InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
CPPA continues efforts towards California Privacy Rights Act
The California Privacy Protection Agency board is continuing its efforts to prepare regulations implementing the California Privacy Rights Act (covered by InfoBytes here and here).
Draft risk assessment regulations and cybersecurity audit regulations were released in advance of the September 8 open meeting held by the board. Draft regulations on automated decision-making remain to be published. More comprehensive comment and feedback is expected on these draft regulations, unlike regulations finalized in March that were presented in a more robust state. As previously covered by InfoBytes, the California Privacy Protection Agency cannot enforce any regulations until a year after their finalization, adding a ticking reminder to the finalization process for these draft regulations.
The draft cybersecurity regulations include thoroughness requirements for the annual cybersecurity audit, which must also be completed “using a qualified, objective, independent professional” and “procedures and standards generally accepted in the profession of auditing.” A management certification must also be signed certifying the business has not influenced the audit, and has reviewed the audit and understands its findings.
The draft risk assessment regulations require conducting a risk assessment prior to initiating processing of consumers’ personal information that “presents significant risk to consumers’ privacy,” as set forth in an enumerated list include the selling or sharing of personal information; processing personal information of consumers under age 16; and using certain automated decision-making technology, including AI.
Yellen announces principles for net-zero financing & investment
On September 19, Secretary of the Treasury, Janet L. Yellen, discussed Treasury’s efforts to facilitate the net-zero transition, support the momentum of private-sector financial institutions that are already taking into account market demand and supporting the transition, and share emerging best practices around commitments to the transition, through the introduction of its Principles for Net-Zero Financing and Investment.
In discussing the role of private-sector financial institutions in the net-zero transition, Secretary Yellen noted that “more than 650 institutions representing roughly 40 percent of global financial assets have made commitments to support the goal of net-zero greenhouse gas emissions by 2050 or sooner” and “more than 100 U.S. financial institutions have voluntarily done so.” Yellen also emphasized the commitments of research and civil society groups to engage in technical work in support of the principals, as well as monetary support from philanthropic institutions that have pledged $340 million in support of net-zero transition and work related to the Principles.
Secretary Yellen noted that the principles are designed to be flexible to accommodate differences in entity size as well as other factors such as business model, client base, products and services and jurisdictions, but affirmed the importance of net-zero commitments aligning with the goal of limiting the increase in global average temperature to 1.5 degrees Celsius. To that end, the agency recommends that institutions develop transition plans that clearly articulate practices, targets and metrics for reaching their net-zero commitments.
The principles also encourage private-sector financial institutions to support net-zero commitments by providing transition finance to clients that are focused on their own initiatives that align with those of the institutions, and by investing in cutting-edge clean energy technologies.
CFPB issues guidance on adverse action reasons by creditors using AI
On September 19, the CFPB issued guidance about legal requirements that creditors must follow when using artificial intelligence and other complex models.
In prior guidance, the agency stated that lenders must provide specific and accurate reasons for adverse actions against consumers. The latest guidance expanded upon that prior guidance to clarify that lenders cannot simply use CFPB sample adverse action forms and checklists when taking adverse actions against consumers, but must explain the reasons for such adverse actions to help improve consumers’ chances for future credit, and protect consumers from illegal discrimination.
In its announcement of the updated guidance, the CFPB discussed the potential that consumers may be denied credit as a result of the increased use of complex, predictive decision-making technologies to analyze large datasets that may include consumer surveillance data or other information that the consumer may not believe is relevant to their finances. The agency confirmed that creditors must disclose the specific reasons for adverse action, even if consumers may be surprised, upset, or angered to learn their credit applications were being graded on data that may not intuitively relate to their finances. According to the guidance, a creditor is not absolved from the requirement to specifically and accurately inform consumers of the reasons for adverse actions because the use of predictive decision-making technologies in their underwriting models makes it difficult to pinpoint the specific reasons for such adverse actions.
NYDFS updates criteria for virtual currency regulation
Adrienne Harris, Superintendent of the New York State Department of Financial Services (“DFS”) issued an update on the VOLT initiative, an ongoing project to enhance DFS’s role as a virtual currency regulator. Superintendent Harris published proposed guidance adopting enhanced criteria for procedures to list and de-list virtual currencies as well as updated guidance for designating virtual currencies to the DFS “Greenlist.”
