By Alexis Furgal

A regulatory sandbox is a “controlled environment” in which companies reward innovative contributions regulatory freedom with.[1] Essentially, companies enjoy (temporarily) fewer regulatory hurdles to overcome during the sprint to bring novel technologies and services to market.[2] On one hand, regulatory sandboxes foster innovation and promote advancement because companies are free to “trial run” the efficacy of–and consumer response to–their product in the marketplace.[3] On the other hand, regulatory sandboxes allow regulators to closely observe company activity and consumer response, in order to more closely tailor new regulations to the nuances revealed through the simulated market. [4]

In North Carolina, the banking and insurance industries are “major economic driver[s].”[5] Due to its technological and financial prestige, growing job opportunities, and affordability, North Carolina is uniquely poised to become a national leader in the financial technology and insurance industries. [6] As such, North Carolina joined the ranks as one of only a few states driving innovation by implementing a regulatory sandbox.[7] The first iteration of its sandbox—introduced in 2019—failed because it prioritized “innovation at the expense of consumer protection.”[8]  However, two years later, the idea was revisited by the N.C. General Assembly, with increased consumer protections built in, and this time proved fruitful.[9] In October 2021, the North Carolina Regulatory Sandbox Act of 2021 (the “Act”) was signed into effect.[10] At the time, North Carolina was one of only ten states that took such a bold approach. [11]

The Act created a framework for pioneering companies to make a case for their product or service and specify which regulations would prevent their ideas from becoming a reality. [12] The applicable State agency is then authorized, under the Act, to temporarily waive the requested requirements as they see fit, to allow the applying company a greater chance of success. [13] The Act also created the Innovation Council—a panel of 11 statutorily-designated members of various, but relevant, backgrounds—to both manage day-to-day operations and promulgate permanent sandbox rules.[14] In order to participate in the sandbox, companies must submit an application to the Council, detailing the ins and outs of their product, business model, consumer protections, risk-management strategies, and more.[15] If accepted, the company is entitled to 24 months sans (approved) regulations to offer their product to the public and strengthen their company’s continued viability before being re-subject to all applicable regulations. [16]

Unlike some of the other states that implemented comparable regulatory sandboxes, North Carolina’s sandbox does not have a statutory end date. [17]  For example, Hawaii’s regulatory sandbox recently—and right on schedule—came to an end,[18] and Utah is now in second phase of its own sandbox. [19] Although the end-date and ultimate impact of North Carolina’s regulatory sandbox is largely still inconclusive, one thing is clear: the Innovation Council remains diligently committed to furthering the goals of the Act.

Pursuant to the authority vested in it by N.C.G.S. 169, the Innovation Council has released notice of proposed permanent rules (Council Rules).[20] These Council Rules are scheduled to take effect in March 2025.[21]

While the Act left much of the application, review, and waiver process up to the Innovation Council’s discretion,[22] the Council Rules clearly delineate the sandbox application process, including voting mechanisms, mandatory opportunity for public comment, and optional company presentation of products and service to the Innovation Council for review.[23]

Interestingly, the Council Rules also incorporate an additional dimension to the application process: an “expression of interest” opportunity for companies to receive a preliminary review of their proposed product and waived requirements.[24]

Under the Act, company applications must be submitted to the Innovation Council, which then selects and refers applicants to the relevant State agencies.[25] If accepted into the program, the company is eligible to be granted a waiver of applicable statutory or regulatory requirements, provided such waiver is not broader than necessary, as determined by the applicable State agency.[26] However, per the Council Rules, it appears the Council may have increased its discretion in the review process relative to the State agencies. Under section .0106 of the Council Rules, State agencies will be provided with an opportunity to review company applications and provide recommendations, but, if the review is not provided within 45 days, the Council, “in its discretion, may deem the [] application acceptable.”[27]

Moving forward, both the content of the proposed Council Rules and responses to calls for the expansion of North Carolina’s regulatory sandbox to other industries[28] will be critical to watch.


[1] Matthew C. Christoph, Note: Criminal Justice Technology and the Regulatory Sandbox: Toward Balancing Justice, Accountability, and Innovation, 84 U. Pitt. L. Rev. 971, 975 (2023).

[2] Id.

[3] Kyle A. Conway, Comment: Blockchain Technology: Limited Liability Companies and the Need for North Carolina Legislation, 45 Campbell L. Rev. 127, 139 (2022).

