InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
Senate Banking Committee seeks data privacy feedback
On February 13, Senate Committee on Banking, Housing, and Urban Affairs Chairman Mike Crapo (R-ID) and Ranking Member Sherrod Brown (D-OH) invited stakeholder feedback on “the collection, use and protection of sensitive information from financial regulators and private companies” as a means of informing potential future legislation. In a press release issued by the committee, Crapo noted, “Given the exponential growth and use of data, and corresponding data breaches, it is worth examining how the Fair Credit Reporting Act should work in a digital economy, and whether certain data brokers and other firms serve a function similar to the original consumer reporting agencies.” He further stressed the importance of understanding how consumer data is compiled and protected, and how consumers are able to access and correct sensitive information. The release sought answers to five questions designed to help examine ways in which legislation, regulation, or the implementation of best practices can (i) provide consumers better control over their financial data, as well as timely data breach notifications; (ii) ensure consumers receive disclosures concerning both the type of information being collected and its purpose for collection; (iii) provide consumers control over how their data is being used—including the sharing of information by third-parties; (iv) protect consumer data and ensure the accuracy of reported information in a consumer’s credit file; and (v) allow consumers the ability to “easily identify and exercise control of data that is being . . . collected and shared” as a determining factor when establishing whether a consumer is eligible for, among other things, credit or employment.
FTC emphasizes need for privacy and data security legislation
On November 13, the FTC submitted comments in response to the Department of Commerce’s National Telecommunications and Information Administration (NTIA) request for input on developing the Administration’s approach to consumer data privacy protections. In its comment letter, the FTC noted that it supported a balanced approach to privacy, weighing the risks of data misuse with the benefits of data to innovation and competition, and reiterated its support for data privacy legislation. Specifically, the FTC renewed its call for Congressional action that clarifies the FTC’s authority and the rules relating to data security and breach notification. According to the FTC, any such legislation should balance “consumers’ legitimate concerns about the protections afforded to the collection, use, and sharing of their data with business’ need for clear rules of the road, consumers’ demand for data-driven products and services, and the importance of flexible frameworks that foster innovation.”
The FTC emphasized it is “uniquely situated” to balance consumers’ interest in privacy, innovation, and competition and argued it should continue to be the primary enforcer of the laws related to “information flows in the marketplace,” whether it’s under the existing or new privacy framework. The FTC noted, however, that the existing framework places a number of limitations on its powers, including (i) its lack of authority over non-profits and common carriers; (ii) its inability to levy civil money penalties; and (iii) its lack of broad rulemaking authority under the APA for consumer protection issues such as privacy and data security.
Conference of State Bank Supervisors supports legislation to coordinate federal and state examinations of third-party service providers
On July 12, the Conference of State Bank Supervisors (CSBS) issued a statement to the Senate Banking Committee, offering support for legislation that would “enhance state and federal regulators’ ability to coordinate examinations of, and share information on, banks’ [third-party technology service providers (TSPs)] in an effective and efficient manner.” H.R. 3626, the Bank Service Company Examination Coordination Act, introduced by Representative Roger Williams, R-Texas, would amend the Bank Service Company Act to provide examination improvements for states by requiring federal banking agencies to (i) consult with the state banking agency in a reasonable and timely fashion, and (ii) take measures to avoid duplicating examination activities, reporting requirements, and requests for information. Currently, 38 states have the authority to examine TSPs, however, according to CSBS, amending the Bank Service Company Act would more appropriately define a state banking agency’s authority and role when it comes to examining potential risks associated with TSP partnerships. In its statement, CSBS also references a recent action taken by eight state regulators against a major credit reporting agency following its 2017 data breach that requires, among other things, a wide range of corrective actions, including improving oversight and ensuring sufficient controls are developed for critical vendors. (See previous InfoBytes coverage here.) The House Financial Services Committee advanced H.R. 3626 on June 24 on a unanimous vote.
