InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
FTC provides guidance on managing consumer protection risks when using AI and algorithms
On April 8, the FTC’s Bureau of Consumer Protection wrote a blog post discussing ways for companies to manage the consumer protection risks of artificial intelligence (AI) technology and algorithms. According to the FTC, over the years the Commission has dealt with the challenges presented by the use of AI and algorithms to make decisions about consumers, and has taken many enforcement actions against companies for allegedly violating laws such as the FTC Act, FCRA, and ECOA when using AI and machine learning technology. Financial services companies have also been applying these laws to machine-based credit underwriting models, the FTC stated. To assist companies, the FTC has provided the following guidance:
- Be transparent. Companies should not mislead consumers about how automated tools will be used and should be transparent when collecting sensitive data to feed an algorithm. Companies that make automated eligibility decisions about “credit, employment, insurance, housing, or similar benefits and transactions” based on information provided by a third-party vendor are required to provide consumers with “adverse action” notices under the FCRA.
- Explain decisions to consumers. Companies should be specific when disclosing to consumers the reasons why a decision was made if AI or automated tools were used in the decision-making process.
- Ensure fairness. Companies should avoid discrimination based on protected classes and should consider both inputs and outcomes to manage consumer protection risks inherent in using AI and algorithmic tools. Companies should also provide consumers access and opportunity to dispute the accuracy of the information used to make a decision that may be adverse to the consumer’s interest.
- Ensure data and models are robust and sound. According to the FTC, companies that compile and sell consumer information for use in automated decision-making to determine a consumer’s eligibility for credit or other transactions (even if they are not a consumer reporting agency), may be subject to the FCRA and should “implement reasonable procedures to ensure maximum possible accuracy of consumer reports and provide consumers with access to their own information, along with the ability to correct any errors.” The AI models should also be validated to ensure they work correctly and do not illegally discriminate.
- Accountability. Companies should consider several factors before using AI or other automated tools, including the accuracy of the data set, predictions based on big data, and whether the data models account for biases or raise ethical or fairness concerns. Companies should also protect these tools from unauthorized use and consider what accountability mechanisms are being employed to ensure compliance.
FTC files “piggybacking” charges against credit repair operation
On March 9, the FTC filed a complaint against a Colorado-based credit repair company and its owner for allegedly making false representations to consumers regarding their ability to improve credit scores and increase access to mortgages, personal loans, and other credit products in violation of the Credit Repair Organizations Act, the FTC Act, and the Telemarketing Sales Rule. In its complaint, the FTC alleged that the defendants charged consumers illegal, upfront fees ranging from $325 to $4,000 per tradeline with the deceptive promise that they could “piggyback” on a stranger’s good credit, thereby artificially inflating their own credit score in the process. As the FTC explained, “piggybacking” occurs when a consumer pays to be registered as an “additional authorized user” on a credit card held by an unrelated account holder with positive payment histories. The FTC alleged that the defendants’ practices did not, in fact, significantly improve consumers’ credit scores as promised, and that while the defendants claimed on their website that their piggybacking services were legal, the FTC “has never determined that credit piggybacking is legal” and the practice does not fall within the protections of the Equal Credit Opportunity Act. Under the terms of the proposed settlement, the defendants will be banned from selling access to another consumer’s credit as an authorized user and from collecting advance fees for credit repair services. The defendants will also be required to pay a $6.6 million monetary judgment, which be partially suspended due to the defendants’ inability to pay.
CFPB agrees to publish small-business data proposal by September
On February 26, the U.S. District Court for the Northern District of California approved a stipulated settlement between plaintiffs, including the California Reinvestment Coalition (CRC), and the CFPB to resolve a 2019 lawsuit that sought an order compelling the Bureau to issue a final rule implementing Section 1071 of the Dodd-Frank Act. As previously covered by InfoBytes, the plaintiffs argued that the Bureau’s failure to implement Section 1071—which requires the Bureau to collect and disclose data on lending to women and minority-owned small businesses—violates two provisions of the Administrative Procedures Act, and has harmed the CRC’s ability to advocate for access to credit, advise organizations working with women and minority-owned small businesses, and work with lenders to arrange investment in low-income and communities of color.
