Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
On March 28, the U.S. District Court for the Central District of California entered a stipulated final judgment and order resolving the CFPB’s allegations against a California-based company for allegedly buying and selling personal information from payday and installment loan applications without properly vetting buyers and sellers. As previously covered by InfoBytes, the CFPB’s December 2015 complaint alleged that, among other things, the company (i) knew or should have known that the lead generators in its network used false or misleading statements to obtain consumer information; and (ii) connected consumers with lenders that offered less favorable loan terms than were otherwise available, did not comply with state usury limits, or claimed they were exempt from state regulation and jurisdiction. The stipulated order requires the company to pay $1 million for consumer redress and $3 million in civil money penalties. Additionally, the company is banned from acting as a lead generator, lead aggregator, or data broker in connection with the offering of certain loans. The company neither admitted nor denied the allegations.
On September 26, the FCC announced that it fined a telemarketer and associated companies more than $82 million for using allegedly illegal caller ID spoofing to market and generate leads for health insurance sales in violation of the Truth in Caller ID Act (the Act). The Act prohibits telemarketers from purposefully falsifying caller ID information with the intent to harm, defraud consumers, or wrongfully obtain anything of value. The FCC alleges that the telemarketer made more than 21 million robocalls with spoofed caller ID information, which makes it difficult for consumers to register complaints and for law enforcement to track and stop the illegal calls. According to the related Forfeiture Order (FCC 18-134), the FCC rejected the telemarketer’s argument that the value he received from the calls was not “wrongfully obtained,” concluding that the calls were placed without prior consent, including contacting consumers on the Do Not Call registry, and that the telemarketer knew the tactics he used to obtain the insurance leads were unlawful. The FCC also rejected the telemarketer’s request to reduce the penalty, stating “the proposed forfeiture of $82,106,000 properly reflects the seriousness, duration, and scope of [the telemarketer]’s violations.”
On September 15, the FTC issued a paper summarizing the insights garnered through its October 2015 “Follow the Lead” workshop on lead generation. As previously covered in InfoBytes, the workshop focused on lead generation issues in the mortgage and education lending space. The FTC paper “detail[s] the mechanics of online lead generation and potential benefits and concerns associated with lead generation for both businesses and consumers.” The paper provides a synopsis of payday lenders’ role in the lead generation industry by describing their use of the “ping tree,” an automated process that enables aggregators to sell consumers’ personal information to lenders or other aggregators. Although the paper acknowledges that lead generators provide potential benefits to consumer, including the ability to offer competitive prices in the mortgage lending space, it never-the-less identifies the following key areas of concern: (i) complexity and lack of transparency surrounding industry policies and processes; (ii) the use of potentially aggressive or deceptive marketing techniques; and (iii) the potential misuse and mishandling of consumers’ personal information in the payday lending space.
On October 30, the FTC hosted a workshop on online lead generation titled “Follow the Lead.” The workshop focused on lead generation in the mortgage and education lending space and consisted of a number of discussion panels composed of industry representatives, consumer advocates, and FTC regulators.
The first panel was primarily an overview of how web-based advertising is executed and how leads are generated using a variety of methods. Also discussed were the data analytics used to validate and assign value to the data collected. It was also noted that large media companies, such as Google and Facebook, have enacted policies restricting advertisements by participants in certain industries.
The second and third panels focused on online lead generation policies and practices in consumer and education lending, respectively. Industry participants and consumer advocates discussed varying policy viewpoints with respect to the practice of buying and selling data of consumers viewing a particular type of website to participants in a different industry. For instance, lead generators gathering data from consumers searching for jobs and then selling that data to providers of educational services. The panelists generally agreed that this practice was not inherently abusive, but could be harmful when implemented with intent to mislead. All generally agreed that guidance from the FTC and other government agencies would be useful to the extent that standards of conduct and transparency could be more clearly proscribed.
The fourth panel focused on consumer protections and the legal landscape of the lead generation industry. Consumer advocates noted that the process is often opaque and that consumers are generally unaware that their data may be sold multiple times and is often dispersed much further than they intended by seeking information about or applying for a specific product or service. It was also noted that consumer data is an asset for the entity that collected it and the pressure to monetize these assets results in the data being sold to anyone willing to pay for it, including those with an intent to commit fraud. Finally, the issue was raised that collected data exists forever, with the only restriction on the longevity of the information generally being that fact that information loses value as it becomes less current.
The panelists generally agreed that more transparency about the policies of the information collecting entity would be beneficial, with one noting that consumers will not read long policy disclosures, and therefore short statements notifying consumers of the potential uses of their data be provided at the point that data is collected. The panelists also generally agreed that the sellers of data should more carefully vet the buyers of that data and, conversely, data buyers should also more carefully vet the sellers. All panelists repeated the general theme that more guidance from agencies such as the FTC with respect to lead generation and data collection policies and best practices would be welcomed.
On October 19, the FTC announced the agenda for its upcoming workshop entitled, “Follow the Lead: An FTC Workshop About Online Lead Generation.” As consumers search the internet for goods and services, they are often times asked to provide sensitive personal and financial information that a lead generator may then subsequently transfer to third-party marketing companies. The workshop will examine consumer protection issues raised as a result of the practices of the lead generation industry, and is scheduled to host the following panels in Washington, DC on October 30: (i) Introduction to Lead Generation Marketplace and Mechanics; (ii) Case Study on Lead Generation in Lending; (iii) Case Study on Lead Generation in Education; (iv) Overview of Consumer Protection Concerns and the Legal Landscape; and (v) Looking Ahead – Protecting and Educating Consumers.
On April 7, Illinois Attorney General (AG) Lisa Madigan sued a payday loan lead generator to enforce a 2012 cease and desist order issued by the state’s Department of Financial and Professional Regulation. The regulator and the AG assert that the state’s Payday Loan Reform Act (PLRA), which broadly defines “lender” to include “any person or entity . . . that . . . arranges a payday loan for a third party, or acts as an agent for a third party in making a payday loan, regardless of whether approval, acceptance, or ratification by the third party is necessary to create a legal obligation for the third party,” required the lead generator to obtain a license before operating in Illinois. The AG claims that the lead generator violated the state’s Consumer Fraud and Deceptive Business Practices Act by offering and arranging payday loans in knowing violation of the PLRA’s licensing and other requirements. The suit also alleges that the lead generator knowingly matched Illinois consumers with unlicensed members of the generator’s payday lender network. The AG is seeking a permanent injunction and a $50,000 civil penalty. On the same day, the AG also announced it filed suits against four online payday lenders for failing to obtain a state license, making payday loans with interest rates exceeding state usury caps, and otherwise violating state payday loan limitations. Those suits ask the court to permanently enjoin the lenders from operating in Illinois and declare all existing payday loan contracts entered into by those lenders null and void, with full restitution to borrowers.
On December 3, New York Governor Andrew Cuomo announced that the state Department of Financial Services (DFS) sent subpoenas to 16 online “lead generation” companies as part of its expanding investigation into online payday lending. The DFS alleges the target companies are engaged in deceptive or misleading marketing of illegal, online payday loans in New York, and claims lead generation companies offer access to quick cash to encourage consumers to provide sensitive personal information and then sell that information to, among others, payday lenders operating unlawfully in New York. The DFS publicly kicked off an investigation of online payday lending earlier this year when it sent letters to 35 online lenders, including lenders affiliated with Native American Tribes, demanding that they cease and desist offering allegedly illegal payday loans to New York borrowers. Under New York law, it is civil usury for a company to make a loan or forbearance under $250,000 with an interest rate exceeding 16% per year, and a criminal violation to make a loan with an interest rate exceeding 25% per year. The DFS cites as part of the basis for its expanded investigation consumer complaints about false and misleading advertising (including celebrity endorsements), harassing phone calls, suspicious solicitations, privacy breaches, and other issues.
Florida District Court Orders Disgorgement of Profits from Unfair, Deceptive Online Payday Loan Referral Practices
On July 18, the U.S. District Court for the Middle District of Florida held that an online payday loan referral business engaged in unfair and deceptive billing practices and failed to provide adequate disclosures to its customers. FTC v. Direct Benefits Group, LLC, No. 11-1186, 2013 WL 3771322 (M.D. Fla. Jul. 18, 2013). The FTC alleged that the defendants violated the FTC Act by obtaining consumers’ bank account information through payday loan referral websites and debiting their accounts without their consent. The FTC also alleged that the defendants failed to adequately disclose that, in addition to using consumers’ financial information for a payday loan application, they would use it to charge them for enrollments in unrelated programs and services. During a bench trial, the parties presented evidence and arguments regarding the content and operation of the websites and whether consumers could enroll in the referral programs without taking affirmative steps to do so. The court agreed with the FTC’s claims that the defendants’ practices were deceptive and held that the “pop-up box” used to enroll consumers in the programs at issue was misleading. The court explained that the defendants’ website and the online payday loan application form created the overall impression that they were intended for applying for payday loans and that the bank account information that applicants were asked to enter would be used for deposit of the payday loan—not so that the account could or would be debited for the purchase of an unrelated product or service. Further, the court held that the defendants’ disclosures were not clear and conspicuous under the principles included in the FTC’s “.com disclosures guidance.” The court also held that the FTC established that the billing practices were unfair, and ordered the defendants to disgorge over $9.5 million and permanently cease the practices at issue.
On November 7, the U.S. District Court for the Middle District of Florida held that numerous factual issues prevented the court from granting summary judgment on the FTC’s claims that an online payday loan referral business engaged in unfair and deceptive billing practices and failed to provide adequate disclosures. FTC v. Direct Benefits Group, LLC, No 11-1186, 2012 WL 5430989 (M.D. Fla. Nov. 7, 2012). The FTC alleges that the defendants violated the FTC Act by obtaining consumers’ bank account information through payday loan referral websites and debiting their accounts without their consent. The FTC also alleges that the defendants failed to adequately disclose that, in addition to using consumers’ financial information for a payday loan application, they would use it to charge them for enrollments in unrelated programs and services. Although it acknowledged that the FTC had presented substantial evidence regarding consumer complaints about the defendants’ activities, the court held that because the defendants maintain that no consumer could be enrolled in the programs without at least clicking an “okay” button on the defendants’ websites, the FTC was not entitled to summary judgment. A bench trial is scheduled for November 27, 2012, during which the parties will present additional evidence and arguments regarding the content and operation of the websites and whether consumers could enroll in the referral programs without taking affirmative steps to do so.
On July 30, Arizona Attorney General Tom Horne announced an agreement with an Internet lead generator that requires the firm to halt operations through which it solicited information on behalf of payday lenders. Under state law, lenders have been prohibited from offering payday loans to Arizona consumers since July 2010. The Attorney General alleged that the settling company operated a website that collected Arizona consumers’ personal information and then sold that information to payday lenders who subsequently offered illegal payday loans to those consumers. While the agreement requires that the lead generator cease collecting and transmitting consumer information in connection with any type of consumer loan, it does not include any monetary payment beyond attorney fees.
- Amanda R. Lawrence to discuss "Navigating the challenges of the latest data protection regulations and proven protocols for breach prevention and response" at the ACI National Forum on Consumer Finance Class Actions and Government Enforcement
- Tim Lange to discuss "Ease your pain at the state level: Recommendations for navigating the licensing issues in the states" at the Online Lenders Alliance Compliance University
- Amanda R. Lawrence, Aaron C. Mahler, and Jonice Gray Tucker to discuss "Expanded role for the FTC ahead: Implications for bank and nonbank financial institutions" at an American Bar Association Banking Law Committee Webinar
- Buckley Webcast: Flirting with alternatives — Opportunities and challenges created by alternative data, modeling, and technology
- Daniel P. Stipano to discuss "Reporting requirements for credit unions: CTRs and SARs" at the National Association of Federally-Insured Credit Unions BSA Seminar
- Daniel P. Stipano and Moorari K. Shah to discuss "Vendor management: What is the NCUA looking for?" at the National Association of Federally-Insured Credit Unions BSA Seminar
- Sasha Leonhardt and John B. Williams to discuss "Privacy" at the National Association of Federally-Insured Credit Unions Summer Regulatory Compliance School
- Warren W. Traiger to discuss "CRA modernization" at the National Association of Industrial Bankers and the Utah Association of Financial Services Annual Convention
- Benjamin W. Hutten to discuss "Requirements for banking inherently high-risk relationships" at the Georgia Bankers Association BSA Experience Program
- Hank Asbill to discuss "Ethical guidance in conducting internal investigations – The intersection of Yates and Upjohn" at the American Bar Association Southeastern White Collar Crime Institute
- Brandy A. Hood to discuss "RESPA Section 8/referrals: How do you stay compliant?" at the New England Mortgage Bankers Conference
- Daniel P. Stipano to discuss "Risk management in enforcement actions: Managing risk or micromanaging it" at the American Bar Association Business Law Section Annual Meeting
- Daniel P. Stipano to discuss "Navigating the conflicting federal and state laws for doing business with cannabis companies" at the American Bar Association Business Law Section Annual Meeting
- Tim Lange to discuss "Services and value" at the North American Collection Agency Regulatory Association Annual Conference
- Amanda R. Lawrence to discuss "Data privacy litigation" at the Mortgage Bankers Association Regulatory Compliance Conference
- Brandy A. Hood to discuss "How to ace your TRID exam" at the Mortgage Bankers Association Regulatory Compliance Conference
- Jonice Gray Tucker to discuss "HMDA data is out, now what?" at the Mortgage Bankers Association Regulatory Compliance Conference
- Daniel P. Stipano to discuss "Assessing the CDD final rule: A year of transitions" at the ACAMS AML & Financial Crime Conference
- Daniel P. Stipano to discuss "Lessons learned from recent enforcement actions and CMPs" at the ACAMS AML & Financial Crime Conference
- Melissa Klimkiewicz to discuss "Navigating FHA rules and regs" at the Mortgage Bankers Association Regulatory Compliance Conference
- Kathryn L. Ryan to discuss "The state’s role in fintech: Providing an industry framework for innovation" at Lend360
- Amanda R. Lawrence to discuss "How to balance a successful (and stressful) career with greater personal well-being" at the American Bar Association Women in Litigation Joint CLE Conference