House passes appropriations bill that includes several financial services provisions, brings CFPB into the appropriations process
On July 19, the House passed H.R. 6147, the “Interior, Environment, Financial Services, and General Government Appropriations Act, 2019” by a vote of 217 to 199. Under the appropriations bill, the CFPB would be brought into the appropriations process, and a change to Dodd-Frank would strike the “for-cause” provision on the president’s authority to remove the director, which has been the subject of significant litigation. (See here for continuing InfoBytes coverage on legal challenges to the CFPB’s constitutionality.) Several other financial services provisions would, among other things, (i) amend the Federal Financial Institutions Examination Council Act of 1978 to create an independent examination review director to evaluate bank examination procedures to ensure consistency; (ii) authorize the Federal Reserve to make Volcker Rule exemption determinations and issue and amend rules under Section 13 of the Banking Holding Company Act; (iii) allow the appropriate federal banking agencies to make process improvements for living will submissions; (iv) amend the Fair Credit Reporting Act (FCRA) to allow the furnishing of positive credit reporting related to a consumer’s performance when making payments under a lease agreement with respect to a dwelling or pursuant to a contract for utility or telecommunications services; and (v) require the Comptroller General of the United States to submit a report on the impact of furnishing consumer information, pursuant to the amendments of the FCRA, to Congress no later than two years after the date of the enactment of this Act. As previously covered in InfoBytes, a similar measure concerning the furnishing of consumer data was also introduced as part of S. 488, which passed the House on July 17 as part of a larger package of securities and banking bills. H.R. 6147 now heads to the Senate.
House passes bipartisan package of securities and banking bills focusing on capital market regulations
On July 17, the House passed S. 488, the “JOBS and Investor Confidence Act of 2018” (Act) by a vote of 406 to 4. The package of 32 securities and banking bills now comprises Senate bill S. 488, which previously contained an amendment to the Securities Act Rule 230.701(e) and was included as part of the Economic Growth, Regulatory Relief, and Consumer Protection Act S.2155/P.L. 115-174. The Act focuses on capital market regulations and contains many capital formation provisions designed to, among other things, (i) expand access for smaller companies attempting to raise capital; (ii) reduce regulation for smaller companies such as providing federal stress test relief for nonbanks; (iii) revise crowdfunding provisions to allow for crowdfunding vehicles and the registration of crowdfunding vehicle advisers; (iv) exempt low-revenue issuers from Sarbanes-Oxley Act Section 404; (v) grant banks safe harbor when they keep open certain accounts and transactions at the request of law enforcement; and (vi) clarify various rules, review current securities laws for inefficiencies, and establish additional procedures focusing on virtual currency and money laundering efforts. Additional changes would amend a section of the Exchange Act governing SEC registration of individuals acting as brokers or dealers. The Fair Credit Reporting Act would also be amended to permit entities—including HUD—the ability to furnish data to consumer reporting agencies regarding an individual’s history of on-time payments with respect to a lease, or contracts for utilities and telecommunications services, provided the information about a consumer's usage of the service relates to payment by the consumer for such service or other terms of the provision of that service. S. 488 would also allow certain non-profits conducting charitable mortgage loan transactions to use forms required under the TILA-RESPA Integrated Disclosure Rule, and require the director of the CFPB to issue such regulations as may be necessary to implement those amendments. S. 488 now returns to the Senate for further action.
House passes bill allowing for reporting of rental, telecom, and utility payments to CRAs
On June 25, the House passed H.R. 435, the “The Credit Access and Inclusion Act of 2017.” The bill would amend the Fair Credit Reporting Act to include a section allowing a person or the Department of Housing and Urban Development to furnish information to credit reporting agencies relating to the payment performance of a residential lease agreement, contract for a utility, or contract for a telecommunications service. The bill does not allow an energy utility to furnish information related to the usage of utility services or information related to an outstanding consumer balance if the consumer has entered into a payment plan and is meeting the obligations of the payment plan. Civil liability for violations of the Consumer Credit Protection Act do not apply to violations of the bill.
