Pillar 3 disclosure requirements are the public-reporting rules under Basel III that force large banks to publish standardized data on their capital, risk exposures, leverage, and liquidity so investors and analysts can judge the bank’s financial health for themselves. In the United States, the Federal Reserve, the Office of the Comptroller of the Currency, and the Federal Deposit Insurance Corporation enforce these rules, and how much a bank has to disclose depends on how large and complex it is. The reports go on the bank’s investor relations website, a senior officer has to attest to them, and getting them wrong carries civil money penalties that run per day.
Which Banks Have to File
U.S. regulators sort banking organizations into four tailoring categories, and the Pillar 3 obligations scale up with each one.
- Category I covers U.S. Global Systemically Important Banks (G-SIBs), which face the most rigorous disclosure requirements, including information about their systemic importance scores and resolution planning.
- Category II covers banking organizations with at least $700 billion in total assets or at least $75 billion in cross-jurisdictional activity. Their disclosure standards are nearly identical to the G-SIB rules.
- Category III covers organizations with at least $250 billion in total assets, or at least $75 billion in nonbank assets, weighted short-term wholesale funding, or off-balance-sheet exposure.
- Category IV covers other firms with $100 billion to $250 billion in total assets and carries a lighter version of the same framework.
The tailoring matters in practice. Category III and IV firms report liquidity data monthly rather than daily, and their stress testing and disclosure cycles run less frequently than those imposed on G-SIBs. Banks below the $100 billion threshold are not pulled into Pillar 3 at all.
Capital Ratios You Have to Disclose
Three capital ratios sit at the core of every Pillar 3 report. Each compares a layer of the bank’s capital to its risk-weighted assets.
- Common Equity Tier 1 (CET1) is the highest-quality capital, made up of common shares and retained earnings. The minimum CET1 ratio is 4.5% of risk-weighted assets.
- Tier 1 Capital is CET1 plus additional instruments such as certain preferred stock. The minimum Tier 1 ratio is 6.0%.
- Total Capital is Tier 1 plus Tier 2 capital, which includes subordinated debt and loan-loss reserves. The minimum total capital ratio is 8.0%.
On top of those minimums, every bank must hold a capital conservation buffer of 2.5% of risk-weighted assets. A bank that dips into the buffer faces automatic restrictions on dividend payments and executive bonuses. Regulators can also activate a countercyclical buffer of up to 2.5% during periods of excessive credit growth, though this tool is rarely deployed in the U.S. All of these ratios go into standardized templates so investors can compare one bank’s cushion against another’s.
G-SIB Surcharges
G-SIBs carry an additional capital surcharge on top of the standard minimums. The Basel Committee calculates each G-SIB’s systemic importance from 12 indicators grouped into five equally weighted categories: size, cross-jurisdictional activity, interconnectedness, substitutability, and complexity. The resulting composite score places the bank into one of five surcharge buckets, ranging from an additional 1.0% of risk-weighted assets at the lowest bucket to 3.5% at the highest. G-SIBs publish the underlying indicator values through the GSIB1 template, and a bank that reduces its score enough to drop a bucket genuinely lowers its capital requirement.
Risk Disclosures
Beyond the headline capital ratios, Pillar 3 requires granular data on the risks driving the balance sheet. The templates are standardized so an analyst comparing two banks isn’t stuck reconciling different formats.
Credit risk accounts for the largest share of most banks’ risk-weighted assets. Banks report loan portfolio quality, including past-due and defaulted exposures, and disclose whether they use the Standardized Approach or an internal-ratings-based model to calculate risk weights. The templates break out exposures by asset class and geography so concentrations are visible.
Market risk covers potential losses from price swings in trading portfolios. Institutions with significant trading activity file the FFIEC 102, which captures value-at-risk measures, specific risk add-ons, and incremental risk capital requirements. Operational risk, covering losses from internal failures, fraud, or external disruptions, rounds out the three mandatory risk disclosures.
Banks must also reconcile their regulatory risk data with the figures in their published financial statements. Templates LI1 and LI2 map the differences between accounting values and regulatory exposure amounts so investors can see exactly where and why the numbers diverge. Off-balance-sheet exposures and securitization activities get their own detailed breakdowns.
Leverage and Liquidity
Risk-weighted capital ratios have a blind spot, because a bank can game the risk weights. The leverage ratio acts as a backstop by measuring capital against total exposure without adjusting for risk. Large U.S. banks must maintain a Supplementary Leverage Ratio (SLR) of at least 3%, and the largest bank holding companies must hold an additional 2% buffer, bringing their effective minimum to 5%. Templates LR1 and LR2 require banks to show how leverage exposure breaks down and how the final ratio is calculated.
