcement actions, supervisory ratings, or adverse findings from prior examination cycles. The Federal Reserve has denied Section 3 applications where the acquiring organization had outstanding supervisory concerns or where key individuals had histories of regulatory problems. Acquirers should ensure that any open supervisory matters are addressed or substantially remediated before the application is filed.

The convenience and needs analysis examines the extent to which the transaction would benefit the communities served by the target institution, including through expanded product offerings, improved access to capital, and community development activities. The Federal Reserve gives significant weight to CRA commitments made by the applicant and to the CRA performance records of both institutions, discussed in greater detail below.

Change in Bank Control Act Filings

The Change in Bank Control Act (CBCA), enacted in 1978, requires any person or group of persons acting in concert to provide prior written notice to the appropriate federal banking agency before acquiring control of an insured depository institution or bank holding company. Control under the CBCA is a factual determination that depends on the ownership percentage, the ability to elect board members, and other indicia of influence over management and policies.

Federal banking agencies maintain rebuttable presumptions of control at specified ownership thresholds. Ownership of 25% or more of any class of voting securities of a bank or bank holding company creates a presumption of control requiring a CBCA filing. Ownership between 10% and 25% of voting securities may also trigger a control presumption if accompanied by other factors such as the ability to elect one or more directors, the existence of a management or service agreement between the acquirer and the target, or the acquirer's status as the largest single voting shareholder.

The CBCA notice must be filed at least 60 days before the proposed acquisition of control, and the reviewing agency has 60 days to disapprove the acquisition (with a possible 30-day extension). The notice must include information about the acquiring person's financial condition, business experience, regulatory history, and the source and availability of funds to be used in the acquisition. The agency publishes notice of the proposed acquisition and accepts public comments during a 20-day comment period.

In many bank acquisitions, both a CBCA filing and a Section 3 application are required: the Section 3 application addresses the holding company level transaction, while the CBCA filing addresses the resulting direct or indirect control of the insured depository institution. The two proceedings are coordinated but are legally distinct, and the substantive standards applicable to each differ in some respects. Counsel experienced in banking regulation is necessary to determine which filings are required and to sequence them properly.

OCC Approval for National Bank Mergers

When the proposed transaction involves a national bank as a party to the merger (whether as the acquiring, surviving, or target institution), the OCC must approve the bank-level merger under the Bank Merger Act (12 U.S.C. 1828(c)). The OCC's Bank Merger Act review is concurrent with, not sequential to, the Federal Reserve's Section 3 review of the holding company transaction, and the two approvals must both be obtained before the transaction can close.

The OCC's Bank Merger Act application requires submission of detailed information about the financial condition of the merging institutions, the proposed management structure of the resulting bank, the competitive effects of the merger in local markets, and the CRA performance records of both institutions. The OCC publishes a notice of the proposed merger in the Federal Register and in local newspapers in the communities served by both banks, and accepts public comments for 30 days. The OCC may extend the comment period if it receives a request from a community organization demonstrating good cause.

The OCC evaluates the proposed merger against the Bank Merger Act's statutory factors, which are substantively similar to the Section 3 factors: financial and managerial resources, future prospects, competitive effects, and the convenience and needs of the communities served. The OCC also considers the CRA performance evaluations of both institutions and may condition approval on the acquirer making specific CRA commitments.

The OCC has 30 days after the close of the comment period to act on a Bank Merger Act application, but in practice the agency takes longer in complex or contested cases. For transactions in which the OCC is the primary review agency (because neither institution is a state member bank), the OCC coordinates its competitive analysis with the DOJ, submitting its competitive analysis to the DOJ for review before approving the merger. The DOJ has 30 days after receipt of the OCC's analysis to request an injunction if it believes the merger violates the antitrust laws.

FDIC Approval for State Non-Member Bank Mergers

When the surviving institution in a bank merger is a state non-member bank (a state-chartered institution that is not a member of the Federal Reserve System), the FDIC holds Bank Merger Act approval authority. The FDIC's review process parallels the OCC's in most respects but is administered through the FDIC's regional offices before escalation to the Washington headquarters for formal action.

The FDIC's Bank Merger Act application requires the same categories of information as an OCC application, including financial data for both institutions, a description of the competitive markets affected, CRA performance evaluations, and a description of the post-merger management structure and integration plan. The FDIC publishes notice in the Federal Register and local newspapers, accepts public comments for 30 days, and may extend the comment period in response to a community group's request.