Trump signs legislation enacting bipartisan regulatory relief bill
On May 24, President Trump signed the Economic Growth, Regulatory Relief, and Consumer Protection Act (S. 2155) (the bill) — which modifies provisions of the Dodd-Frank Act and eases certain regulations on certain smaller banks and credit unions. Upon signing, the White House released a statement quoting the president, “[c]ommunity banks are the backbone of small business in America. We are going to preserve our community banks.”
The House, on May 22, passed the bipartisan regulatory reform bill by a vote of 258-159. The bill was crafted by Senate Banking, Housing, and Urban Affairs Committee Chairman Mike Crapo, R-Idaho and passed by the Senate in March. The House passed the bill without any changes to the Senate version, even though House Financial Services Chairman, Jeb Hensarling, originally pushed for additional reform provisions to be included. Specifically, the bill does not include certain provisions that were part of Hensarling’s Financial CHOICE Act, such as (i) a complete repeal of the Volker Rule; (ii) subjecting the CFPB to the Congressional appropriations process and restructure the agency with a bipartisan commission; and (iii) reducing the Financial Stability Oversight Council’s (FSOC) authority to designate nonbank financial institutions as Systemically Important Financial Institutions (SIFIs).
In response to the bill’s passage, the OCC’s Comptroller of Currency, Joseph Otting, issued a statement supporting the regulatory changes and congratulating the House, “[t]his bill restores an important balance to the business of banking by providing meaningful reductions of regulatory burden for community and regional institutions while safeguarding the financial system and protecting consumers.” Additionally, acting Director of the CFPB, Mick Mulvaney, applauded Congress, noting that the reforms to mortgage lending were “long overdue” and called the bill “the most significant financial reform legislation in recent history.”
As previously covered by InfoBytes, the highlights of the bill include:
- Improving consumer access to mortgage credit. The bill’s provisions state, among other things, that: (i) banks with less than $10 billion in assets are exempt from ability-to-repay requirements for certain qualified residential mortgage loans held in portfolio; (ii) appraisals will not be required for certain transactions valued at less than $400,000 in rural areas; (iii) banks and credit unions that originate fewer than 500 open-end and 500 closed-end mortgages are exempt from HMDA’s expanded data disclosures (the provision would not apply to nonbanks and would not exempt institutions from HMDA reporting altogether); (iv) amendments to the S.A.F.E. Mortgage Licensing Act will provide registered mortgage loan originators in good standing with 120 days of transitional authority to originate loans when moving from a federal depository institution to a non-depository institution or across state lines; and (v) the CFPB must clarify how TRID applies to mortgage assumption transactions and construction-to-permanent home loans, as well as outline certain liabilities related to model disclosure use.
- Regulatory relief for certain institutions. Among other things, the bill simplifies capital calculations and exempts community banks from Section 13 of the Bank Holding Company Act if they have less than $10 billion in total consolidated assets. The bill also states that banks with less than $10 billion in assets, and total trading assets and liabilities not exceeding more than five percent of their total assets, are exempt from Volcker Rule restrictions on trading with their own capital.
- Protections for consumers. Included in the bill are protections for veterans and active-duty military personnel such as: (i) permanently extending from nine months to one year the protection that shields military personnel from foreclosure proceedings after they leave active military service; and (ii) adding a requirement that credit reporting agencies provide free credit monitoring services and credit freezes to active-duty military personnel. The bill also addresses the creation of an identity theft protection database. Additionally, the bill instructs the CFPB to draft federal rules for the underwriting of Property Assessed Clean Energy loans (PACE loans), which would be subject to the TILA ability-to-repay requirement.
- Changes for bank holding companies. Among other things, the bill raises the threshold for automatic designation as a SIFI from $50 billion in assets to $250 billion. The bill also subjects banks with $100 billion to $250 billion in total consolidated assets to periodic stress tests and exempts from stress test requirements entirely banks with under $100 billion in assets. Additionally, certain banks would be allowed to exclude assets they hold in custody for others—provided the assets are held at a central bank—when computing the amount such banks must hold in reserves.