Liquidity disclosures address whether a bank can survive a short-term funding crisis. The Liquidity Coverage Ratio (LCR) measures whether a bank holds enough high-quality liquid assets to cover 30 days of net cash outflows under stress. U.S. G-SIBs must maintain an LCR of at least 100% and disclose quarterly averages of their daily calculations. The assets that count toward the LCR fall into tiers, with Treasury securities and Federal Reserve balances counting at full value, government-sponsored enterprise obligations taking a 15% haircut, and qualifying corporate bonds and publicly traded equities facing steeper haircuts and caps. Banks must break out these categories so investors can judge the actual quality of the buffer.
The Net Stable Funding Ratio (NSFR) takes a longer view, measuring whether a bank’s funding sources can support its assets over a one-year horizon. Covered institutions must maintain an NSFR of at least 1.0 and publicly disclose the ratio and its components quarterly in a standardized format.
Climate Disclosures: Still Voluntary in the U.S.
The Basel Committee has published a framework for climate-related Pillar 3 disclosures, with six templates covering transition risk, physical risk, and concentration risk. The framework remains voluntary at the international level, and each jurisdiction decides whether to make it mandatory. Whether U.S. regulators will require these templates is still an open question as of 2026, though several large U.S. banks have begun voluntarily publishing climate risk data alongside their standard Pillar 3 reports.
How and How Often Banks Have to Publish
Banks host their Pillar 3 reports in a dedicated regulatory section of their investor relations websites, typically as downloadable PDFs, and the reports must remain available for several years to allow historical comparison.
Frequency depends on the type of information and the bank’s category. Most Pillar 3 disclosures follow a semi-annual schedule under the Basel baseline, but large internationally active banks must publish capital ratios and components quarterly. Qualitative disclosures describing risk management policies and governance can be annual. Information that changes rapidly, like trading-book exposures, should be updated quarterly regardless of bank size.
Separately from the public reports, institutions submit regulatory capital data to their supervisors through specific forms. The FFIEC 101 collects detailed risk-weighted asset and capital data from banks using the Advanced Capital Adequacy Framework, and the FFIEC 102 captures market risk data from institutions with significant trading activity. Those filings flow through secure electronic portals into the supervisory review process and are not themselves the public Pillar 3 disclosure.
Senior Officer Attestation
Pillar 3 is not a compliance task that can be handed off to a back-office team. The Basel Committee requires one or more senior officers, ideally at the board level, to attest that disclosures were prepared under the bank’s board-approved internal control processes.
In the U.S., the Federal Reserve has formalized a parallel requirement for the FR Y-14 regulatory reports filed by the largest institutions. The chief financial officer must attest that the reported data were prepared in good faith, that actual data are materially correct, and that internal controls over reporting are effective and audited at least annually. The CFO must also agree to report material weaknesses in internal controls and material errors in submitted data. Disclosure failures therefore carry personal consequences for the executives who sign off, not just institutional ones.
Penalties for Getting It Wrong
Federal banking regulators actively review Pillar 3 disclosures. Civil money penalties under federal banking law follow a three-tier structure based on severity and intent, and each tier runs per day.
- First tier: up to $5,000 per day for any violation of a law, regulation, or written agreement with a federal banking agency.
- Second tier: up to $25,000 per day when the violation is part of a pattern of misconduct, causes more than minimal loss, or results in financial gain to the responsible party.
- Third tier: up to $1,000,000 per day for knowing violations that cause substantial loss to the institution. For the institution itself, the cap is the lesser of $1,000,000 per day or 1% of total assets.
Because the penalties accrue daily, a disclosure violation left uncorrected for weeks or months can accumulate into enormous sums. Beyond fines, regulators can issue cease-and-desist orders, remove individual officers or directors, and restrict the institution’s activities. The supervisory review process under Pillar 2 also lets regulators require a bank to hold additional capital if its risk management or disclosure practices fall below expectations.
What’s Changing Under the Basel III Endgame
The U.S. implementation of the final Basel III reforms, commonly called the Basel III endgame, is still in progress as of 2026. In March 2026, federal banking agencies issued three new proposed rules covering risk-based capital surcharges for G-SIBs, capital requirements for Category I and II institutions and firms with significant trading activity, and revisions to the standardized approach for risk-weighted assets. Public comments on all three proposals are due by June 18, 2026.
Those proposals will reshape what banks disclose under Pillar 3 once finalized, because changes to risk-weight calculations flow directly into the capital ratios at the core of every report. Revisions to the FFIEC 102 market risk form, with drafts released in 2024 for a proposed September 2025 effective date, show that the reporting infrastructure is being updated in parallel. Banks subject to Pillar 3 should expect their templates, data requirements, and publication timelines to shift as these rules move from proposal to final implementation.