Under the terms of the settlement, the Bureau has agreed to outline a proposal for collecting data and studying discrimination in small-business lending by September 15, and will also create a Small Business Advocacy Review panel by October 15 to prepare a report on the proposal within 60 days. The Bureau and the plaintiffs will also negotiate the deadlines for issuing the proposed rule, and, if an agreement cannot be reached, the parties will accept a court-supervised process for public reporting as well as for the development and issuance of the proposed and final rules.
Last November, the Bureau held a symposium covering small business lending and Section 1071. (Covered by InfoBytes here.) At the time, Director Kathy Kraninger noted in her opening remarks that the symposium would assist the Bureau with information gathering for upcoming rulemaking and emphasized that the Bureau is focused on a rulemaking that would not impede small business access to credit by imposing unnecessary costs on financial institutions.
FTC gives annual ECOA summary to CFPB
On February 21, the FTC announced it recently provided the CFPB with its annual summary of work on ECOA-related policy issues, focusing specifically on the Commission’s activities with respect to Regulation B. The summary discusses, among other things, the following FTC research and policy development initiatives:
- The FTC continued its series of Hearings on Competition and Consumer Protection in the 21st Century. Session 12 of these hearings specifically focused on consumer privacy and “the use of big data in automated decision making and how . . . ECOA should inform the use of data collected from consumers.” Session 14 included a roundtable of state attorneys general and senior staff who addressed consumer protection issues related to “the impact of big data and algorithms on equal access to credit.”
- The FTC held a forum with a variety of business leaders, enforcement attorneys, and policymakers to discuss ECOA’s applicability to small business financing.
- The FTC held a consumer reporting workshop to discuss ECOA as well as (i) consumer report furnisher practices; (ii) making credit decisions based on fairness; and (iii) avoiding the use of a prohibited basis in extending credit.
- The FTC’s Military Task Force continued to work on military consumer protection issues, including military consumers’ rights to “various types of notifications as applicants for credit, including for adverse action, and information about the anti-discrimination provisions, in ECOA and Regulation B.”
- The FTC continued to participate in the Interagency Task Force on Fair Lending, along with the CFPB, DOJ, HUD, and federal banking regulatory agencies.
The summary also highlights FTC business and consumer education efforts on fair lending issues, as well as blog posts discussing the online marketplace for small business financing.
CFPB issues Winter 2020 Supervisory Highlights
On February 14, the CFPB released its winter 2020 Supervisory Highlights, which details its supervisory and enforcement actions in the areas of student loan servicing, payday lending, debt collection, and mortgage servicing. The findings of the report, which are published to assist entities in complying with applicable consumer laws, cover examinations that generally were completed between April and August of 2019. Highlights of the examination findings include:
- Debt collection. The Bureau cited violations of the FDCPA’s requirement that debt collectors must, after the initial written communication, disclose that their communications are from a debt collector. The report also included the failure of some debt collectors to provide a written validation notice to consumers within five days after the debt collector initially contacts the consumer regarding the collection of a debt.
- Payday lending. The Bureau found violations of the CFPA, including among other things, lenders failing to apply consumer payments to their loan balances and treating the accounts as delinquent. The Bureau also found weaknesses in employee training that resulted in providing consumers with inaccurate annual percentage rates in violation of Regulation Z.
- Mortgage servicing. The Bureau pointed out that servicers had violated Regulation X by failing to provide written acknowledgement of receipt of consumer loss mitigation applications, including whether the applications were complete or incomplete, within five days of receipt. Servicers also failed to provide in writing a list of loss mitigation options for which the consumer was eligible within 30 days of receiving a complete loss mitigation application.
- Student loan servicing. The Bureau noted that after loans were transferred, some servicers billed incorrect monthly amounts to the consumers.