The new General Framework for Greenlisted Coins sets (i) heightened risk assessment standards for coin-listing policies and enhances requirements for consumer-facing products; and (ii) new requirements associated with coin-delisting policies. Under the new guidance, a virtual currency entity that seeks to self-certify coins must create a coin-listing policy and may not self-certify any coins until such possibly has a written approval from DFS. A coin-listing policy must contain and be based on a robust governance structure; comprehensive risk assessment; consideration of factors to identify and mitigate risks involved in each coin and its uses; and policies and procedures to conduct continued monitoring of the coin to ensure consistent safety and soundness compliance.
The new framework does not require prior approval from the DFS to list coins included on the Greenlist, but does require virtual currency entities that choose to list such coins to (i) provide advance notification to DFS and (ii) have a DFS-approved coin-delisting policy.
California AG advocates for medical payment reforms
California Attorney General Rob Bonta submitted a letter to federal agencies urging the federal government to adopt regulations and statutory protections to help protect patients who may need to use medical credit cards and installment loans to pay for healthcare-related bills.
The letter notes that medical payment products exacerbate health disparities, that patients seeking medical care may not be in an appropriate position to make complex financial decisions, and offers California’s protections against medical payment products as a model framework.
In the letter, which is addressed to the U.S. Department of Health and Human Services, Centers for Medicare & Medicaid Services, the CFPB, and the Treasury, Bonta recommends (i) designating medical credit card debt as medical debt and not consumer debt; (ii) ensuring providers properly screen patients for financial aid and charity care before offering a medical payment product; (iii) limiting enrollment when patients may be distressed or under the influence of medication; (iv) providing written notice of financial assistance and potential eligibility for charity care; (v) making reasonable efforts to notify patients about the level of insurance coverage of medical expenses; and (vi) reducing patient cost-sharing responsibilities.
CFPB adjusts annual dollar amount thresholds under TILA, HMDA regulations
On September 18, the CFPB released a final rule revising the dollar amounts for provisions implementing TILA and its amendments that impact loans under the Home Ownership and Equity Protection Act of 1994 (HOEPA) and qualified mortgages (QM). The Bureau is required to make annual adjustments to dollar amounts in certain provisions in Regulation Z, and has based the adjustments on the annual percentage change reflected in the Consumer Price Index for Urban Wage Earners and Clerical Workers (CPI-W) in effect on June 1, 2023. The following thresholds are effective January 1, 2024:
- For HOEPA loans the adjusted total loan amount threshold for high-cost mortgages will be $26,092, and the adjusted points-and-fees dollar trigger for high-cost mortgages will be $1,305;
- For qualified mortgages under the General QM loan definition, the thresholds for the spread between the annual percentage rate and the average prime offer rate will be: “2.25 or more percentage points for a first-lien covered transaction with a loan amount greater than or equal to $130,461; 3.5 or more percentage points for a first-lien covered transaction with a loan amount greater than or equal to $78,277 but less than $130,461; 6.5 or more percentage points for a first-lien covered transaction with a loan amount less than $78,277; 6.5 or more percentage points for a first-lien covered transaction secured by a manufactured home with a loan amount less than $130,461; 3.5 or more percentage points for a subordinate-lien covered transaction with a loan amount greater than or equal to $78,277; or 6.5 or more percentage points for a subordinate-lien covered transaction with a loan amount less than $78,277”; and
- For all QM categories, the adjusted thresholds for total points and fees will be “3 percent of the total loan amount for a loan greater than or equal to $130,461; $3,914 for a loan amount greater than or equal to $78,277 but less than $130,461; 5 percent of the total loan amount for a loan greater than or equal to $26,092 but less than $78,277; $1,305 for a loan amount greater than or equal to $16,308 but less than $26,092; and 8 percent of the total loan amount for a loan amount less than $16,308.”
With respect to credit card annual adjustments, the Bureau noted that its 2024 annual adjustment analysis on the CPI-W in effect on June 1, did not result in an increase to the current minimum interest charge threshold (which requires “creditors to disclose any minimum interest charge exceeding $1.00 that could be imposed during a billing cycle”).