- Protections for student borrowers. The bill’s provisions include measures to prevent creditors from declaring an automatic default or accelerating the debt against a borrower on the sole basis of bankruptcy or cosigner death, and would require the removal of private student loans on credit reports after a default if the borrower completes a loan rehabilitation program and brings payments current.
Each provision of the bill will take effect at various intervals from the date of enactment up to 18 months after.
House passes measures to address identity theft
On April 18, the House passed H.R. 2905 by a vote of 403-3. The “Justice for Victims of IRS Scams and Identity Theft Act of 2017,” would direct the DOJ and the Treasury Department to submit reports to Congress detailing identity theft prosecutions. The DOJ’s report must contain the number of identity theft cases referred to the agency during the previous five years, along with recommendations for improving fraud deterrence, prevention, and interagency collaboration. The bill would also require Treasury to report on efforts to assist in the prosecution of individuals who fraudulently posed as IRS agents, in addition to trends and resources needed to improve the prosecution of IRS impostors. All reports would be due 120 days after the bill's enactment.
On April 17, the House voted 420-1 to pass H.R. 5192, which would, among other things, require the Social Security Administration to provide a database for financial institutions to validate fraud protection data (an individual’s name, social security number, and date of birth) when attempting to “reduce the prevalence of synthetic identity fraud.” In particular, H.R 5192 is designed to protect the needs of vulnerable consumers, including minors and recent immigrants, and limits inquiries to those with a permissible purpose in accordance with section 604 of the Fair Credit Reporting Act. Further, prior to submitting a verification request, a financial institution must receive electronic consumer consent.
House passes bipartisan bill granting Federal Reserve exclusive authority to implement Volcker Rule
On April 13, the House passed H.R. 4790, the “Volcker Rule Regulatory Harmonization Act,” by a vote of 300-104. The bipartisan bill designates the Federal Reserve Board (Fed) as the exclusive regulatory authority to implement and amend rules under Section 13(b) of the Bank Holding Company Act. (Currently the Fed, the OCC, the FDIC, the SEC, and the CFTC share rulemaking authority under the rule.) H.R. 4790 also provides clear exemptions for banking entities with $10 billion or less in consolidated assets or those comprised of five percent or less of trading assets and liabilities. A similar exemption is included in the bipartisan Senate financial regulatory reform bill, S.2155, which passed the Senate in March (previously covered by InfoBytes here). According to a press release issued by the House Financial Services Committee, while H.R. 4790 does not repeal the Volcker Rule—which restricts banking entities from engaging in proprietary trading or entering into certain relationships with hedge and private equity funds—it does create a streamlined, efficient framework to provide increased regulatory clarity for entities required to comply with the rule.
Houses passes two bipartisan bills to ease stress test requirements and nonbank challenges to SIFI designations
On April 11, by a vote of 245-174, the House passed H.R. 4293, the “Stress Test Improvement Act of 2017,” which would amend the Dodd-Frank Act to modify stress test requirements for bank holding companies and certain nonbank financial companies. Among other things, H.R. 4293 prohibits the Federal Reserve Board’s (Board) to object to a company’s capital plan “on the basis of qualitative deficiencies in the company’s capital planning process” when conducting a Comprehensive Capital Analysis and Review (CCAR), and reduces the frequency of stress testing from semiannual to annual. As previously covered in InfoBytes, on April 10, the Board issued its own proposed changes intended to simplify the capital regime applicable to bank holding companies with $50 billion or more in total consolidated assets by integrating the Board’s regulatory capital rule and CCAR and stress test rules.
Separately on April, 11, the House passed H.R. 4061 by a vote of 297-121. The bipartisan bill, “Financial Stability Oversight Council (FSOC) Improvement Act of 2017,” would require FSOC to consider the appropriateness of subjecting nonbank financial companies (nonbanks) designated as systemically important to prudential standards “as opposed to other forms of regulation to mitigate the identified risks.” Among other things, the bill would also require FSOC to allow nonbanks the opportunity to meet with FSOC to present relevant information to contest the designation both during an annual reevaluation, as well as every five years after the date of final determination.