12 C.F.R. § 37.8
A national bank must manage the risks associated with debt cancellation contracts and debt suspension agreements in accordance with safe and sound banking principles. Accordingly, a national bank must establish and maintain effective risk management and control processes over its debt cancellation contracts and debt suspension agreements. Such processes include appropriate recognition and financial reporting of income, expenses, assets and liabilities, and appropriate treatment of all expected and unexpected losses associated with the products. A bank also should assess the adequacy of its internal control and risk mitigation activities in view of the nature and scope of its debt cancellation contract and debt suspension agreement programs.
12 C.F.R. § 37.8