One practical consideration in FDIC-supervised mergers is the FDIC's approach to institution-affiliated parties with prior enforcement history. The FDIC maintains a database of individuals subject to removal and prohibition orders, civil money penalty assessments, and other enforcement actions, and the agency will review whether any proposed director or officer of the resulting institution has an adverse regulatory history. Acquirers who propose to retain target management in the combined institution should conduct background reviews against the FDIC's enforcement records before the application is filed.

Like the OCC, the FDIC submits its competitive analysis to the DOJ before approving a merger subject to antitrust scrutiny. The FDIC also coordinates its review with the relevant state banking department, which must separately approve the merger of state-chartered institutions under state law.

State Banking Department Coordination

State banking departments hold separate approval authority over mergers, acquisitions, and changes of control affecting state-chartered banks within their jurisdiction. For acquisitions of bank holding companies with state-chartered bank subsidiaries, the state banking department of each state in which a state-chartered subsidiary is located must generally approve the acquisition of control of that subsidiary, in addition to the Federal Reserve's Section 3 approval of the holding company transaction.

The procedural requirements for state approval vary significantly. Some states, including New York, California, Texas, and Illinois, have comprehensive approval processes with defined application requirements, public notice periods, and statutory review timelines. Other states have simpler procedures that require notice to the state banking department within a specified period and may not involve a formal public comment process. Acquirers conducting multi-state bank acquisitions must analyze the approval requirements of each relevant state early in the transaction planning process.

State banking departments often coordinate with federal regulators to exchange examination reports, supervisory ratings, and other confidential supervisory information relevant to the acquisition. Acquirers may need to consent to the release of their own supervisory information to multiple state agencies as part of the approval process. Some states impose a separate CRA-equivalent evaluation under state law, particularly in states with their own community reinvestment statutes, which can add an additional layer of review for transactions in those jurisdictions.

The timing of state approvals relative to federal approvals is a practical coordination challenge. Federal approval orders typically contain a condition that the acquirer obtain all required state approvals before consummation. In some states, the approval process is faster than the federal timeline; in others, state review may run concurrently with federal review but not conclude until after the federal approval is issued, creating a gap period during which the parties must wait before closing.

Application Components: Capital, Management, Competitive Analysis, and Community Benefit Plan

A complete Section 3 application to the Federal Reserve must address each of the statutory review factors with documentary support. Applications that are incomplete at submission are returned to the applicant, resetting the review clock, which can add weeks to the timeline. Experienced banking counsel will conduct a pre-application meeting with Federal Reserve staff to identify any issues that should be addressed before the formal application is filed.

The capital analysis section of the application must demonstrate that both the acquirer and the target meet applicable minimum capital requirements on a standalone basis, and that the combined entity will meet those requirements on a pro-forma basis after giving effect to the acquisition, including any goodwill, core deposit intangibles, and other adjustments required under applicable accounting standards. The Federal Reserve may require stress test projections showing the combined entity's capital adequacy under adverse economic scenarios, particularly for larger transactions.

The management section must describe the qualifications, experience, and integrity of the individuals who will manage the combined institution, including their prior regulatory history. The Federal Reserve reviews FDIC enforcement records, SEC disciplinary records for individuals with securities licensing history, and prior examination reports. Biographical summaries (FR Y-6 and FR Y-7 information) must be submitted for each proposed director and senior executive officer of the post-merger holding company.

The competitive analysis must identify all relevant local banking markets in which both the acquirer and target have deposit-taking operations, calculate the HHI for each such market on a pre- and post-merger basis using FDIC deposit market share data, and identify any markets where the post-merger HHI exceeds the applicable thresholds or the increase exceeds 200 points. For markets exceeding the competitive thresholds, the application must either argue that the market is not properly defined as a separate banking market, or propose specific divestitures that would resolve the competitive concern.

The community benefit plan, sometimes called a community reinvestment commitment, describes the acquirer's plans for community lending, investment, and services in the markets served by the combined institution. While not statutorily required, community benefit plans have become standard practice in larger transactions because they address the convenience and needs factor and respond to the types of concerns that community groups raise in formal protests. A meaningful community benefit plan, backed by specific dollar commitments to CRA-eligible lending and investment activities, can help prevent or resolve protests that would otherwise extend the review timeline.