[4] Id

[5] N.C. Gen. Stat. § 169-2 (2021).

[6] Kristen Smithberg, Recent College Grads Could Fare Well in These Four Markets, Globest.com (Jul. 31, 2024), https://www.globest.com/2024/07/31/recent-college-grads-could-fare-well-in-these-four-markets/.

[7] Conway, supra note 3, at 139.

[8] North Carolina’s Proposed Regulatory Sandbox Needs Work, The FinReg Blog (May 28, 2019), https://sites.duke.edu/thefinregblog/2019/05/28/north-carolinas-proposed-regulatory-sandbox-needs-work/.

[9] Conway, supra note 3, at 139.

[10] Id. at 138.

[11] Id. at 139.

[12] N.C. Gen. Stat. § 169 (2021).

[13] Bill Patterson, N.C. Legislative Analysis Division, Analysis of: House Bill 624: North Carolina Regulatory Sandbox Act (2021), https://dashboard.ncleg.gov/api/Services/BillSummary/2021/H624-SMTG-122(e4)-v-2.

[14] Id.

[15] N.C. Gen. Stat. § 169 (2021).

[16] Id.

[17] Manjeet Mane, Hawaii’s Regulatory Sandbox for Crypto Companies Concludes Today, Cryptometer.io (Jul. 1, 2024), https://www.cryptometer.io/news/hawaiis-regulatory-sandbox-for-crypto-companies-concludes-today/#:~:text=A%20total%20of%2011%20companies%20were%20approved%20to,period%20from%20July%201%20to%20December%2030%2C%202024.

[18] Hilary R. Sledge-Sarnor et al., Hawaii’s Money Transmitters Modernization Act Will No Longer Apply To Cryptocurrency Activities, Mondaq (Feb. 22, 2024), https://www.mondaq.com/unitedstates/fin-tech/1427532/hawaiis-money-transmitters-modernization-act-will-no-longer-apply-to-cryptocurrency-activities#authors.

[19] Sandbox Phase 2, Utah Office of Legal Services Innovation, https://utahinnovationoffice.org/sandbox-phase-2/#:~:text=The%20Utah%20Supreme%20Court%E2%80%99s%20legal%20regulatory%20Sandbox%20is,narrow%20the%20access-to-justice%20gap%20without%20increasing%20consumer%20harm.

[20] N.C. Innovation Council: Financial and Insurance Regulatory Sandbox (proposed effective date Mar. 1, 2025) (to be codified at 04 N.C. Admin. Code 25C.0100-.0111) [hereinafter Council Rules].

[21] Id.

[22] N.C. Gen. Stat. § 169 (2021).

[23] Council Rules, supra note 20.

[24] Id.

[25] N.C. Gen. Stat. § 169-6(a) (2021).

[26] N.C. Gen. Stat. § 169-3 (2021).

[27] Council Rules, supra note 20.

[28] Jon Sanders, Let’s Broaden North Carolina’s Regulatory Sandbox, Locke (Feb. 12, 2024), https://www.johnlocke.org/lets-broaden-north-carolinas-regulatory-sandbox/.

Professor Brock Kannan

State banking officials can leverage lessons from the 2023 bank failures to become more aware of their pivotal role in protecting the integrity of the U.S. banking system.

Bank regulation ensures the financial system’s stability by protecting consumers and preventing the actions of bad actors. We trust the system because numerous state and federal regulators are dedicated to providing unwavering oversight. With such a trustworthy system in place, the failures of Silicon Valley Bank (“SVB”)[1], Signature Bank[2], and First Republic Bank[3] must have been an anomaly- right?

Several agency accountability reports highlighted the strengths and weaknesses of existing bank regulatory frameworks and supervisory programs at the state[4] and federal[5] levels. While the reports list a myriad of root causes for the bank failures, they all indicate that, in some instances[6], regulators failed to note critical issues[7]. Arguably, the report published by the Federal Reserve[8] even sought to shift blame to social media, claiming that sites, such as Twitter, should be held more accountable in light of the current lax regulatory regime.

