KEYCORP NEW

The following discussion provides a summary of recent regulatory developments and should be read in conjunction with the disclosure included in our 2023 Form 10-K under the heading “Supervision and Regulation” in Item 1. Business and under the heading “II. Compliance Risk” in Item 1A. Risk Factors as well as the disclosure included in Part II, Item 1A. "Risk Factors" of this report.

Regulatory capital requirements

KeyCorp and KeyBank are subject to regulatory capital requirements that are based largely on the Basel III international capital framework (“Basel III”). The Basel III capital framework and the U.S. implementation of the Basel III capital framework (“Regulatory Capital Rules”) are discussed in more detail in Item 1. Business of our 2023 Form 10-K under the heading “Supervision and Regulation — Regulatory capital requirements.”

Under the Regulatory Capital Rules, standardized approach banking organizations, such as KeyCorp and KeyBank, are required to meet the minimum capital and leverage ratios set forth in Figure 1 below. At September 30, 2024, KeyCorp’s ratios under the fully phased-in Regulatory Capital Rules were as set forth in Figure 1.

Figure 1. Minimum Capital Ratios and KeyCorp Ratios Under the Regulatory Capital Rules

(a)As a standardized approach banking organization, KeyCorp is not subject to the 3% supplementary leverage ratio requirement, which became effective January 1, 2018.

(b)As of October 1, 2024, KeyCorp’s stress capital buffer is 3.1%. Stress capital buffer must consist of Common Equity Tier 1 capital. As a standardized approach banking organization, KeyCorp is not subject to the countercyclical capital buffer of up to 2.5% imposed upon an advanced approaches banking organization under the Regulatory Capital Rules.

(c)September 30, 2024 ratios are estimated and reflect the five-year transition of CECL impacts on regulatory ratios.

Revised prompt corrective action framework

The federal prompt corrective action (“PCA”) framework under the FDIA groups FDIC-insured depository institutions into one of five prompt corrective action capital categories: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.” In addition to implementing the Basel III capital framework in the United States, the Regulatory Capital Rules also revised the PCA capital category threshold ratios applicable to FDIC-insured depository institutions such as KeyBank, with an effective date of January 1, 2015. The revised PCA framework table in Figure 2 identifies the capital category thresholds for a “well capitalized” and an “adequately capitalized” institution under the PCA Framework.

Figure 2. "Well Capitalized" and "Adequately Capitalized" Capital Category Ratios under Revised PCA Framework

(a)A “well capitalized” institution also must not be subject to any written agreement, order, or directive to meet and maintain a specific capital level for any capital measure.

(b)As a “standardized approach” banking organization, KeyBank is not subject to the 3% supplementary leverage ratio requirement, which became effective January 1, 2018. However, KeyCorp will be subject to the supplementary leverage ratio if proposed revisions to the Regulatory Capital Rules discussed below are adopted.

As of September 30, 2024, KeyBank (consolidated) satisfied the risk-based and leverage capital requirements necessary to be considered “well capitalized” for purposes of the PCA framework. However, investors should not regard this determination as a representation of the overall financial condition or prospects of KeyBank because the PCA framework is intended to serve a limited supervisory function. Moreover, it is important to note that the PCA framework does not apply to BHCs, like KeyCorp.

Capital planning and stress testing

KeyCorp is a Category IV banking organization subject to a supervisory stress test every other year. On June 26, 2024, the Federal Reserve announced the results of the supervisory stress test that it conducted of 31 BHCs having more than $100 billion in total consolidated assets (including KeyCorp). The Federal Reserve indicated that all BHCs subject to the stress test maintained capital ratios above the minimum required levels under the severely adverse scenario. The stress test results for individual BHCs (including KeyCorp) were used by the Federal Reserve to determine a BHC’s updated stress capital buffer requirement. The Federal Reserve published the updated stress capital buffer requirements on August 28, 2024. KeyCorp’s updated stress capital buffer is 3.1%. This stress capital buffer became effective on October 1, 2024 and will remain in effect until September 30, 2025, unless KeyCorp later receives an updated stress capital buffer requirement from the Federal Reserve.

See Item 1. Business of our 2023 Form 10-K under the heading “Supervision and Regulation - Regulatory capital requirements - Capital planning and stress testing” for a discussion of other developments concerning capital planning and stress testing requirements.

Deposit insurance and assessments

On October 18, 2022, the FDIC adopted a final rule, applicable to all insured depository institutions (including KeyBank), to increase the initial base deposit insurance assessment rate schedules uniformly by two basis points consistent with the Amended Restoration Plan approved by the FDIC on June 21, 2022. The FDIC indicated that it was taking this action in order to restore the DIF reserve ratio to the required statutory minimum of 1.35% by the statutory deadline of September 30, 2028. Under the final rule, the increase in rates began with the first quarterly assessment period of 2023 and will remain in effect unless and until the reserve ratio meets or exceeds 2% in order to support growth in the DIF in progressing toward the FDIC’s long-term goal of a 2% reserve ratio. On March 10, 2023, and March 12, 2023, Silicon Valley Bank (“SVB”) and Signature Bank (“Signature”) were closed by the state banking authorities in California and New York, respectively, and the FDIC was appointed as receiver of SVB and Signature. All deposits of SVB and Signature were transferred to bridge banks established by the FDIC under the systemic risk exception to the least cost test in the FDIA so that the uninsured deposits as well as the insured deposits of both banks were protected by the FDIC. Under the FDIA, the loss to the DIF arising from the use of the systemic risk exception must be recovered through one or more special assessments.

On November 16, 2023, the FDIC issued a final rule to impose a special assessment on IDIs to recover the loss to the DIF resulting from the use of the systemic risk exception to protect the uninsured depositors of SVB and Signature. Under the final rule, the FDIC would collect a special assessment from IDIs at an annual rate of approximately 13.4 basis points over eight quarterly assessment periods, starting with the first quarterly assessment period of 2024. The assessment base for the proposed special assessment is equal to an IDI’s estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion in estimated uninsured deposits held by the IDI. Because the estimated loss to the DIF from the use of the systemic risk exception will be periodically adjusted and because the total assessments collected may change due to corrective amendments filed by covered IDIs regarding the reported amount of uninsured deposits for the December 31, 2022 reporting period, the FDIC may cease collection of the special assessment early, extend the special assessment collection period, or impose a final shortfall special assessment.

In the final rule, the FDIC indicated that the special assessment is a tax-deductible operating expense for IDIs, and that it assumed that the effect on income of the entire amount of the special assessment would occur in one quarter for the IDIs subject to the assessment. The initial impact of the special assessment to Key was approximately $190 million in pre-tax expense, which was recognized upon issuance of the final rule in the fourth quarter of 2023.

The FDIC has indicated that the loss estimates to be recovered by the special assessment will be periodically adjusted as the FDIC (as receiver of the failed banks) sells assets, satisfies liabilities, and incurs receivership expenses. The FDIC said that it will provide any updates regarding the amount and collection period for the special assessment when it sends the quarterly deposit insurance assessment invoices to the IDIs subject to the special assessment. In the first quarter of 2024, the FDIC announced an increase in its estimate of losses from protecting the uninsured depositors of SVB and Signature and, therefore, increased the amount that it would collect through the special assessment. Because of this updated estimate, Key incurred an incremental pre-tax expense of $29 million in the first quarter of 2024. Based on the quarterly invoices Key received from the FDIC in June 2024 and September 2024, Key recorded an incremental pre-tax expense of $5 million in the second quarter of 2024 and a reversal of pre-tax expense of $6 million in the third quarter of 2024 to true-up initial estimates to invoiced amounts.

The FDIC’s final rule for a special assessment discussed above was not intended to recover the loss to the DIF from the failure of First Republic Bank in May 2023 (initially estimated as a $13 billion loss) or to the DIF from the failures of SVB and Signature that was not related to the protection of uninsured depositors (initially estimated as a $2.7 billion loss). The FDIC indicated that no further adjustments to assessments are contemplated at this time to recover those losses but that it will re-evaluate this issue in the future when it updates projections for the DIF balance and the reserve ratio in connection with its periodic review of the DIF Restoration Plan that was adopted in 2022. The FDIC updates these projections at least semiannually.

