InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
2nd Circuit: Furnisher’s duty to investigate triggered only after it receives notice of dispute from CRA
On August 10, the U.S. Court of Appeals for the Second Circuit affirmed the dismissal with prejudice of FCRA and related state law allegations against a state bank and trust company, concluding that the bank’s duty to investigate is triggered only after it receive a notice of dispute from a consumer reporting agency (CRA). According to the opinion, the plaintiffs obtained a mortgage from the bank but later defaulted on their payments. The bank initiated foreclosure proceedings, and in 2014 both parties agreed to a deficiency judgment. In February 2016, one of the plaintiffs notified the bank that his credit report “inaccurately indicated ‘that the mortgage. . .was still open and payments had not been made in more than two years.’” The bank acknowledged the error in March, said a correction had been made to report the loan as closed, and indicated that “information [would] be supplied to the credit reporting agencies.” However, the plaintiff claimed the bank did not correct the information until November 2016. In their amended complaint, the plaintiffs alleged the bank violated the FCRA by (i) “negligently and willfully fail[ing] to perform a reasonable reinvestigation and correction of inaccurate information”; and (ii) “engag[ing] in behavior prohibited by [the] FCRA by failing to correct errors in the information that it provided to credit reporting agencies.” The bank countered that its “duty of investigation is only triggered after a furnisher of information receives notice of a dispute from a consumer reporting agency” and that the plaintiffs failed to allege that the bank “‘ever received notice of a dispute from a consumer reporting agency.’” The district court granted the bank’s motion to dismiss with prejudice for failure to state a claim.
On appeal, the 2nd Circuit agreed with district court, concluding, among other things, that the plaintiffs “do not allege that a CRA notified [the bank] of their dispute concerning the information in the [r]eport.” According to the appellate court, the plaintiffs “do not even allege that they notified a CRA of the discrepancy. The [a]mended [c]omplaint alleges only that, after receiving the [r]eport, [the plaintiff] directly notified [the bank] of the [r]eport’s inaccuracy. This alone is insufficient to state a claim under Section 1681s–2(b).”
FTC takes action against background check company for misleading practices
On July 27, the FTC announced the DOJ, on behalf of the FTC, filed a complaint in the U.S. District Court for the Central District of California alleging a background report company used misleading billing and marketing practices in violation of several consumer protection laws. According to the complaint, the background report company’s marketing practices included suggesting that individuals’ reports contained arrest, criminal, sexual offender, bankruptcy, and other records that the reports did not actually include. The complaint alleges the company used these practices to induce users to purchase subscriptions to access background reports. The complaint asserts the company’s practices violated the FTC Act by making false or misleading representations about the criminal records of searched individuals, and that the company violated the Telemarketing Sales Rule and the Restore Online Shoppers’ Confidence Act by materially misrepresenting the benefits of a company subscription; the refund and cancelation policies; and the negative-option features of the subscription.
Moreover, the complaint asserts the company qualifies as a consumer reporting agency under the FCRA, as it “regularly assembles and evaluates information on consumers into consumer reports that, for a fee, it then provides to customers online through interstate commerce.” The complaint argues the company violated the FCRA by failing to maintain reasonable procedures to (i) verify how its reports would be used; (ii) ensure the information was accurate; and (iii) make sure that the information it sold would be used only for legally permissible purposes.
The FTC is seeking a permanent injunction, restitution, and civil money penalties.
