Blog

The Future of Compliance

Published: December 9, 2025

Sign Up for Our Newsletter

During RiskExec Connect 2025, RiskExec’s annual half-day virtual event, senior leaders across compliance, risk, and banking gathered to make sense of a fast-changing regulatory environment. Enforcement priorities are shifting, AI utilization is growing within financial services institutions, and state regulators are stepping forward to fill new roles.

The virtual event featured some of the most trusted voices in compliance. Erik Pieczkowski, CEO of RiskExec, opened the event with a view from the industry’s front line. Andy Sandler, Chairman of Temerity Capital Partners, offered his perspective on regulatory cycles and leadership. Other sessions included insights from Dr. Anurag Agarwal of RiskExec and Dr. Marsha Courchane of Charles River Associates on fair lending and redlining; Rob and Robbie Chrisman on mortgage trends; and Arielle Sutherland, Dan Matthews, and Shannon Thomason on compliance innovation and next-gen strategies for banks.

Together, their perspectives tell a cohesive story about where compliance is heading and what leaders can do to navigate 2026 with clarity and confidence.

1. Navigating the Regulatory Pendulum

In his session, Andy Sandler, Chairman of Temerity Capital Partners, described the past decade of oversight as a pendulum that “has swung further and faster than ever before.” His advice to compliance professionals was straightforward: “Tack to the middle, understand your legal obligations, and adhere to them, because enforcement will swing again.”

The idea of “tacking to the middle”—staying grounded in statute rather than politics—was reiterated across every discussion throughout the day.  Organizations that document decisions, maintain compliance staffing levels despite the current political environment, and retain institutional memory are best positioned to manage regulatory cycles without overreacting or underpreparing.

Explore this theme further: Navigating the Regulatory Pendulum →

2. Adapting to Expanding State Oversight

Sandler also warned that “a tsunami is coming in terms of states getting involved,” a prediction that echoed across later sessions. As Rob Chrisman noted in the mortgage discussion, “Doing away with the CFPB is like kicking over an ant hill. Suddenly, there are millions of ants swarming everywhere.”

States such as California, New York, and Illinois are already expanding their enforcement capacity, often staffed by former federal regulators. The result is a patchwork of overlapping supervision, which can strain smaller institutions and complicate reporting for national lenders. Instead of facing one federal set of requirements, institutions now must monitor and adapt to distinct state-level requirements.

RiskExec Connect speakers agreed that this new dynamic requires coordination, not fragmentation. Compliance leaders are responding by:

  • Mapping state-level requirements and linking them to existing federal frameworks.
  • Maintaining uniform definitions of risk and fairness across products.
  • Engaging proactively with state examiners rather than waiting for inquiries.

As Sandler reminded attendees, “You cannot build fifty compliance programs. You build one strong foundation and show how it meets every jurisdiction’s standard.”

Dive deeper into state supervision: Doing the Right Thing in Fair Lending →

3. Balancing Technology, Transparency, and Trust

Automation and AI are reshaping compliance operations, but technology alone is not a solution. Speakers across the event emphasized that the real test of innovation lies in how well it enhances judgment, accountability, and clarity.

Sarah Brons of RiskExec explained that artificial intelligence “cannot replace compliance judgment; it has to extend it by making decisions traceable and explainable.” Her point reflects a broader shift in focus: automation should not simply speed up reviews, but also strengthen the reliability of outcomes.

Dan Matthews of Synovus added that efficiency is only valuable when supported by sound governance. “Time efficiencies are one thing,” he said, “but having good, sound practices in the background from a statistical standpoint is maybe even more important.”

Technology’s greatest contribution is not speed, but transparency. Systems that document every change, preserve audit trails, and make decision logic visible help institutions build trust with regulators, investors, and internal stakeholders.

As compliance data becomes more complex, leaders are learning that explainability is the foundation of credibility. The ability to show how and why a result was reached is now as important as the result itself.

See how automation is transforming analytics: Governing AI in Lending →

4. Leading Through Uncertainty

RiskExec Connect 2025 highlighted that leadership, not policy or technology, determines how effectively compliance programs adapt.

Shannon Thomason, Senior Vice President and Deputy Chief Compliance Officer at Central Bank, shared how her team keeps improvement continuous. “Anytime you have a pain point, you need to surface it,” she said. “We look at things at least annually to see if there is something we can address to further enhance efficiency.”

Her view aligns with Dan Matthews, who spoke about how Synovus Bank builds a culture of creativity and curiosity. “We are constantly finding new ways to use the RiskExec system,” he said. “There is a lot of need for creativity, and we are integrating reports into our fair lending risk assessment to drive our control adequacy scores.”

These examples illustrate the four qualities that RiskExec Connect 2025 identified as essential for modern compliance leadership:

  1. Clarity in how expectations are communicated.
  2. Consistency in upholding standards through every enforcement cycle.
  3. Collaboration between compliance, risk, and operations.
  4. Curiosity to question assumptions and seek better ways to work.

Explore leadership in action: Mortgage Compliance and Market Shifts →

5. Preparing for 2026 and Beyond

Across all four sessions of RiskExec Connect 2025, speakers agreed that lasting readiness comes from strong governance, reliable data, and a culture of continuous improvement. Regulations will keep evolving, but disciplined compliance programs can adapt without losing momentum.

Rob Chrisman encouraged teams to stay consistent even during quieter enforcement cycles, noting that the goal is not to anticipate every change but to be ready for it. Dan Matthews added that efficiency matters only when supported by “good, sound practices in the background from a statistical standpoint,” reminding leaders that speed without accuracy can create new risks.

For Shannon Thomason, readiness is rooted in curiosity. “Anytime you have a pain point, you need to surface it,” she said. “We look at things at least annually to see if there is something we can address to further enhance efficiency.”

These perspectives share a common theme: preparation is not about prediction. Strong preparation is built through review, documentation, and collaboration across teams.

Priorities for the Year Ahead

  1. Reinforce governance. Ensure leadership visibility into compliance risks and state-level developments.
  2. Audit data integrity. Test for reproducibility and maintain transparent audit trails.
  3. Balance technology and human oversight. Use automation to enhance, not replace, professional judgment.
  4. Document decisions clearly. Record not only what was done, but why it was done.

Institutions that connect analytics to daily decision-making will gain agility as new rules and technologies emerge. Modern compliance tools and workflows, when used thoughtfully, make it easier to adapt without rebuilding from scratch.

Read how banks are using data to improve performance: Compliance Analytics that Drive Growth →

Conclusion: From Reactive Rule Following to Proactive Resilience

Compliance is evolving from a reactive obligation to a driver of trust, stability and institutional growth. As regulatory oversight shifts and technology accelerates, the institutions that thrive will be those that build strong governance, document decisions clearly, and collaborate across departmental lines.

The most effective compliance leaders are not sitting around waiting for the next rule change. They are refining processes, strengthening data transparency, and embedding accountability into everyday decisions.

Resilience in 2026 will come from preparation, not prediction. Institutions that stay disciplined, transparent, and adaptive will not only meet new expectations but shape the standards that define the future of compliance.

Recommended Resources

linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram