InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
CFPB: ECOA, Reg B and small-biz rule apply to franchise finance
The CFPB recently published a letter clarifying the extent to which ECOA and Regulation B apply to franchise financing. The letter also examines how the Bureau’s small business lending rule (finalized in March and covered by InfoBytes here) applies to franchise financing. The Bureau explained that franchisees generally obtain credit either directly from the franchisor or from a third-party finance company. ECOA and Regulation B, the Bureau said, generally apply to business credit (defined as “extensions of credit primarily for business or commercial (including agricultural) purposes,” with limited exclusions), as well as to other credit extended primarily for personal, family, and household use, and that, as such, creditors, including franchisors that provide financing to franchisees are subject to ECOA and Regulation B’s core prohibitions against discrimination. The small business lending rule also covers business credit, the Bureau said, commenting that entities providing credit to franchisees “would generally be financial institutions subject to the rule’s data collection and reporting requirements to the same extent as any other provider of business credit, unless they are subject to one of the narrow exclusions from coverage.”
The Bureau added that it also “anticipates that third-party entities providing credit to franchisees that meet the origination threshold for coverage will be required to collect and report data under the small business lending rule regardless of whether that company is affiliated with the franchisor.” A possible “trade credit” exemption may apply in certain circumstances where a franchisor directly provides credit to a franchisee (trade credit is defined under the small business lending rule “as a ‘financing arrangement wherein a business acquires goods or services from another business without making immediate payment in full to the business providing the goods or services.’”). However, even if the franchisor is covered by the trade credit exemption it still must comply with ECOA and Regulation B’s prohibitions against discrimination.
Agencies propose new standards for AVMs
On June 1, the CFPB joined the Federal Reserve Board, OCC, FDIC, NCUA, and FHFA in issuing a notice of proposed rulemaking (NPRM) to implement quality control standards mandated by the Dodd-Frank Act concerning automated valuation models (AVMs) used by mortgage originators and secondary market issuers. Specifically, institutions that engage in certain credit decisions or make securitization determinations would be required to adopt quality control standards to ensure a high level of confidence that estimates produced by an AVM are fair and nondiscriminatory. Other requirements would necessitate institutions to protect against data manipulation and avoid conflicts of interest. Institutions would also be required to conduct random sample testing and reviews and comply with applicable nondiscrimination laws. The agencies acknowledged that while advances in AVM technology and data availability may contribute to lower costs and reduce loan cycle times, institutions’ reliance on AMV technology must not be used as an excuse to evade the law.
CFPB Director Rohit Chopra explained that, while AVMs rely on mathematical formulas and number crunching to produce estimates (and are often used to “check” human appraisers or used in place of an appraisal), they can still embed the human biases they are meant to correct. This is due in part to the data fed into the AVMs, the algorithms used within the machines, and biases and blind spots attributed to the individuals who develop the models, Chopra warned, commenting that AVMs can actually “make bias harder to eradicate in home valuations because the algorithms used cloak the biased inputs and design in a false mantle of objectivity.”
Chopra went on to explain that inaccurate or biased algorithms can lead to serious harms to consumers, neighborhoods, and the housing market, and may also impact the tax base. A focus common to all the agencies, Chopra said, is ensuring that automated systems and artificial intelligence modeling technologies are developed and used in accordance with federal laws to avert discriminatory outcomes and prevent negative impacts on consumer financial stability.
Comments on the NPRM are due within 60 days of publication in the Federal Register.
FHA reinstates HAMP loss mitigation for exempted transfers
HUD recently released Mortgage Letter (ML) 2023-11 to update previously issued guidance on loss mitigation options for non-borrowers who acquire a title through an exempted transfer. The provisions apply to all FHA Title II Single Family forward mortgage programs and may be implemented immediately but no later than July 21. Previously, ML 2023-03 (which expanded Covid-19 recovery loss mitigation options) temporarily suspended the use of FHA Home Affordable Modification Program (HAMP) loss mitigation for all borrowers. As a result, mortgagees were no longer able to review non-borrowers who acquired a title through an exempted transfer for FHA-HAMP loss mitigation. With the issuance of ML 2023-11, FHA has reinstated FHA-HAMP loss mitigation to allow mortgagees to review non-borrowers who acquired a title through an exempted transfer and are in default or imminent default.