9th Circuit: FCRA claim cannot prevail without first providing notice of disputed information
On July 14, the U.S. Court of Appeals for the Ninth Circuit affirmed summary judgment in favor of a group of defendants, including a credit reporting agency (CRA) and furnisher, after determining that a consumer plaintiff failed to adequately notify the CRA of an error on her credit report. According to the opinion, the plaintiff questioned the accuracy of certain information on her credit report and requested that these inaccuracies be investigated. Defendants investigated and corrected the inaccuracies and informed the plaintiff that if she further disputed the accuracy of the reported information, she could submit additional documentation to support her claim. Plaintiff continued to believe her credit report contained inaccuracies; specifically, she contended that the CRA was misreporting the date on which her bankruptcy was discharged. But rather than notify the CRA, she instead filed suit in federal district court alleging violations under the FCRA. The defendants filed for summary judgment which the district court granted, concluding that while “the date of the bankruptcy may have continued to be misreported after the conclusion of the reinvestigation,’ there was no genuine dispute of material fact on whether [the plaintiff] notified [the CRA] of that specific reporting error.” The 9th Circuit agreed, starting that because the plaintiff failed “to provide adequate notice of this reporting error” the scope of the defendants’ duties were limited. Moreover, the 9th Circuit held that a consumer cannot prevail on a “FCRA claim without first putting the [CRA] on notice of the information that is disputed.”
CFPB settles claims with debt relief executive
On July 7, a settlement was reached with another of the defendants in an action taken by the CFPB against a mortgage lender and several related individuals and companies (collectively, “the defendants”) for alleged violations of the Consumer Financial Protection Act (CFPA), Telemarketing Sales Rule (TSR), and Fair Credit Reporting Act (FCRA). As previously covered by InfoBytes, the CFPB filed a complaint in January in the U.S. District Court for the Central District of California claiming the defendants violated the FCRA by, among other things, illegally obtaining consumer reports from a credit reporting agency for millions of consumers with student loans by representing that the reports would be used to “make firm offers of credit for mortgage loans” and to market mortgage products, but instead, the defendants allegedly resold or provided the reports to companies engaged in marketing student loan debt relief services. The defendants also allegedly violated the TSR by charging and collecting advance fees for their debt relief services. The CFPB further alleged that defendants violated the TSR and CFPA when they used telemarketing sales calls and direct mail to encourage consumers to consolidate their loans, and falsely represented that consolidation could lower student loan interest rates, improve borrowers’ credit scores, and change their servicer to the Department of Education. An $18 million settlement was reached with several of the defendants in May (covered by InfoBytes here).
The settlement reached with the chief operating officer/part-owner of one of the defendant companies requires the defendant to pay $25,000 of a $7 million settlement—of which the full payment will be suspended provided several obligations are fulfilled. The defendant, who neither admits nor denies the allegations, is permanently banned from providing debt relief services and from accessing, using, or obtaining “prescreened consumer reports” for any purpose. The defendant is also prohibited from using or obtaining consumer reports for any business purposes aside from “underwriting or otherwise evaluating mortgage loans.” The defendant is further required to, among other things, (i) pay a $1 civil money penalty; (ii) comply with reporting requirements; and (iii) fully cooperate with any other investigations.
CFPB seeking innovation in adverse action notices when using artificial intelligence
On July 7, the CFPB released a blog post discussing the use of artificial intelligence (AI) and machine learning (ML), addressing the regulatory uncertainty that accompanies their use, and encouraging stakeholders to use the Bureau’s innovation programs to address these issues. The blog post notes that “AI has the potential to expand credit access by enabling lenders to evaluate the creditworthiness of some of the millions of consumers who are unscorable using traditional underwriting techniques,” but using AI may create or amplify risks, including unlawful discrimination, lack of transparency, privacy concerns, and inaccurate predictions.
The blog post discusses how using AI/ML models in credit underwriting may raise compliance concerns with ECOA and FCRA provisions that require creditors to issue adverse action notices detailing the main reasons for the denial, particularly because AI/ML decisions can be “based on complex interrelationships.” Recognizing this, the Bureau explains that there is flexibility in the current regulatory framework “that can be compatible with AI algorithms.” As an example, citing to the Official Interpretation to Regulation B, the blog post notes that “a creditor may disclose a reason for a denial even if the relationship of that disclosed factor to predicting creditworthiness may be unclear to the applicant,” which would allow for a creditor to use AI/ML models where the variables and key reasons are known, but the relationship between them is not intuitive. Additionally, neither ECOA nor Regulation B require the use of a specific list of reasons, allowing creditors flexibility when providing reasons that reflect alternative data sources.
