InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
CFPB Director speaks on new and proposed rules for data brokers
On April 2, the Director of the CFPB, Rohit Chopra, delivered a speech at the White House Office of Science and Technology Policy highlighting President Biden’s recent Executive Order (EO) to Protect Americans’ Sensitive Personal Data and how the CFPB will plan to develop rules to regulate “data brokers” under FCRA. As previously covered by InfoBytes, the EO ordered several agencies, including the CFPB, to better protect Americans’ data. Chopra highlighted how the EO not only covered data breaches but also regulated “data brokers” that ingest and sell data. According to the EO, “Commercial data brokers… can sell [data] to countries of concern, or entities controlled by those countries, and it can land in the hands of foreign intelligence services, militaries, or companies controlled by foreign governments.”
Consistent with the EO, the CFPB will plan to propose rules this year that will regulate “data brokers,” as per its authority under FCRA. Specifically, the proposed rules would include data brokers within the definition of “consumer reporting agency”; further, a company’s sale of consumer payment or income data would be considered a “consumer report” subject to requirements, like accuracy, customer disputes, and other provisions prohibiting misuse of the data.
CFPB reports on the relationship between discount points and interest rates
On April 5, the CFPB issued a report on the relationship between trends in discount points and interest rates. The report used HMDA data between Q1 of 2019 and Q3 of 2023 when interest rates were at “record-highs” and before the Federal Reserve announced its intention to lower interest rates. The CFPB found that (i) the majority of borrowers paid discount points, (ii) more borrowers paid discount points as interest rates increased, and (iii) borrowers with low credit scores were even more likely to pay discount points. Delving deeper into the data, 87 percent of borrowers with cash-out refinances paid discount points (up from 61 percent in 2021), and borrowers with cash-out refinance loans paid twice the number of discount points compared to other borrowers (with a median of 2.1 points per loan). Additionally, almost 77 percent of FHA borrowers with a credit score below 640 paid discount points compared to 65 percent of all FHA borrowers. Considering these trends, the CFPB will plan to monitor the use of discount points and weigh the advantages against the potential risks to borrowers.
District Court rules against CFPB on Prepaid Rule disclosure requirement
On March 28, the U.S. District Court for the District of Columbia (D.D.C.) ruled in favor of a fintech digital wallet provider by granting its motion for summary judgment, denying the CFPB’s cross-motion, and vacating the CFPB’s Prepaid Rule’s short-form disclosure requirements for digital wallets. The suit focused on the applicability of the Prepaid Rule’s short-form disclosure requirements to digital wallet products. The plaintiff sued the CFPB, arguing the CFPB’s Prepaid Rule was arbitrary and capricious because, unlike for general-purpose reloadable (GPR) products, the CFPB failed to provide a “well-founded, non-speculative reason for subjecting digital wallets” to the Prepaid Rule’s short-form disclosure regime.
The CFPB’s Prepaid Rule mandated that pre-acquisition fee disclosures, which were intended to apply to GPR cards, be required for digital wallets––i.e., digital wallet providers would be required to provide consumers with a pre-acquisition fee disclosure in a formatted “short form.” While the judge agreed that this makes sense as applied to GPR products, digital wallet products were fundamentally different from GPRs and were not primarily “used to access funds or to function as a substitute checking account.” While the CFPB’s Advanced Notice of Proposed Rulemaking, did not initially include digital wallets, in the final Prepaid Rule, the CFPB included digital wallets for three reasons: (1) the CFPB reasoned that the Prepaid Rule should apply to digital wallets since digital wallets can carry funds (just like GPRs), and the fee structure “may not hold true in the future”; (2) the CFPB argued that the Prepaid Rule filled a regulatory gap for digital wallets; and (3) the CFPB claimed it “cast a wide net” on purpose to avoid a “patchwork regime.”
In response, the plaintiff argued that the disclosure requirement was arbitrary and capricious due to the Bureau having no rational justification for including digital wallets in the Prepaid Rule. Further, it was arbitrary and capricious because the CFPB did not comply with its role under Dodd-Frank by assessing the costs and benefits of the Rule. Finally, the plaintiff argued that the short-form disclosure regime violated the First Amendment.
While declining to rule on First Amendment issues, the court held that the CFPB lacked a “rational justification” for subjecting digital wallets to the Prepaid Rule’s short-form disclosure requirement, agreeing that the CFPB’s requirement was arbitrary and capricious, and that it had no basis for including digital wallets because they were materially different products. The judge also found the CFPB’s cost-benefit analysis (as mandated by Dodd-Frank) was deficient, as the “general” cost-benefit analysis did not fit for digital wallets.
