Skip to main content
Menu Icon
Close

InfoBytes Blog

Financial Services Law Insights and Observations

Filter

Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.

  • Oregon amends money transmission law with respect to a required security device

    On January 9, the State of Oregon enacted a new bill on money transmission licensing, specifically stating that “each license application shall be accompanied by a security device in the amount of $25,000.” A security device is defined by Oregon law as a surety bond or an irrevocable letter of credit. If an applicant engages in business at more than one location, the security device will increase by $5,000 per location, with a maximum of $150,000. The bill further states that in place of security devices, an applicant could deposit securities such as interest-bearing stocks, bonds, notes, etc., and be held under the same obligations as the security device. The bill concludes that the security device will remain in effect until its cancellation and remain in place no longer than five years following a licensee ceasing its money transmission operations in Oregon. In the event of the bankruptcy of the licensee, the security device will be held in trust for the benefit of purchasers and holders of the licensee’s outstanding payment instruments.

    Licensing Oregon Bond Securities

  • Idaho Department of Finance publishes proposed rule changes on its Mortgage Practices Act

    On January 3, the Idaho Department of Finance published a bulletin on proposed rule changes to Vol. 23-10 of the Idaho Administrative Bulletin, specifically to section 12.01.10 – Rules Pursuant to The Idaho Residential Mortgage Practices Act; a redline of the bill’s section changes is here. According to the bill, the rule changes aim to “reduce regulatory burden by removing outdated requirements,” and the rulemaking changes were made pursuant to Executive Order 2020-01.

    There were several changes to the bill. First, the section on “Deceptive Advertising” was struck from the bill. Second, and under “Written Disclosures,” the portion on “Receipt of an Application” was struck from the bill. Third, and under “Prohibited Practices” and further under “Engage in Deceptive Advertising,” the proposed changes include the addition of two subsections: one on engaging in bait and switch advertising; and another on misleading someone to believe a solicitation is from a person’s current mortgage holder, or government agency, among others. Fourth, the section on “Borrowers Unable to Obtain Loans” was struck entirely.

    Licensing Consumer Finance Mortgages

  • DFPI opens comment period for the Digital Financial Assets Law

    On November 20, DFPI announced it is seeking public comment before it begins its formal rulemaking process on its Digital Financial Assets Law (DFAL), which was enacted on October 13. As previously covered by InfoBytes, DFAL created a licensing requirement for businesses engaging in digital financial asset business activity and is effective on July 1, 2025.

    For comments that recommend rules, DFPI encourages comments that “propose specific rule language and provide an estimate, with justification, of the potential economic impact on business and individuals that would be affected by the language.” Additionally, DFPI requests metrics, applicable information about economic impacts, or quantitative analysis to support comments. Among other topics, DFPI especially asks for comments related to (i) application fees and potential fee adjustments based on application complexity; (ii) surety bond or trust account factors; (iii) if capital minimums should vary by the type of activity requiring licensure; and (iv) its stablecoin approval process. 

    Comments must be received by January 12, 2024. On January 8, 2024, DFPI will host a Virtual Informal Listening Session with stakeholders to discuss feedback on this informal invitation for comments.

    Licensing State Issues Agency Rule-Making & Guidance DFPI California State Legislation Digital Assets Cryptocurrency

  • Utah Court of Appeals affirms ruling for debt buyer engaged in unlicensed collection efforts

    Courts

    The Utah Court of Appeals affirmed a lower court’s ruling against a debt buyer that acquired a portfolio of bad debts from borrowers all over the country, including residents of Utah. The debt buyer collected on the portfolio of debts by retaining third-party debt collectors or, in some instances, attorneys to recover such debts by filing lawsuits. The debt buyer was not licensed under the Utah Collection Agency Act (UCAA). As such, the plaintiffs argued that the debt buyer’s collection efforts were “deceptive” and “unconscionable” under the Utah Consumer Sales Practices Act.

    The lower court ruled for the debt buyer on the grounds that failure to obtain a license, without more, did not rise to the level of “deceptive” or “unconscionable” conduct. Further, the UCAA does not have a private right of action.

    Utah recently repealed the collection agency’s license, effective May 3, 2023 (covered by InfoBytes here).

    Courts Licensing Appellate Utah Debt Buying Consumer Finance Consumer Protection

  • CSBS offers guidance for licensees to prepare for NMLS renewal

    Federal Issues

    On October 24, CSBS released tips for licensees to prepare for NMLS renewal. As previously covered by InfoBytes, NMLS announced it will be rolling out a new version of its mortgage call report which will include new requirements for many licensees. Kelly O'Sullivan, the chair of the NMLS Policy Committee and deputy commissioner of the Montana Division of Banking and Financial Institutions, advises licensees to proactively update their information in NMLS and make use of available training and resources to address their queries before the renewal period begins. This is particularly crucial for those individuals who typically only engage with NMLS during the license renewal phase.