The report notes that in response to most examination findings, the companies have taken or are taking remedial and corrective actions, including by identifying and compensating impacted consumers and updating their policies and procedures to prevent future violations. Lastly, the report also highlights the Bureau’s recently issued rules and guidance.
Democratic Congressmen ask GAO to look at alternative data in mortgage lending
On January 16, Democratic members of the House Financial Services Committee sent a letter to the Government Accountability Office (GAO) inquiring about the benefits and drawbacks of using alternative data in mortgage lending, as well as the federal government’s role in overseeing the use of alternative data credit reporting agencies (CRAs) and lenders. The letter notes that while alternative data can be useful in helping lenders identify creditworthy potential borrowers who cannot be scored by CRAs through traditional measures, questions remain about how the use of alternative data may affect compliance with fair lending laws, including the Equal Credit Opportunity Act and Fair Housing Act. “While some alternative data, such as rental payment history, may provide an objective measure of creditworthiness, others might enable discrimination on the basis of a protected class, or infringe upon consumer privacy,” the letter cautions. The letter asks GAO to study the use of alternative data in expanding access to credit, with a particular focus on mortgage credit, and poses the following questions:
- How have different entities used alternative data to expand access to mortgage credit? Specifically, can alternative data determine consumer creditworthiness and whether a consumer is able to repay a mortgage? Additionally, are there certain alternative data sources that are better at predicting creditworthiness or some that are more likely to raise concerns about correlations with discriminatory factors? Furthermore, what federal activity has there been in this space?
- What are the potential benefits and risks associated with using alternative data and financial technology for access to mortgage credit, and are there variations in these benefits and risks across different groups, including minorities and younger borrowers?
- What potential risks does alternative data pose to fair lending compliance, and are the regulatory and enforcement agencies that govern the credit-granting system equipped to manage and prepare for an increased use of alternative data in mortgage lending?
- How do the benefits and trade-offs of other options for expanding access to mortgage credit compare to the use of alternative data in credit scoring?
CFPB holds small business lending symposium
On November 6, the CFPB held a symposium covering small business lending and Section 1071 of the Dodd-Frank Act, which amends ECOA to require financial institutions to compile, maintain, and submit to the Bureau certain information concerning credit applications by women-owned, minority-owned, and small businesses, and also directs the Bureau to promulgate regulations to implement these requirements. In her opening remarks, Director Kraninger, noted that the symposium was being convened to assist the Bureau with information gathering for upcoming rulemaking and emphasized that the Bureau is focused on a rulemaking that would not impede small business access to credit by imposing unnecessary costs on financial institutions. The symposium consisted of two panels, with the first covering policy issues related to small business lending, while the second discussed specific aspects of the requirements of Section 1071. Highlights of the panels include:
- Panel #1. During the policy discussion, panelists focused on non-traditional lenders, namely fintech firms, that have entered the small business lending market, with most noting that these online alternative lenders have filled a necessary lending gap left by traditional banks and depository institutions. While concerns around bad actors in the online lending space were discussed, most panelists agreed that online financing may provide an opportunity for women and minority-owned businesses to avoid potential biases in underwriting, with one panelist noting that his company does not collect gender or race information in its online application.
- Panel #2. Panelists focused their discussion on specific implementation concerns of Section 1071, including compliance costs, definitions of small business and financial institutions, data elements to be reported, and privacy concerns. Among other things, panelists noted that the definition of “small business” should be limited to businesses under $1 million in revenue, which is a figure included in other regulations such as ECOA and the CRA. Panelists disagreed on whether the Bureau should exercise its exemptive authority under Section 1071 for the definition of “financial institution.” While some panelists believe that the broad definition included in the Act is necessary to hold all the players in the market accountable, others argued that large financial institutions that receive an “outstanding” CRA rating should be excluded from the reporting requirements. As for data elements, most agreed that the Bureau should only require the statutorily mandated elements and not include any others in the rulemaking, while one panelist suggested that APR must be included in order to ensure that approval rates for minority-owned small businesses are the result of actual innovation and effective business models and not just the charging of high rates. Moreover, panelists reminded the Bureau to be cognizant of the small business lending reporting requirements of the CRA and HMDA and cautioned the Bureau to keep Section 1071 data requirements compatible.