In order to address the continued regulatory uncertainty, the blog post encourages stakeholders to use the Trial Disclosure, No-Action Letter, and Compliance Assistance Sandbox programs offered by the Bureau (covered by InfoBytes here) to take advantage of AI/ML’s potential benefits. The blog post mentions three specific areas in which the Bureau is particularly interested in exploring: (i) “the methodologies for determining the principal reasons for an adverse action”; (iii) “the accuracy of explainability methods, particularly as applied to deep learning and other complex ensemble models”; and (iii) the conveyance of principal reasons “in a manner that accurately reflects the factors used in the model and is understandable to consumers.”
Fed releases CARES Act credit reporting, mortgage servicing examination procedures
On July 7, the Federal Reserve Board (Fed) released CA 20-11 and related examination procedures for the credit reporting and mortgage servicing provisions of the CARES Act. The procedures apply to CARES Act provisions that created new requirements for furnishers of credit information and mortgage servicers of certain mortgage loans for consumers impacted by the Covid-19 pandemic. The CARES Act amended the FCRA and required that consumer accounts be reported by furnishers as current if the consumer was current prior to the grant of a CARES Act accommodation. For mortgage servicers, the CARES Act generally required servicers of federally backed mortgage loans to grant forbearance requests toCovid-19-impacted borrowers. Servicers of these mortgages were also prohibited from initiating foreclosures through May 17, 2020. Structured as a series of modules with similar requirements grouped together, the examination procedures are intended to provide the framework for an institution’s examination, including an evaluation of the adequacy of an institution’s compliance management system. The examination procedures’ credit reporting provisions apply to supervised institutions with total consolidated assets of $10 billion or less, whereas the mortgage servicing provisions apply to all supervised institutions, including those with total consolidated assets of $10 billion or less.
The Fed advised that in exercising supervisory and enforcement responsibilities it intends to take into account the unique circumstances impacting borrowers and institutions resulting from the Covid-19 pandemic. As such, the Fed does not expect to initiate a public enforcement action against an institution provided the circumstances were related to Covid-19, and the institution demonstrated good faith efforts to support borrowers and comply with consumer protection laws.
11th Circuit vacates punitive damages award against CRA for FCRA violation
On June 19, the U.S. Court of Appeals for the Eleventh Circuit vacated a magistrate judge’s final judgment in an FCRA action, concluding that there was no competent proof of a willful violation of the Act on the part of a consumer reporting agency (CRA). According to the opinion, a consumer brought an action against the CRA and other defendants alleging, among other things, that the CRA “negligently and willfully” violated the FCRA by not reinvestigating an item on his credit report he alleged was reported in error. Approximately 75 days after a small claims debt against the consumer was dismissed with prejudice, the consumer and his attorney ran his credit report and finding the debt still reported, wrote to the CRA with the dismissal order and requested that it reinvestigate the debt listing and remove it. The CRA diverted the letter under its suspicious mail policy for unknown reasons (since the CRA did not have a system to record the reason a letter was marked as suspicious), and sent a letter to the consumer informing him that it had determined the letter was suspicious and was not sent by him, but suggesting he call if he believed his credit report was in error. Less than two months later, the CRA removed the credit line after receiving a communication from the debt holder, but the consumer had already filed the action five days prior to that time. A jury trial found that the CRA’s “negligent failure to reinvestigate” caused harm to the consumer and awarded $5,000 in compensatory damages and further concluded that the violation of the FCRA was willful, assessing $3 million in punitive damages. Subsequently, the magistrate judge remitted the punitive damages to $490,000 on due process principles.
On appeal, the 11th Circuit vacated the magistrate judge’s final judgment on the willfulness claim, noting that the consumer “offered no evidence of a broad or systemic problem with [the CRA]’s suspicious mail policy,” and that the consumer did not establish by clear and convincing evidence that the CRA “ran an unjustifiably high risk of violating its duties under the FCRA.” Moreover, the actions of the CRA “had a foundation in the statutory text,” even if the policy’s application was negligent when applied to the consumer. Because the appellate court concluded the violation was not willful, the punitive damages judgment was eliminated.
