InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
OCC Proposes Revisions to Stress Test Information Collection
On November 15, the OCC published a notice and request for comment on proposed changes to its rules requiring certain covered financial institutions, including national banks and federal savings associations with assets over $50 billion, to report certain financial information as part of stress testing. The proposed revisions to the OCC’s reporting requirements are “intended to promote consistency with” the Fed’s proposed changes to its form FR Y-14A, and consist generally of clarifying instructions, shifting the “as-of date”, adding data items, deleting data items, and redefining existing data items—including an expansion of the information collected in the scenario schedule. The proposed revisions also reflect the implementation of the final Basel III regulatory capital rule, which is set to revise and replace the OCC’s risk-based and leverage capital requirements to be consistent with agreements reached by the Basel Committee on Banking Supervision in ‘‘Basel III: A Global Regulatory Framework for More Resilient Banks and Banking Systems’’ (Basel III). All comments must be received by January 19, 2017.
FDIC Proposed Rule to Consolidate Regulations
On November 1, the FDIC published a proposed rule that would rescind and remove Part 391 subpart A (Security Procedures, transferred from the former OTS) from the Code of Federal Regulations and to amend FDIC regulations at Part 326 to make the removed OTS regulations applicable to state savings associations. Comments on the proposal are due by January 3, 2017.
FCC Adopts Privacy Rules for Broadband Providers
On October 27, the FCC adopted privacy rules regulating consumers’ use of broadband internet services. As previously covered in InfoBytes, the FCC issued revised proposed privacy rules for broadband internet service providers (ISPs) in early October to provide consumers with “increased choice, transparency and security online.” Like the proposed rules, the adopted rules (i) require ISPs to obtain confirmative consent to use and share sensitive information; and (ii) permit ISPs to share non-sensitive information unless a customer opts-out.
Because the scope of the rules is limited to broadband service providers and other telecommunication carriers, the FTC maintains its authority over the privacy practices of websites and other “edge services.” In support of the newly adopted FCC rules, FTC Chairwoman commented that “[t]he rules will provide robust privacy protections, including protecting sensitive information such as consumers’ social security numbers, precise geolocation data, and content of communications, and requiring reasonable data security practices.”
State AGs Urge the CFPB to Ensure that States Maintain the Right to Set Usury Caps on High Cost Loans
In October, New York AG Eric T. Schneiderman, along with seven other state AGs (Connecticut, Maryland, Massachusetts, New Hampshire, Pennsylvania, Vermont and the District of Columbia), submitted a letter to the CFPB in response to the agency’s proposed rule addressing payday loans, vehicle title loans, and certain high-cost installment loans. While commending the CFPB for introducing additional consumer protections, the letter urges the CFPB to integrate the following language from the preamble of the proposed rule into the body of the final rule: “The protections imposed by this proposal would operate as a floor across the country, while leaving State and local jurisdictions to adopt additional regulatory requirements (whether a usury limit or another form of protection) above that floor as they judge appropriate to protect consumers in their respective jurisdictions.” The letter explains that because the CFPB does not have the authority to set interest rates – or usury caps – for loans, it is “crucial” that states maintain their right to do so.
Proposed Rule Issued to Stimulate Robust Marketplace for Private Flood Insurance
On October 20, the FDIC, OCC, Federal Reserve, Farm Credit Administration, and National Credit Union Administration issued a proposed rule intended to develop further the private flood insurance marketplace by implementing certain provisions of the 2012 Biggert-Waters Flood Insurance Reform Act (Biggert-Waters Act). Notably, the proposed rule would “require regulated lending institutions to accept policies that meet the statutory definition of private flood insurance in the Biggert-Waters Act and permit regulated lending institutions to accept flood insurance provided by private insurers that does not meet the statutory definition of ‘private flood insurance’ on a discretionary basis, subject to certain restrictions.” Comments on the proposal are due 60 days after it is published in the Federal Register.
OFAC Amends Cuban Assets Controls Regulations
OFAC took an additional step toward further implementation of President Obama’s new policy direction toward Cuba on October 17, with the publication of a final rule amending the Cuban Assets Control Regulations, 31 CFR Part 515 (CACR). Of those most relevant to financial institutions, OFAC updated the CACR by, among other things, amending paragraphs (c) and (f) of section 515.584, which relates to certain financial transactions involving Cuba. Section 515.584(c), as outlined in OFAC’s set of updated FAQs, “authorizes all transactions incident to the processing and payment of credit and debit card transactions for third-country nationals traveling to, from, or within Cuba.” FAQ number 49 further explains that “[a]ny person subject to U.S. jurisdiction, including U.S. financial institutions and their foreign branches, may conduct transactions authorized by [section 515.584(c)].” Section 515.584(f), as explained by FAQ 73, permits: Any banking institution …that is a person subject to U.S. jurisdiction is authorized to provide financing for exports or reexports of items, other than agricultural commodities, authorized pursuant to § 515.533, including issuing, advising, negotiating, paying, or confirming letters of credit (including letters of credit issued by a financial institution that is a national of Cuba), accepting collateral for issuing or confirming letters of credit, and processing documentary collections. OFAC’s amendments to the CACR are effective immediately.
ABA and CBA Lend Perspective on CFPB's Proposed TRID Revisions
On October 18, the American Banking Association (ABA) and Consumer Bankers Association (CBA) submitted a joint comment letter responding to a recent proposal by the CFPB seeking to codify informal guidance and clarifications to the Know Before Your Owe TILA-RESPA Integrated Disclosure (TRID) rule. Of particular concern among lenders and investors was the lack of clarity about liability for unintentional mistakes and technical noncompliance with TRID. To help address these concerns, the Associations urged the CFPB to, among other things, (i) publish the specific statutory provisions it relied upon for each disclosure item or requirement identified in the recent proposal; (ii) grant a “safe harbor” for model forms issued by the bureau; (iii) grant an extension of the “good faith” compliance examination policy pending the CFPB’s proscribed deadlines for the proposed rules; and (iv) develop a formal process to address ongoing compliance and legal issues related to TRID.