DOJ sues Maryland car dealership for ECOA violations
On September 30, the DOJ announced it filed a lawsuit in the U.S. District Court for the District of Maryland alleging that a Maryland used car dealership and its owner and manager violated ECOA by offering different terms of credit based on race to consumers seeking to finance cars. According to the complaint, between September 2017 and April 2018, compliance testing done by the DOJ concluded that the defendants’ “actions, policies, and practices discriminate against applicants on the basis of race with respect to credit transactions…by offering more favorable terms to white testers than to African American testers with similar credit characteristics.” Specifically, the complaint alleged that African American testers were, among other things, (i) told they needed higher down payment amounts than white testers for the same car; (ii) quoted higher bi-weekly payments for “buy here, pay here” financing than white testers for the same car; and (iii) not offered to fund down payments in two installments, as compared to white testers. The DOJ also alleges that the conduct was “intentional, willful, and taken in disregard of the rights of others” and seeks injunctive relief and monetary relief.
District Court: Bank’s delay on adverse-action notice does not qualify for safe harbor
On August 8, the U.S. District Court for the Eastern District of Kentucky granted a loan applicant’s request for partial summary judgment on allegations that a bank violated ECOA when it failed to timely send an adverse-action notice. The court ruled that the bank failed to establish its inadvertent error defense. The plaintiff’s loan application was submitted on October 30, 2018, and subsequently reviewed and denied on November 5 due to “issues with his credit report that needed to be resolved” in order for his application to be fully considered. The adverse action paperwork was then placed in a courier pouch for delivery to the lending officer responsible for notifying the plaintiff. However, the information failed to make it to the intended officer until after the plaintiff filed the action, upon which, the adverse action letter was generated on December 19. Under ECOA, notification of action must be made within 30 days of receipt.
The bank argued that partial summary judgment was inappropriate because the failure to provide notice within 30 days was an “inadvertent error” under 12 CFR 1002.16, and therefore did not constitute a violation of ECOA. The court stated that, in order to prevail on its argument on the safe-harbor provision for inadvertent errors, the bank, as the nonmoving party, must establish three elements: (i) the error was “mechanical, electronic, or clerical”; (ii) the error was unintentional; and (iii) the error “occurred ‘. . .notwithstanding the maintenance of procedures reasonably adapted to avoid such errors.” However, the bank conceded that it could not explain what caused the courier pouch error, put forth no evidence to show that the effort was clerical in nature, and also acknowledged that it “does not maintain any procedure reasonably adapted to avoid such errors.” As such, the court determined that the bank failed to demonstrate the existence of a genuine issue of any material fact bearing on the elements of the defense, and thus failed to qualify for the safe harbor defense.
DOJ announces redlining settlement with Indiana bank
On June 13, the DOJ announced a settlement with an Indiana bank resolving allegations the bank engaged in unlawful “redlining” in Indianapolis by intentionally avoiding predominantly African-American neighborhoods in violation of the Fair Housing Act and ECOA. In the complaint, the DOJ alleges that from 2011 to 2017, among other things, the bank (i) excluded Marion County in Indianapolis and its “50 majority-Black census tracts” from its Community Reinvestment Act assessment area; (ii) did not have any branch locations in majority-Black areas of the county; (iii) did not market in the majority-Black areas of the country; and (iv) had a residential mortgage lending policy that allegedly showed preference to the location of borrowers, not the creditworthiness. Under the settlement agreement, which is subject to court approval, the bank will, among other things, expand its business services and lending to the predominantly African-American neighborhoods in Indianapolis and will invest at least $1.12 million in a special loan subsidy fund to be used to increase credit opportunities in the specified neighborhoods. Additionally, the bank will designate a full-time Director of Community Lending and Development to oversee the continued development of the bank’s lending in the specified areas.