    CSBS recommended five essential tips for licensees:

    • Licensees should log into NMLS and thoroughly review and update their profile record to ensure accuracy;
    • Licensees should reset their NMLS password in advance to have a current password ready for accessing NMLS when needed;
    • Licensees should provide and maintain a current email address to receive essential updates from NMLS during the renewal process;
    • Licensees should review state-specific renewal requirements, as state agencies typically begin publishing details, including deadlines and fees, in September;
    • Licensees are encouraged to take advantage of the free, on-demand renewal training resources provided by CSBS to become familiar with the renewal process.

    Federal Issues Licensing NMLS Mortgages Consumer Finance CSBS Supervision

  • CSBS announces release of NMLS MCR Version 6 in Q1 2024

    On October 13, 2023, the Conference of State Bank Supervisors (CSBS) announced the Nationwide Multistate Licensing System & Registry (NMLS) will be rolling out a new version of its Mortgage Call Report (MCR). In an effort to standardize mortgage company data at the state level, and minimize the amount of reporting outside the system, NMLS will be launching an updated version of the MCR, Version 6 (FV6) on March 16, 2024.

    Licensees will see three main improvements in Version 6:

    • FV6 eliminates standard and expanded forms and consolidates them into one form. All servicers will complete the servicer schedule and all lenders will complete the lender schedule. Lenders and servicers will file financials quarterly, and brokers will file financials annually.
    • Commercial and consumer lending licensees will complete a separate state-specific form, removing the obligation to report mortgage information.
    • The revision of line-item definitions will improve the overall quality of the data and help implement more completeness and accuracy checks.

    FV6 will go into effect for all data collected on transactions dated on and after January 1, 2024. Additionally, NMLS will provide companies with the XML specifications no later than October 23. CSBS estimates that approximately 24,000 brokers, lenders, and servicers will experience reduced requirements, and approximately 3,100 lenders will have additional filing requirements.

    The Mortgage Bankers Association sent a letter to CSBS in July, raising concerns with the new version, including (i) the lack of technical specifications needed for full consideration of the proposal and its implementation; and (ii) the significant expansion and burden of reporting requirements on smaller filers resulting from the replacement of standard and expanded forms in favor of the new and more detailed FV6. CSBS noted mortgage industry concerns surrounding the timing of the rollout of FV6 ahead of Q1 2024, and shared that details for leniency to the filing deadline will be provided in future communications. NMLS will provide regular updates on the Mortgage Call Report page, targeted learning opportunities and Q&A sessions.

    Visit here for additional guidance on FV6 from APPROVED.

    Licensing NMLS CSBS Mortgages Consumer Finance

  • California enacts licensing requirements for digital asset businesses, regulation of crypto kiosks

    On October 13, the California Governor signed AB 39, which will create a licensing requirement for businesses engaging in digital financial asset business activity. Crypto businesses will need to apply for a license with California’s Department of Financial Protection and Innovation (DFPI). The bill, among other things, (i) empowers DFPI to conduct examinations of a licensee; (ii) defines “digital financial asset” as “a digital representation of value that is used as a medium of exchange, unit of account, or store of value, and that is not legal tender, whether or not denominated in legal tender, except as specified”; (iii) empowers DFPI to conduct enforcement actions against a licensee or a non-licensed individual who engages in crypto business with, or on behalf of, a California resident for up to five years after their activity; (iv) allows DFPI to assess civil money penalties of up to $20,000 for each day a licensee is in material violation of the law, and up to $100,000 for each day an unlicensed person is in violation; and (v) requires licensees to provide certain disclosures to California clientele, such as when and how users may receive fees and charges, and how they are calculated. The new law exempts most government entities, certain financial institutions, most people who solely provide connectivity software, computing power, data storage or security services, and people engaging with digital assets for personal, family, household or academic use or whose digital financial asset business activity is reasonably expected to be valued at no more than $50,000 per year. In September of last year, the California Governor vetoed a similar bill because creating a licensing framework was “premature” considering conflicting efforts.