The U.S. “dual banking system”—a system whereby banks can freely decide to charter under federal or state laws—was conceived with the passing of the National Bank Act of 1863.  Debates surrounding this system date back nearly 200 years[9] to historic arguments between Hamilton and Jefferson as they voiced their opinions on the power struggles between the federal government and states over control of the financial sector. The competitive nature of the dual chartering banking system[10] has prompted numerous states to respond to the needs of their constituent financial services providers, resulting in new products and powers[11]. Banks’ ability to choose their regulators pits federal and state agencies against one another, forcing them to alter regulatory practices and procedures to enhance their ability to attract and retain charters.[12] In some instances, this bifurcation has prompted the concept of “regulator shopping[13],” where a bank selects the supervisory government agency positioned to provide them with the most favorable treatment.

Knowing this practice exists, it is not surprising that regulators are asking for public commentary to better understand the trust consumers have in the banking system[14]. Although well-intentioned, these results will prove to be fruitless in our dual chartering system as they lack the necessary mechanism to hold state legislatures responsible for their pivotal role in protecting the integrity of the U.S. banking system. Using the shifting oversight of the assets of SVB to the North Carolina Office of Commissioner of Banks[15] as an example, the State Banking Commission[16] is in a prime position to emphasize “the importance of guarding against complacency and having strong risk management policies and practices in place[17] for the agency it oversees. Yet, the North Carolina legislature has neglected to hold the Commissioner accountable for determining if enhancements are needed to the supervision process at the State level.

While their federal counterparts have a path forward, California and New York are the only states with plans for enhancement. This should come as a surprise given the partnerships between States and the federal government to regulate the safety and soundness of the nation’s banks[18]. Represented by the State Liaison Committee (“SLC”),[19] on the Federal Financial Institutions Examination Council (“FFIEC”),[20] they are held to the same standard as their federal peers, which is to “promote uniformity in the supervision of financial institutions[21].” Given recent industry events, perhaps the powers granted to the FFIEC— pursuant to Title X of the Financial Institutions Regulatory and Interest Rate Control Act of 1978 (“FIRA”)—should be expanded to create a self-regulatory organization tasked with ensuring uniformity among supervisors – in this case, the states.

[1] See Telis Demos, What Happened with Silicon Valley Bank?, Wall St. J. (March 14, 2023, 3:00 PM), https://www.wsj.com/articles/silicon-valley-bank-svb-financial-what-is-happening-299e9b65?mod=article_inline (“Last week, Silicon Valley Bank failed and was taken over by regulators. On Sunday, another bank, Signature Bank, was also closed. That day, the government stepped in to protect all of those banks’ deposits and create a way for other banks to get access to more cash.”).

[2] See Mathew Goldstein & Emily Flitter, Risky Bet on Crypto and a Run on Deposits Tank Signature Bank, N.Y. Times (March 12, 2023) https://www.nytimes.com/2023/03/12/business/signature-bank-collapse.html (“Regulators said keeping open the 24-year-old institution, which held deposits from law firms and real estate companies, could threaten the financial system’s stability.).

[3] See Maureen Farrell, Jeanna Smialek & Lauren Hirsch, First Republic Bank is Seized by Regulators and Sold to JPMorgan Chase, N.Y. Times (May 1, 2023), https://www.nytimes.com/2023/05/01/business/first-republic-bank-jpmorgan.html. (“Regulators seized control of First Republic Bank and sold it to JPMorgan Chase on Monday, a dramatic move aimed at curbing a two-month banking crisis that has rattled the financial system.”).

[4] Cal. Dept. of Fin. Prot. and Innovation, Review of DFPI’s Oversight and Regulation of Silicon Valley Bank (May 8, 2023), https://dfpi.ca.gov/wp-content/uploads/sites/337/2023/05/Review-of-DFPIs-Oversight-and-Regulation-of-Silicon-Valley-Bank.pdf; N.Y. State Dept. of Fin. Services, Internal Review of the Supervision and Closure of Signature Bank (April 28, 2023), https://www.dfs.ny.gov/system/files/documents/2023/04/nydfs_internal_review_rpt_signature_bank_20230428.pdf.

[5] U.S. Govt. Accountability Office, Bank Regulation: Preliminary Review of Agency Actions Related to March 2023 Bank Failures (May 11, 2023), https://www.gao.gov/products/gao-23-106834.; Bd. of Governors of the Fed. Rsrv. Sys., Review of the Federal Reserve’s Supervision and Regulation of Silicon Valley Bank (April 28, 2023), https://www.federalreserve.gov/publications/files/svb-review-20230428.pdf; Fed. Deposit Ins. Corp., FDIC’s Supervision of Signature Bank (April 28, 2023), https://www.fdic.gov/news/press-releases/2023/pr23033a.pdf.