The Associations also expressed appreciation for “the numerous amendments offered in th[e] proposal,” including those allowing corrected closing disclosures to reset applicable good faith tolerances for creditors. The Associations further explained that their “preliminary analysis reflects that this proposed rule will resolve multiple ambiguities that banks deem significant” and “urged that the bureau . . . allow for the correction of previous non-compliance caused by the interpretive ambiguity that the bureau is now fixing” (emphasis added).
Federal Banking Agencies Consider Joint ANPR to Address Cybersecurity Standards
On October 19, the FDIC, the OCC, and the Federal Reserve, issued an Advanced Notice of Proposed Rulemaking (ANPR) to further the “development of enhanced cyber risk management standards for the largest and most interconnected entities under their respective supervisory jurisdictions, and those entities’ service providers.” These standards, according to the ANPR, are intended to “increase the operational resilience” of supervised entities and their service providers and, based on the interconnectedness of these entities, “reduce the impact on the financial system in case of a cyber event experienced by one of these entities.” The ANPR proposes organizing enhanced cyber standards into the following categories: (i) cyber risk governance; (ii) cyber risk management; (iii) internal dependency management; (iv) external dependency management; and (v) incident response. The ANPR further explains that the banking agencies “are considering implementing the enhanced standards in a tiered manner, imposing more stringent standards on the systems of those entities that are critical to the functioning of the financial sector.” Comments on the ANPR, which would not apply to community banks, are due January 17, 2017.
ABA and Regional Members Lend Perspective on CFPB's Proposed Rule on Payday, Title, and Certain Other Installment Loans
On October 7, the American Bankers Association (ABA) sent a comment letter to the CFPB regarding the agency’s proposed rule on payday, title, and certain other installment loans. Describing the proposal as “exceedingly and unnecessarily complex,” the ABA argues that the proposed rule imposes significant restrictions on the small-dollar credit industry by limiting financial institutions’ ability to make small-dollar loans to consumers in need of such credit. In addition to asserting that the proposal reflects an over-reach of the CFPB’s statutory authority to regulate unfair, deceptive or abusive acts or practices, the comment letter contends that, if adopted, the proposed rule would, among other things, (i) “stifle innovation in consumer lending, reduce consumer choice, and directly harm the very borrowers [it] was intended to protect”; (ii) impose an unlawful cap on interest rates; (iii) regulate insurance, thereby violating the Dodd-Frank Act; and (iv) levy substantial costs on consumers and lenders. Furthermore, the comment letter includes several testimonials to illustrate how receiving short-term credit helped consumers establish credit and overcome arduous financial conditions. In an effort to safeguard affordable financial services, the ABA urged the CFPB to “protect the ability of community banks to continue to meet small dollar lending needs.” In particular, the ABA sought to exempt entities that make no more than 2,500 loans subject to the proposed rule in the course of a year “if those loans comprise no more than 10% of the lender’s gross annual revenue.”
In addition to the ABA’s comment letter, various regional ABA members, such as individual banks and state bankers associations, sent a letter to CFPB Director Richard Cordray expressing concern about the “substantial barriers and costs” the proposed rule would impose if adopted. ABA members called on the CFPB to “restore its previously proposed ‘5 percent payment-to-income ratio’ alternative compliance option” so that banks may maintain their ability to offer small-dollar credit.
CFPB Releases Final Rule on Prepaid Financial Products; Chamber of Digital Commerce Comments on Scope of the Rule
On October 5, the CFPB released its final rule on prepaid financial products, including traditional prepaid cards, mobile wallets, person-to-person payment products, and other electronic accounts with the ability to store funds. The rule is intended to provide consumers with additional federal protections under the Electronic Fund Transfer Act analogous to the protections checking account consumers receive. The following federal protections are included in the new rule: (i) financial institutions will be required to provide certain account information for free via telephone, online, and in writing upon request, unless periodic statements are provided; (ii) financial institutions must work with consumers who find errors on their accounts, including unauthorized or fraudulent charges, timely investigate and resolve these incidents, and restore missing funds when appropriate; and (iii) consumers will be protected against unauthorized transactions, such as withdrawals or purchases, if their prepaid cards are lost or stolen. The rule contains new “Know Before You Owe” prepaid disclosures similar to those used for mortgages and student financial aid offers. In addition to requiring two (one short, the other long) disclosure forms, the new rule requires that prepaid account issuers post agreement offers made available to the general public on their websites, submit all agreements to the CFPB, and make agreements that are not required to be posted on their website available to relevant consumers. The new rule also includes credit protections stemming primarily from the Truth in Lending Act and the Credit Card Accountability Responsibility and Disclosure Act, including providing consumers with monthly credit billing statements, giving consumers reasonable time – at least 21 days – to repay their debt before incurring late fees, ensuring that consumers are able to repay the debt before making a credit offer, and limiting the fee and interest charges to 25% of the total credit limit during the first year an account is open. The rule, which has not yet been published in the Federal Register, has a general compliance date of October 1, 2017, but includes certain accommodations, one of which is an October 2018 effective date for the requirement that agreements be submitted to the CFPB.
The Chamber of Digital Commerce submitted comments to the CFPB in December advocating that virtual currency products and services should fall outside the scope of the prepaid rule. Pursuant to the final rule, the CFPB found that “application of Regulation E and this final rule to such products and services is outside the scope of this rulemaking.”