    Also effective on July 1, 2025 is SB 401, which was also enacted on October 13. SB 401 establishes regulations for crypto kiosks under the DFPI’s authority. It will, among other things, prohibit kiosk operators from accepting or dispensing more than $1,000 in a single day to or form a customer via a kiosk. Operators would be required to furnish written disclosures detailing the transaction's terms and conditions as well as transaction details. Kiosk operators will also be obligated to provide customers with a receipt for any transaction at their kiosk, including both the amount of a digital financial asset or USD involved in a transaction and, in USD, any fees, expenses, and charges collected by the kiosk operator. Finally, operators will be required to provide DFPI with a list of all its crypto kiosks in California, and such list will be made public.

    Licensing State Issues California DFPI State Legislation Cryptocurrency Digital Assets Disclosures

  • Oregon enacts registration requirements for data brokers

    State Issues

    On July 27, the governor of Oregon signed HB 2052 (the “Act”) into law, effective upon passage. The Act provides that a “data broker” cannot collect, sell or license brokered personal data within Oregon unless they first register with the Department of Consumer and Business Services. Brokered personal data includes, among other things, name (or the name of a member of the individual’s immediate family or household), data or place of birth, maiden name of the individual’s mother, biometric information, social security or other government-issued identification number, or other information that can “reasonably be associated” with the individual. A data broker does not include consumer reporting agencies, financial institutions, and affiliates or nonaffiliated third parties of financial institutions that are subject to Title V of the Gramm-Leach-Bliley Act, among others.  There are certain exceptions to the requirement, including, among others, selling the assets of a business entity a single time, The Act stipulates a civil penalty in an amount less than or equal to $500 for each violation of Act or for each day in which violation continues. Civil money penalties are capped at $10,000 per calendar year.

    Licensing State Issues Data Brokers Consumer Data Consumer Protection State Legislation Oregon

  • DFPI concludes MTA licensure not required for data processor

    State Issues

    On July 25, the California Department of Financial Protection and Innovation (DFPI) released a new opinion letter concluding that a company that merely receives payment instructions, orders, or directions to transmit money or monetary value does not constitute “receiving money for transmission” requiring licensure under the California Money Transmission Act (MTA).

    Citing the California regulations, DFPI states that to “receive money for transmission,” a person must actually or constructively receive, take possession, or hold money or monetary value for transmission; merely receiving instructions, orders, or directions to transmit money or monetary value does not constitute “receiving money for transmission.”

    As described in the letter, the data processor facilitated payments made by customers to contracting merchants in exchange for goods and services sold by merchants.  The data processor forwards customer account and transaction details to partner financial institutions for debiting the customer’s account, and also facilitates refunds initiated by the merchants, including sending ACH instructions to the partner financial institution.  However, the data processor at no point handles transferred funds or has custody or legal ownership of the rights to the transferred funds.  DFPI, based on several factors and not solely limited to the services described, determined that the inquiring data processor’s payment system does not constitute money transmission or require an MTA license.

    State Issues Licensing State Regulators California Money Transmission Act Consumer Finance California Fair Access to Credit Act California Financing Law DFPI

  • Hawaii amends money transmitter provisions

    On July 3, the Hawaii governor signed HB 1027 (the “Act”) into law, amending several provisions relating to the Money Transmitters Modernization Act. The Act adds and amends several definitions. Changes include defining “money,” “receiving money or monetary value for transmission,” and “tangible net worth.” The definition of “money transmission” has also been amended to clarify its connection to business done in Hawaii, and “stored value” has been amended to mean monetary value “that represents a claim against the issuer evidenced by an electronic or digital record and that is intended and accepted for use as a means of redemption for money or monetary value, or payment for goods or services.” Stored value does not include “a payment instrument or closed loop stored value, or stored value not sold to the public but issued and distributed as part of a loyalty, rewards, or promotional program.”

    Among the various exemptions, the Act also provides for an exemption for an agent of the payee to collect and process a payment from a payor to the payee for goods or services, other than money transmission services, provided certain criteria is met. Additional exemptions include certain persons acting as intermediaries, persons expressly appointed as third-party service providers to an exempt entity, and registered futures commission merchants and securities broker-dealers, among others. Anyone claiming to be exempt from licensing may be required to provide information and documentation demonstrating their qualification for the claimed exemption.

    The amendments outline numerous licensing application and renewal procedures, including largely adopting the net worth, surety bond, and permissible investment requirements set forth in the Money Transmission Modernization Act. Several other states have also recently enacted provisions relating to the licensing and regulation of money transmitters (see InfoBytes coverage here and here).

    The Act took effect July 1.

    Licensing State Issues Digital Assets Fintech State Legislation Hawaii Money Service / Money Transmitters

Pages

Upcoming Events