[6] Overall, the supervisory approach at Silicon Valley Bank was too deliberative and focused on the continued accumulation of supporting evidence in a consensus-driven environment. Further, the rating assigned to Silicon Valley Bank as a smaller firm set the default view of the bank as a well-managed firm when a new supervisory team was assigned in 2021 after the firm’s rapid growth. This made downgrades more difficult in practice.

[7] Id.

[8] Bd. of Governors of the Fed. Rsrv. Sys., Review of the Federal Reserve’s Supervision and Regulation of Silicon Valley Bank (April 28, 2023), https://www.federalreserve.gov/publications/files/svb-review-20230428.pdf (“This report represents the first step in that process—a self-assessment that takes an unflinching look at the conditions that led to the bank’s failure, including the role of Federal Reserve supervision and regulation.”).

[9] See Office of the Comptroller of the Currency, National Banks and the Dual Chartering System (Sept. 2003), https://www.occ.treas.gov/publications-and-resources/publications/banker-education/files/pub-national-banks-and-the-dual-banking-system.pdf.

[10] See Watters v. Wachovia Bank, N.A., 550 U.S. 1, 15 n.7 (2007).

[11] See The Dual Chartering System and the Benefits of the State Charter, California Dep’t of Fin. Protection & Innovation, https://dfpi.ca.gov/the-dual-chartering-system-and-the-benefits-of-the-state-charter/.

[12] Kenneth E Scott, The Dual Banking System: A Model of Competition in Regulation, 30 Stan L. Rev. 1, 30-32 (1977).

[13] See John Mullin, Shopping for Regulators, Fed. Reserve Bank of Richmond (2019), https://www.richmondfed.org/publications/research/econ_focus/2019/q4/federal_reserve.

[14] See Request for Information on Annual Consumer Trust in Banking Survey, 88 Fed. Reg. 37917 (June 9, 2023) (The OCC is gathering information and comments to inform the development of an annual survey to understand consumer trust in banking and bank supervision.).

[15] As a result of the 2023 failures, First Citizens Bank (“FCB”) acquired all SVB’s deposits, loans, and branches at an 87.12% discount. Like the previous regulatory regime of SVB, FCB is a state-chartered bank holding company subject to joint federal supervision by the Federal Reserve and Federal Deposit Insurance Corporation (“FDIC”) coupled with disconnected oversight by a state agency.

[16] State Banking Comission, Off. of the Comm’r of Banks, https://nccob.nc.gov/about-us/state-banking-commission.

[17] See Statement of Michael J. Hsu, Acting Controller of the Currency, to the House Committee on Financial Services (May 16, 2023), https://occ.gov/news-issuances/congressional-testimony/2023/ct-occ-2023-44-written.pdf (“Acting Comptroller of the Currency Michael J. Hsu today testified before the U.S. House of Representatives’ Committee on Financial Services on the agency’s actions and responses to recent market stress and how the agency is ensuring that national banks and federal savings associations operate in a safe, sound, and fair manner.”).

[18] See Watters, 550 US at 15 n.7.

[19] See FFIEC State Liaison Committee (SLC), Fed. Fin. Inst. Examination Council, https://www.ffiec.gov/slc.htm (“The members of the SLC serve as an important conduit to their state colleagues and represent state supervisory interests before the Council. The SLC comprises five representatives from state regulatory agencies that supervise financial institutions. The representatives are appointed for two-year terms.”).

[20] See About the FFIEC, Fed. Fin. Inst. Examination Council, https://www.ffiec.gov/about.htm (“The Council is a formal interagency body empowered to prescribe uniform principles, standards, and report forms for the federal examination of financial institutions by the Board of Governors of the Federal Reserve System (FRB), the Federal Deposit Insurance Corporation (FDIC), the National Credit Union Administration (NCUA), the Office of the Comptroller of the Currency (OCC), and the Consumer Financial Protection Bureau (CFPB) and to make recommendations to promote uniformity in the supervision of financial institutions. Formed pursuant to title X of the Financial Institutions Regulatory and Interest Rate Control Act of 1978 (FIRA).”).

[21] Id.