Kraninger emphasizes need for FCRA and CARES Act compliance
On June 19, CFPB Director Kathy Kraninger spoke during a Consumer Data Industry Association webinar, warning information furnishers and consumer reporting agencies (CRAs) that the Bureau has dedicated significant resources toward enforcement of certain provisions of the CARES Act and the FCRA. Specifically, Kraninger emphasized the Bureau’s reliance on consumer complaint data to inform its supervisory and enforcement activity and noted that April and May had the highest monthly complaint volumes in the Bureau’s history, with approximately 7,200 complaints mentioning Covid-19 related terms during that time. Kraninger referenced the Bureau’s April policy statement, which stated the Bureau would take a “flexible supervisory and enforcement approach during this pandemic regarding compliance with the [FCRA] and Regulation V” (covered by InfoBytes here). However, Kraninger warned that furnishers are still required to comply with the CARES Act, and that the “Bureau expects CRAs and furnishers to make good faith efforts to investigate disputes as quickly as possible.” According to Kraninger, due to the unique challenges the Covid-19 pandemic has created, the Bureau will evaluate each CRA and furnisher’s respective efforts and circumstances on an individual basis to determine whether it made the good faith effort to investigate as quickly as possible.
CFPB issues CARES Act credit reporting FAQs
On June 16, the CFPB released a set of Frequently Asked Questions (FAQs) concerning the Bureau’s previously issued policy statement addressing consumer reporting agencies’ (CRAs) and furnishers’ credit reporting responsibilities under the CARES Act amendments to the Fair Credit Reporting Act (FCRA). The policy statement also emphasized that the Bureau is taking a “flexible supervisory and enforcement approach during this pandemic regarding compliance with the [FCRA] and Regulation V,” including refraining from citing in examinations or bringing enforcement action against CRAs or furnishers acting in good faith. (Covered by InfoBytes here.)
Addressed within the FAQs are topics for furnishers to consider when complying with the CARES Act requirements. These include: (i) reporting as current certain accounts for consumers affected by the Covid-19 pandemic; (ii) citing or suing furnishers that violate the FCRA by failing to investigate disputes; (iii) defining an “accommodation” for purposes of the FCRA amendments, and clarifying whether furnishers are required to provide accommodations to impacted consumers, and if so, what their consumer reporting obligations will be; (iv) clarifying that “using a special comment code to report a natural or declared disaster or forbearance” is not a substitute for complying with the CARES Act credit reporting requirements; (v) warning that reporting forbearances on accounts that are not delinquent, or for which a consumer has not requested a forbearance, “increases the risks of inaccurate reporting and consumer confusion”; and (vi) specifying account status reporting requirements after a CARES Act accommodation ends.
FTC settlement requires retailer to provide transaction records to identity theft victims
On June 10, the FTC announced a settlement to resolve Fair Credit Reporting Act (FCRA) allegations against a Wisconsin-based retailer for failing to provide the proper transaction records to identify theft victims. According to the FTC, this is the first time the Commission has used its authority under Section 609(e) of the FCRA, which requires companies to provide identity theft victims with “‘application and business transaction records’ evidencing any transactions that the victim alleges to be the ‘result of identity theft’” within 30 days of being requested. The FTC’s complaint alleged that from February 2017 through March 2019, the retailer implemented several changes to its policy, which limited the information that identity theft victims could obtain. The retailer also allegedly refused to directly provide victims with detailed order information, stating it would only share information if the request came directly from law enforcement. Moreover, the FTC claimed that the retailer did not provide the information it was supplying within the 30-day window required by the FCRA, and on several occasions, failed to issue a denial of a victim’s request within 30 days. These unlawful actions, the FTC alleged, violated the FTC Act and the FCRA, and only ended six months after the retailer received a civil investigative demand from the FTC. Under the terms of the settlement, the retailer has agreed to pay a $220,000 civil penalty to settle the claims and must provide identify theft victims, within 30 days, valid verification of their identity and the identity theft, including business transaction records related to the theft. The retailer must also provide a notice on its website to provide identity theft victims information on how to obtain application and business records, and certify that it has provided all such records to victims who were previously denied access.