See Item 1. Business of our 2023 Form 10-K under the heading “Supervision and Regulation – FDIA, Resolution Authority and Financial Stability - Deposit insurance and assessments” for a discussion of other developments concerning deposit insurance and assessments.

Resolution and recovery plans

On June 20, 2024, the FDIC adopted a final rule to amend and restate its current resolution plan rule in order to clarify and strengthen resolution plan submission requirements and reflect lessons learned since the adoption of the FDIC’s current resolution plan rule in 2012. Among other things, the final rule (i) requires IDIs with more than $100 billion in total assets that are affiliated with a U.S. G-SIB to submit full resolution plans every two years, (ii) requires IDIs with more than $100 billion in total assets that are not affiliated with a U.S. G-SIB (including KeyBank) to submit full resolution plans every three years, (iii) requires IDIs with total assets between $50 billion and $100 billion to submit informational filings every three years, (iv) requires triennial filers to submit more limited supplements in the off years, (v) enhances and clarifies the requirements for the content of resolution submissions, (vi) codifies certain aspects of guidance and feedback provided to filers subject to the current rule, (vii) expands expectations regarding engagement and capabilities testing, and (viii) establishes an enhanced credibility standard for the evaluation of resolution submissions. The final rule was effective on October 1, 2024. KeyBank is required to file its next resolution plan by July 1, 2025, which will be its initial filing under the final rule.

On October 21, 2024, the OCC adopted revisions to its recovery planning guidelines. The OCC’s recovery planning guidelines require large OCC-regulated banks to develop and maintain a recovery plan that identifies triggers and options for responding to a wide range of severe internal and external stress scenarios so that the bank can be restored to financial strength and viability in a timely manner if it were to experience such stress situations. The OCC revised these guidelines to (i) expand the applicability of the guidelines to banks with at least $100 billion in average total consolidated assets, (ii) add a requirement for covered banks to test their recovery plans to ensure that their plans will be effective during periods of severe stress, and (iii) clarify that recovery plans should consider non-financial risks (including operational and strategic risks) as well as financial risks. KeyBank will be subject to the OCC’s revised recovery planning guidelines. KeyBank is required to be in compliance with these guidelines by January 1, 2026 except that KeyBank’s compliance with the testing requirement is delayed until January 1, 2027.

See Item 1. Business of our 2023 Form 10-K under the heading “Supervision and Regulation – FDIA, Resolution Authority and Financial Stability – Resolution plans” for a discussion of other developments concerning resolution and recovery plans.

Personal Financial Data Rights

On October 22, 2024, the CFPB issued a final rule to implement Section 1033 of the Dodd-Frank Act, which gives individuals the right to obtain data regarding consumer financial products and services they have obtained. The final rule requires financial institutions (including KeyBank) and other financial service providers (collectively “data providers”) to make available to consumers and authorized third parties, upon request, data in the data provider’s possession or control concerning covered consumer financial products or services (including credit cards, deposit accounts, and other accounts that facilitate payments) in an electronic form usable by the consumer and authorized third parties. The data that must be provided includes account balance information, at least 24 months of transaction history, pricing information, information on upcoming third-party bill payments, and account verification information. The data providers are required to create and maintain consumer and developer interfaces that will be able to transfer the data. A data provider will not be allowed to charge any fees or other charges for making the covered data available or for maintaining the required interfaces. The CFPB indicated that it adopted this rule in order to foster competition and consumer choice and said that this rule is a step towards bringing about an “open banking” system in the United States. Compliance with the rule will be phased in over several years with KeyBank required to be compliance by April 1, 2027. Following the issuance of this rule, two trade associations and a national bank headquartered in Kentucky filed a lawsuit challenging the rule in the United States District Court for the Eastern District of Kentucky. In this lawsuit, the plaintiffs alleged that the CFPB exceeded its statutory authority in adopting the rule. Key is monitoring developments in this case.