California regulator advises businesses to only collect needed data under CCPA
On April 2, The California Privacy Protection Agency issued Enforcement Advisory No. 2024-01 reminding businesses that data minimization is a foundational principle the California Consumer Privacy Act. The Advisory noted that the Agency has observed certain businesses collecting unnecessary and disproportionate amounts of personal information and emphasized that minimization principles would apply to processing consumer requests. As such, the Advisory highlighted the requirements of minimization, including the concept that the collection, use, sharing, and retention of personal information must be reasonable and proportionate to the purposes identified, considering the minimum personal information required, the potential negative impacts on consumers, and the existence of additional safeguards that addressed the applicable negative impacts. As part of the discussion, the Advisory also discussed two scenarios: one described an opt-out procedure, and the other described verification in connection with a consumer request. For the opt-out procedure, the Advisory reminded businesses that businesses may not verify a consumer’s identity to process an opt-out (it may, however, ask the consumer for the information necessary to complete the request). For the verification procedures, the Advisory outlined a possible process for analyzing whether additional verification information would be required, such as whether the business stores driver license information.
Washington enacts SB 6025 addressing certain lending practices
On March 25, the Governor of the State of Washington signed SB 6025 (the "Act”) into law. The Act would prohibit covered entities from (i) making loans disguised as personal property sale or leaseback transactions; (ii) offering cash rebates as a cover for installment sales; or (iii) making loans with interest rates or charges surpassing legal limits, among other things. The Act also amended portions of Washington State’s Consumer Loan Act (CLA). The Act would provide that non-bank services companies may be lenders under the CLA if such company would hold the “predominate interest in the loan” or “totality of the circumstances indicate that the [company] is the lender.” These changes will go into effect on June 6.
West Virginia updates licensing of mortgage brokers and lenders
On March 26, the Governor of West Virginia signed into law SB 613, a bill that amended certain statutes regarding mortgage broker, lender, and loan originator licensing requirements. The bill updated definitions relating to the licensure and regulation of mortgage brokers, lenders, and loan originators, permitted the Commissioner of Financial Institutions to participate in the multistate licensing and examination process, and updated net worth requirements to use generally accepted accounting principles. The bill also established new information requirements for applicants and individuals involved in a change of control, requiring fingerprints, credit reports, and judicial findings to be provided to the NMLS and Registry.
This bill also amended the West Virginia Mortgage Licensing Act to permit employees of a mortgage broker, lender, or servicer to perform remote work, subject to appropriate data security requirements, monitoring, and others. SB 613 will go into effect on June 3.
Kansas updates UCCC provisions including credit card surcharges
On March 29, the Governor of Kansas signed into law HB 2247, a comprehensive bill that updated UCCC provisions in an effort to regulate the credit industry more efficiently, and moved provisions from the UCCC to the Kansas Mortgage Business Act, among other things. The bill amended provisions relating to credit card surcharges—allowing retailers and other persons to impose a surcharge on a customer who uses a credit card payment if such retailer or person provided a clear and conspicuous disclosure of the surcharge amount at the point of entry or sale or in advance of the transaction. The bill nearly tripled the “threshold amount” on certain consumer loans and leases from $25,000 to $69,500. The bill also clarified license requirements, among other things. HB 2247 will go into effect on July 1.
Maine amends its telephone solicitor violations to include the reassigned numbers database
On March 25, the Governor of Maine approved a new bill, HP 1433, that would require telephone solicitors to leverage the reassigned numbers database. As previously covered by InfoBytes, the FCC created the reassigned numbers database in 2018 to reduce the number of calls inadvertently made to reassigned numbers. This new law would ban telephone providers from calling an individual in combination with the previously codified violations regarding the national or state do-not-call registries. The new law stated that a telephone solicitor would not violate the new law if the solicitor could demonstrate that he used the reassigned numbers database to verify that a person’s telephone number has not been reassigned before calling it. This bill will go into effect on July 16.
West Virginia enacts act to prevent unfair real estate service agreements
Recently, West Virginia passed a new law, HB 5346, titled the Unfair Real Estate Services Agreements Act (the “Act”). This new Act will amend the Code of West Virginia with respect to real estate service agreements. The Act would make the entering into of an “Unfair Real Estate Services Agreement” a deceptive act, including any real estate services agreement between a licensed real estate service provider and a consumer that included terms that would purport to run with the land or be binding to future owners of interest, purport to create a property lien, allow for assignment of the contract without timely notification to the owner of the property, or create a listing agreement for a property that has been listed for over a year past its listing date. Under the law, any unfair real estate service agreement created after the bill’s effective date would be void, and parties may bring a civil action against a real estate service provider. The Act will go into effect on June 6.
West Virginia updates its bank recordkeeping requirements to equate copies with originals
On March 27, the Governor of West Virginia signed into law HB 4837, which amended the state’s general banking services code to permit banks to photographically or photo-statically reproduce its checks, documents, records, or other instruments (other than notes, securities, and investments) and use such photographic copies (e.g., scans) as substitutes for the originals. Under the law, the photographic copy would be deemed an original counterpart, having the same force and effect as the original, and would constitute admissible evidence in court. While the law would permit the bank to destroy the original copy, the bank must retain either the original or photographic reproductions of the documents for five years from the date of the last entry. Finally, the law would limit actions against any bank for “any balance, amount or proceeds from any time, savings or demand deposit account based on the contents of records” to a five-year retention period. This bill will go into effect after 90 days from passage: June 6.