Freddie allows digital paystubs in underwriting
On May 22, Freddie Mac announced new capabilities allowing lenders to use a borrower’s digital paystub data when assessing income paid through direct deposit. Lenders will be able to access the enhancements to Freddie’s automated income assessment tool through the Loan Product Advisor (LPA) asset and income modeler (AIM). Freddie noted that in addition to providing access to direct deposit data, AIM is also able to “assess income from tax return data for self-employed borrowers as well as bank account data to identify a history of positive monthly cash flow activity” to help first-time homebuyers and borrowers in underserved communities who may not qualify through traditional methods of underwriting. AIM is also designed to notify lenders when submitting this type of account data may benefit a borrower. The new AIM capability will be available beginning June 7 to Freddie-approved sellers that use LPA.
FHA expedites claims process for HECMs
On May 17, HUD announced new policies to expedite claims processing for home equity conversion mortgages (HECM). Specifically, FHA’s policies will allow for faster payment of funds to mortgagees upon assignment of an HECM to HUD by allowing borrowers with FHA mortgages to submit a request for a preliminary title approval earlier in the process and with fewer documents. Mortgagees will now be able to assign an HECM to HUD once the HECM reaches 98 percent of the maximum claim amount (MCA) and may begin submitting required information to HUD when the HECM reaches 97 percent of the MCA (based on the value of the property at the time the HECM loan is originated). The previous percentage was set at 97.5 percent. Additionally, mortgagees will be able to submit original notes and mortgages after assignment claim payment rather than before. HUD explained that allowing for earlier claim submission and improving document submission measures will hopefully shorten the time between the HECM reaching 98 percent of MCA and FHA paying the mortgagee for the claim.
FHFA requests feedback on single-family pricing framework
Recently, the FHFA issued a request for input (RFI) on a single-family pricing framework for Fannie Mae and Freddie Mac (GSEs), including feedback on policy priorities and goals that FHFA should pursue in its oversight of the framework. “Through this RFI, FHFA seeks input on how to ensure the pricing framework adequately protects the [GSEs] and taxpayers against potential future losses, supports affordable, sustainable housing and first-time homebuyers, and fosters liquidity in the secondary mortgage market,” FHFA Director Sandra L. Thompson said in the announcement. The RFI also seeks input on the GSEs’ single-family upfront guarantee fees and whether it is appropriate to continue linking those fees to the Enterprise Regulatory Capital Framework. FHFA explained that guarantee fees are intended to cover the GSEs’ administrative costs, expected credit losses, and cost of capital associated with guaranteeing securities backed by single-family mortgage loans. Comments on the RFI are due August 14.
FTC proposes changes to Health Breach Notification Rule
On May 18, the FTC issued a notice of proposed rulemaking (NPRM) and request for public comment on changes to its Health Breach Notification Rule (Rule), following a notice issued last September (covered by InfoBytes here) warning health apps and connected devices collecting or using consumers’ health information that they must comply with the Rule and notify consumers and others if a consumer’s health data is breached. The Rule also ensures that entities not covered by HIPAA are held accountable in the event of a security breach. The NPRM proposed several changes to the Rule, including modifying the definition of “[personal health records (PHR)] identifiable health information,” clarifying that a “breach of security” would include the unauthorized acquisition of identifiable health information, and specifying that “only entities that access or send unsecured PHR identifiable health information to a personal health record—rather than entities that access or send any information to a personal health record—qualify as PHR related entities.” The modifications would also authorize the expanded use of email and other electronic methods for providing notice of a breach to consumers and would expand the required content for notices “to include information about the potential harm stemming from the breach and the names of any third parties who might have acquired any unsecured personally identifiable health information.” Comments on the NPRM are due 60 days after publication in the Federal Register.
The same day, the FTC also issued a policy statement warning businesses against making misleading claims about the accuracy or efficacy of biometric technologies like facial recognition. The FTC emphasized that the increased use of consumers’ biometric information and biometric information technologies (including those powered by machine learning) raises significant consumer privacy and data security concerns and increases the potential for bias and discrimination. The FTC stressed that it intends to combat unfair or deceptive acts and practices related to these issues and outlined several factors used to determine potential violations of the FTC Act.
