Is a bank

What triggers it

The lint's definition. It is a bank, credit union, building society or other deposit-taker, or supplies software to one. A lender that takes no deposits is is_lender; a bank that lends declares both.

This covers a bank, a credit union, a building society and a savings association, and a vendor whose software one of them runs.

It implies Provides financial services, so the rules that bind every financial firm reach it too, and a bank that lends also declares Is a lender.

What does not

A lender that takes no deposits does not count.

Often confused with Is a lender and Provides financial services.

The law it brings into scope

The kinds of law that name this activity in the LexLint law library, with the number of laws and jurisdictions in each, as of 19 Oct 2026. The examples are chosen by rule, laws in force first and the widest jurisdiction first; each section's page lists every law.

Area of law	Laws	Jurisdictions
Cybersecurity law Build software securely, handle reported flaws, and report incidents on a deadline. Computer-Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers United States European Union (Digital Operational Resilience) Regulations 2025, ICT Systems and Continuity Duties of Financial Firms Ireland Real Decreto-ley 12/2018, Incident Notification Obligation Spain	35	24
AI law Tell people when they are dealing with an AI system or its output, and control the uses the law calls high-risk. Capital Requirements Directive, Robust Governance Arrangements of Institutions (Article 74(1)) European Union General outsourcing requirements for a common platform firm: relying on a third party to perform operational functions, including critical or important functions United Kingdom Bank Secrecy Act and 31 CFR 1020.320, bank reports of suspicious transactions and their confidentiality United States	7	5

This activity implies Provides financial services, so every law that names that activity reaches it too. These areas of law reach it only that way:

• Privacy law: 15 laws in 8 jurisdictions, through Provides financial services

  Have a legal basis for personal data, honor people's rights over it, and report a breach.

• Communications law: 2 laws in 1 jurisdiction, through Provides financial services

  Get consent before marketing, calling, recording or storing data on a device, and honor an opt-out.

In a declaration

A role says who operates a product, so it is declared in the product's own lexlint.yml and never in a component's ACTIVITIES.md: a library cannot make the product that uses it a regulated party.

In lexlint.yml

History

In the registry since version 1.1, 16 Oct 2026.

Added for Bank Secrecy Act and 31 CFR 1020.320, bank reports of suspicious transactions and their confidentiality (United States), the law that turns on it.

In the glossary: Is a bank.

The activity registry is LexLint's open list; this page's text is licensed under Creative Commons Attribution 4.0.