NY credit union gets final approval on $2.2M overdraft fee deal
On September 7, the U.S. District Court for the Northern District of New York issued a Final Order approving a more than $2.2 million settlement deal to end a class action over a credit union’s overdraft and insufficient funds fee practices.
The deal includes a $2.1 million settlement fund. After payment of attorneys’ fees to customers’ counsel, 80% of the settlement fund will go to customers who were allegedly charged overdraft fees on debit card transactions that did not overdraw their accounts when the transactions were authorized, and 20% will go to customers who were allegedly hit with multiple insufficient funds fees on a single transaction. In addition, the credit union will forgive, waive and not collect nearly $165,000 in uncollected fees.
On December 7, 2022, plaintiffs filed a putative class action complaint in the United States District Court for the Northern District of New York that consolidated two putative class action cases in which the plaintiffs alleged the credit union’s assessment of more than one insufficient funds fee on a single transaction and assessment of overdraft fees on debit card transactions that did not overdraw the customers’ accounts was a breach of contract, breach of the covenant of good faith and fair dealing, and violative of New York General Business § 349, et seq. Shortly after the actions were consolidated, the parties notified the court that they were working towards a settlement.
Ginnie Mae released the Social Impact and Sustainability Framework and supports broader access to mortgage financing
On September 14, Ginnie Mae announced the launch of its “Social Bond” label to indicate underlying collateral that is designed to support a positive social and affordable housing outcome, and released the Social Impact and Sustainability Framework.
The “Social Bonds” revision to Ginnie Mae’s standard forms of prospectus details attributes of Ginnie Mae MBS to provide transparency to investors. The insurance or guaranties extended under certain government programs reduce borrower credit risk, which promotes broader access to mortgage credit and/or less costly credit for borrowers, thereby expanding homeownership access and affordability among targeted populations (low-to-moderate income borrowers, veterans, senior citizens, rural communities, and/or tribal, Alaska Native, and Native Hawaiian communities).
The Social Impact and Sustainability Framework highlighted Ginnie Mae’s role in connecting the global capital markets to America’s housing financial system and providing liquidity to support access to affordable housing and lending for first first-time homebuyers, low-to-moderate income households, veterans, seniors, and members of urban, rural, and tribal communities from inception.
FTC fines two companies $6M for inaccurate background reports
The FTC fined two companies that sell consumer background reports through subscriptions for violations of the FTC Act and Fair Credit Reporting Act (“FCRA”). In addition to allegedly claiming, without substantiation, to have the most accurate reports available to the public, the complaint says two companies deceptively claimed individuals had criminal or arrest records when the individual did not; deceptively claimed consumers can remove information or flag it as inaccurate, and deceptively failed to disclose that third-party reviews were incentivized and biased.
The companies also furnished consumer reports to subscribers “without reason to believe those subscribers have permissible purposes to obtain such reports.”
The stipulated order requires the companies to pay a civil penalty of $5.8 million, prohibits them from advertising, marketing, promoting, or offering for sale certain reports including arrest records, bankruptcy records, and eviction records until the establish and implement a comprehensive monitoring program, and prohibits them from continuing any of the deceptive practices set forth in the complaint.
Risks in college tuition payment plans revealed in CFPB report
On September 14, the CFPB released a report highlighting risks associated with college tuition payment plans. Analyzing nearly 450 college websites, the report found that many plans lack clear disclosures and have confusing repayment terms, potentially causing students to miss payments and accumulate debt. Additionally, the CFPB noted that some institutions use transcript withholding as a debt collection tool, a practice deemed illegal and detrimental to students' career prospects.
Key findings include:
- Inconsistent and confusing disclosures in tuition payment plans.
- Substantial fees, including enrollment fees, returned payment fees, and late fees, leading to high costs for students.
- Intrusive debt collection practices, such as withholding transcripts, negatively impacting students' futures.
- High costs for missed payments and potential conversion of no-interest plans into interest-bearing loans.
- Contracts that may force students to waive legal rights and protections.
- Lack of standardized disclosure requirements, leading to inconsistency in how plans are presented on school websites.
The CFPB plans to continue monitoring tuition payment plans and school-based lending practices to protect consumers from potential violations of federal consumer financial laws.