CFPB issues guide on collecting small-biz data
The CFPB recently issued a compliance guide for its final rule implementing Section 1071 of the Dodd-Frank Act. Consistent with Section 1071, the final rule (issued at the end of March) will require financial institutions to collect and provide to the Bureau data on lending to small businesses, defined as an entity with gross revenue under $5 million in its last fiscal year (covered by InfoBytes here). The guide: (i) includes a detailed summary of the final rule’s requirements, including data reporting deadlines; (ii) provides comprehensive information on the types of data financial institutions need to collect and report on small business lending applications and decisions; and (iii) includes parameters for covered institutions and covered originations. The guide further breaks down reportable data points and explains the final rule’s “firewall” provision, which states that employees and officers of a financial institution or its affiliates “involved in making any determination” on a reportable application are generally prohibited from accessing applicant demographic information relating to ethnicity, race, sex, and status as a minority-owned, women-owned, or LGBTQI+-owned business. The guide specifies that certain exceptions may apply to situations where an employee involved in decision-making must have access to the data to fulfill their assigned job duties (e.g. a loan officer or loan processor). In these situations, financial institutions are required to provide notice to applicants that employees and officers involved in decision-making may have access to their demographic data.
FHFA rescinds GSE fee based on DTI ratios
On May 10, FHFA announced it is rescinding a debt-to-income-based loan-level pricing adjustment announced in January. As previously covered by InfoBytes, FHFA made several changes relating to upfront fees for certain borrowers with debt-to-income (DTI) ratios above 40 percent. The updated and recalibrated pricing grids also included the upfront fee eliminations announced last October to increase pricing support for purchase borrowers limited by income or by wealth, FHFA said at the time. The implementation of the DTI pricing adjustment, which would have affected loans acquired by Fannie Mae and Freddie Mac, was delayed to August 1, but after the mortgage industry and other market participants expressed concerns about implementation challenges, FHFA made the decision to rescind the DTI-ratio based fee to provide additional transparency. The agency will issue a request for public input on the single-family guarantee fee pricing framework shortly.
CFPB: Reopening a closed account could be a UDAAP
On May 10, the CFPB released Circular 2023-02 to opine that unilaterally reopening a closed account without a customer’s permission in order to process a transaction is a likely violation of federal law, particularly if a bank collects fees on the account. “When a bank unilaterally chooses to open an account in someone’s name after they have already closed it, this is a fake account,” CFPB Director Rohit Chopra said in the announcement. “The CFPB is acting on all fronts to halt the harvesting of illegal junk fees.”
The Bureau described receiving complaints from consumers about banks reopening closed accounts and then assessing overdraft/nonsufficient funds fees and monthly maintenance fees. Such practices, the Bureau warned, may violate the Consumer Financial Protection Act’s prohibition on unfair acts or practices. Consumers may experience substantial injury including monetary harm by paying fees due to the unfair practice, the Bureau said, explaining that because consumers likely cannot reasonably avoid the injury, “[a]ctual injury is not required; significant risk of concrete harm is sufficient.” Aside from subjecting consumers to fees, when a bank processes a credit through a reopened account, the consumers’ funds may become available to third parties, including those that do not have permission to access such funds, the Bureau warned, adding that there is also a risk that banks may furnish negative information to consumer reporting agencies if reopening the account overdraws the account and the consumer does not quickly repay the amount owed. The Bureau further noted that deposit account agreements typically indicate that a financial institution “may return any debits or deposits to the account that the financial institution receives after closure and faces no liability for failing to honor any debits or deposits received after closure.”
The Circular explained that rather than reopening an account when a third party attempts to deposit or withdraw money from it, banks should decline the transactions. This allows customers the opportunity to update their information with the entity attempting to access a closed account while avoiding potential fees. “Reopening a closed account does not appear to provide any meaningful benefits to consumers or competition,” the Bureau said in the Circular. “While consumers might potentially benefit in some instances where their accounts are reopened to receive deposits, which then become available to them, that benefit does not outweigh the injuries that can be caused by unilateral account reopening.”