CRA Performance Evaluation and Protest Risk

The Community Reinvestment Act (CRA) requires federal banking agencies to consider the CRA performance record of each insured depository institution when evaluating an application for a merger, acquisition, or other transaction that requires regulatory approval. The CRA performance evaluation (PE) assigned to both the acquirer and target institutions is a central element of the Federal Reserve's Section 3 review and is given substantial weight in the agency's convenience and needs analysis.

CRA performance is evaluated on a four-point scale: Outstanding, Satisfactory, Needs to Improve, and Substantial Noncompliance. An Outstanding or Satisfactory rating at both institutions supports approval without requiring specific CRA commitments. A Needs to Improve rating at either institution does not automatically preclude approval but creates a presumption that the agency will require the applicant to demonstrate a concrete plan for improving CRA performance before or after the merger closes. A Substantial Noncompliance rating effectively creates a near-bar to approval until the deficiencies are remediated.

The public comment period that accompanies every bank acquisition creates an opportunity for community organizations, advocacy groups, and individual citizens to file written comments supporting or opposing the application. Comments opposing the application on CRA grounds are taken seriously by the Federal Reserve and can trigger a more detailed inquiry into the applicant's lending record in specific communities, its branch network, its small business lending volumes, and its community development activities. Formal protests, which request a public meeting or hearing, can extend the review timeline significantly.

Acquirers that anticipate CRA-based protests should engage proactively with community stakeholders before the application is filed, ideally before the transaction is publicly announced. Reaching a negotiated community benefit agreement with local organizations before the comment period opens can prevent protests from being filed or resolve them early in the review process. Counsel experienced in CRA compliance can help assess the likelihood of protest based on the target institution's CRA history and the demographics of its service area.

Antitrust Analysis: DOJ Bank Merger Competitive Review and 2024 Guidance

The antitrust analysis of bank mergers is conducted concurrently by the federal banking agencies and the Department of Justice. The banking agencies apply the HHI methodology to local deposit markets to identify transactions that may substantially lessen competition, and they submit their competitive analysis to the DOJ before approving any merger that raises competitive concerns. The DOJ has independent authority to challenge bank mergers under the Sherman Act and the Clayton Act, and it maintains a Bank Merger Task Force that reviews the competitive analyses submitted by the banking agencies.

The traditional bank merger competitive analysis defines the relevant market as local banking markets (typically metropolitan statistical areas or rural county groupings) and measures market concentration using FDIC-reported deposit data. The pre-merger and post-merger HHI for each local market is calculated using each institution's share of total deposits in that market, and markets where the post-merger HHI exceeds 1,800 and the increase exceeds 200 points have historically been flagged for divestiture.

The DOJ's 2024 bank merger policy statement signaled a shift away from exclusive reliance on local deposit market HHI calculations. The updated policy directs the DOJ to analyze competitive effects across a broader range of product markets, including commercial and small business lending, consumer credit products, and digital banking services, and to consider the competitive significance of non-bank financial institutions that compete with banks in those product categories. The practical implication is that transactions with relatively modest local deposit overlap may face scrutiny based on lending market concentration that the traditional HHI screen would not have flagged.

When branch divestitures are required to resolve competitive concerns, the acquirer must identify branch locations to be divested, negotiate a purchase and assumption agreement with an approved buyer, and obtain regulatory approval for the divestiture before or concurrent with the approval of the primary transaction. Divestitures add complexity and time to the approval process and require the identification of a suitable buyer who can obtain their own regulatory approval for the branch acquisition.

Deposit Concentration Limits and Interstate Merger Considerations Under Riegle-Neal

Federal law imposes a nationwide deposit concentration limit prohibiting any bank holding company from acquiring another insured depository institution if the resulting organization would control more than 10% of the total amount of deposits held by insured depository institutions nationwide (12 U.S.C. 1842(d)(2)). This cap is calculated using FDIC deposit data and applies regardless of the geographic concentration of the combined institution's deposits. For the largest U.S. bank holding companies, the 10% nationwide cap is a real constraint on further acquisition activity.

Many states impose separate deposit concentration limits that apply to deposits held by insured depository institutions within the state. These state caps vary by jurisdiction: some states set the limit at 30% of in-state deposits, while others use different thresholds or exempt certain categories of institutions. For in-state bank acquisitions, the applicable state deposit concentration limit may be more binding than the federal 10% nationwide cap, particularly in states with a concentrated banking market where one or two institutions already hold a large share of state deposits.

The Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 removed the previous restrictions on interstate bank holding company acquisitions, permitting bank holding companies to acquire banks in any state without geographic restriction, subject to federal approval requirements and any applicable state concentration limits. Riegle-Neal also authorized interstate mergers between insured banks, meaning that an out-of-state bank holding company can merge its newly acquired in-state subsidiary into its existing bank subsidiary rather than operating it as a separate institution.

States retained the right under Riegle-Neal to impose an age requirement on target banks, requiring that the target institution have been in continuous operation for a minimum period (up to five years) before it could be acquired by an out-of-state bank holding company. States also retained the right to opt out of certain interstate branching provisions. These state-specific limitations must be analyzed in any cross-border bank acquisition to determine whether state law imposes any timing or structural constraints beyond the federal framework.

Post-Closing Integration: Core System Conversion, Call Reports, and Regulatory Exam Cycle

The closing of a bank acquisition triggers a series of post-merger integration obligations that must be managed carefully to avoid creating regulatory or operational risk. The most significant is the core system conversion: migrating the target bank's deposit accounts, loan records, general ledger, and customer data from the target's core banking platform to the acquirer's system. Core conversions are operationally complex, require extensive testing and parallel processing periods, and carry risk of data loss, customer service disruption, or regulatory reporting errors if not managed carefully.

Core system conversions must be approved by the primary federal regulator before execution, as they represent a material change to the institution's operations and technology infrastructure. The OCC and Federal Reserve each have supervisory expectations for bank technology change management, including pre-conversion testing requirements, contingency plans for conversion failures, and customer notification protocols. Regulators may conduct targeted technology examinations before or immediately after a core conversion to assess the institution's preparedness.

Post-merger call report filings require careful attention. After the merger closes, the surviving institution must file its first post-merger Call Report (FFIEC 031 or 041/051 depending on institution size) on the schedule applicable to the surviving charter, reflecting the combined institution's financial position as of the relevant quarter-end date. Errors in early post-merger call reports are a common finding in first-cycle examinations and can create supervisory concerns about the institution's financial reporting systems.

The post-merger regulatory examination cycle is typically accelerated. The primary federal regulator and the relevant state banking department will schedule a safety and soundness examination of the combined institution within 12 to 18 months of the closing date to assess the success of the integration. Examiners will review the core system conversion, the integration of credit risk management systems, capital adequacy under the combined balance sheet, and whether the acquirer has fulfilled the regulatory conditions imposed in the approval order. CRA examinations are also typically scheduled within 24 months of closing.

Timeline: Public Notice, Comment Period, and 90- to 180-Day Approval Window

The regulatory timeline for a bank holding company acquisition begins with the preparation and filing of the Section 3 application with the relevant Federal Reserve Bank, concurrent with the Bank Merger Act application to the OCC or FDIC (if applicable) and state banking department filings. The Federal Reserve will conduct a completeness review of the application and, if it is accepted as complete, will publish a public notice announcing the application and the start of the comment period.

The public comment period runs 30 days from the date of publication of the Federal Reserve's notice. During this period, any person may submit written comments supporting or opposing the application. If a community organization or other interested party requests a public meeting, the Federal Reserve may extend the comment period and schedule a community meeting, which extends the overall timeline. After the comment period closes, the Federal Reserve staff completes its analysis and prepares a memorandum for the Board or the delegated Reserve Bank approving authority.

The Federal Reserve's statutory authority allows it to act on a Section 3 application within 30 days after the close of the comment period (91 days for a notice involving foreign bank subsidiaries), but the agency routinely takes longer in practice, particularly when it has requested additional information from the applicant or received community protests requiring resolution. The DOJ's antitrust review adds a further 30-day period after the Federal Reserve issues its approval order during which the DOJ may seek to enjoin the transaction; the parties must wait for that 30-day period to expire before consummating the acquisition unless the DOJ issues an early termination.

From application filing to the expiration of the DOJ waiting period, the typical timeline for a straightforward bank holding company acquisition with no competitive concerns and no CRA protests runs approximately 90 to 130 days. Transactions with competitive concerns requiring divestiture negotiation, CRA protests requiring resolution, or requests for additional information from the Federal Reserve routinely run 150 to 210 days or longer. For planning purposes, acquirers should build a 6-month runway from the application filing date to the anticipated closing date, with the understanding that complex or contested transactions may require significantly more time.

Frequently Asked Questions