InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
NYDFS proposes student loan servicers regulation
On July 31, NYDFS published a notice of proposed rulemaking in the New York State Register. The proposed rule would implement legislation related to the supervision, regulation, and licensing of private student loan servicers passed in March as part of the state’s FY 2020 budget. As previously covered by InfoBytes, unless exempt from certain provisions, student loan servicers must comply with the requirements set forth in the amendments to the banking law and be licensed by NYDFS in order to service student loans owned by residents of New York. Entities exempt from the licensing requirements include servicers of federal student loans, banking organizations, foreign banking organizations, national banks, federal savings associations, federal credit unions, or any bank or credit union organized under the laws of any other state.
Among other things, the proposed regulation outlines servicing standards, examination guidelines, cybersecurity compliance requirements, and definitions for the terms “unfair” and “abusive.” A list of prohibited practices is also provided, which includes: (i) employing schemes to defraud or mislead borrowers; (ii) engaging in unfair, deceptive, abusive, or predatory acts or practices; (iii) “misapplying payments to the outstanding balance of any student loan or to any related interest or fees”; (iv) making false statements or omissions connected to information provided to a government agency; (v) failing to promptly respond to communications received from NYDFS; and (vi) failing to provide responses to consumer complaints.
Generally, the requirements will take effect October 9, with the exception of a phased-in transition period for certain cybersecurity provisions related to 23 NYCRR Part 500 that gives student loan servicers until April 9, 2020 to comply. Comments on the proposed regulation are due September 30.
NYDFS announces multistate investigation of payroll advance industry
On August 6, NYDFS announced it is leading a multistate investigation into the payroll advance industry based on allegations of unlawful online lending. According to NYDFS, the investigation will focus on whether companies are violating state banking laws, including usury limits, licensing laws, and other applicable laws regulating payday lending. NYDFS alleges that some companies appear to collect unlawful interest rates disguised as “tips” as well as monthly membership and/or excessive additional fees, and may collect improper overdraft charges.
In addition to New York, other states in the investigation include: Connecticut, Illinois, Maryland, New Jersey, North Caroline, North Dakota, Oklahoma, Puerto Rico, South Carolina, South Dakota, and Texas.
NYDFS creates fintech Research and Innovation Division
On July 23, NYDFS announced its newly created Research and Innovation Division, led by Matthew Homer as Executive Deputy Superintendent. “The financial services regulatory landscape needs to evolve and adapt as innovation in banking, insurance and regulatory technology continues to grow,” NYDFS Superintendent Linda Lacewell stated. “This new division and these appointments position [NYDFS] as the regulator of the future, allowing the Department to better protect consumers, develop best practices, and analyze market data to strengthen New York’s standing as the center of financial innovation.” The Research and Innovation Division, which will house NYDFS’ division responsible for supervising and licensing virtual currencies, will also assess technology efforts focusing on financial exclusion, consumer data protection rights, and financial services innovation. Among the appointees, NYDFS highlighted Homer’s recent experience as head of policy and research at a New York fintech company that provides open banking functionality for financial services providers, as well as his experience in emerging technology and financial inclusion at various federal agencies.
Japanese bank pays $33 million to settle NYDFS claims of weak BSA/AML controls
On June 24, the New York Department of Financial Services (NYDFS), together with the New York Attorney General, announced a $33 million settlement with a Japanese bank resolving allegations the bank’s internal controls—specifically, its anti-money laundering (AML), Bank Secrecy Act (BSA), and Office of Foreign Assets Control (OFAC) sanctions compliance programs—at its New York Branch were “systematically deficient” between November 2014 and November 2018. This allegedly resulted in violations of state and federal laws and regulations, as well as two previous NYDFS consent orders from 2013 and 2014. The settlement resolves an action that was commenced by the bank against NYDFS in connection with a 2017 application with the OCC to convert its state-licensed branches in New York, Illinois, and California and its state-licensed agency offices in Texas to federally licensed branches and agency offices. The action sought to block a NYDFS order that would keep the bank under its supervisory purview notwithstanding the OCC’s granting of the federal charter. The settlement indicates that neither NYDFS, NYAG, or the bank admit any wrongdoing, but have agreed to dismiss all outstanding claims, upon the bank’s monetary payment. The settlement states that NYDFS releases the bank of any further obligations related to the previous consent orders and notes that it “will not attempt to exercise any visitorial power or other supervisory, regulatory, or enforcement authority over [the bank] or its branches or agencies.”
NYDFS creates Cybersecurity Division
On May 22, NYDFS announced its newly created Cybersecurity Division, led by Justin Herring as Executive Deputy Superintendent, that is, according to NYDFS, “the first of its kind to be established at a banking or insurance regulator.” The new division will focus on enforcing and issuing guidance on NYDFS’ cybersecurity regulation 23 NYCRR Part 500, advising on cybersecurity examinations, conducting cyber-related investigations, and disseminating information related to cyber-attack trends and threats. NYDFS highlighted Herring’s experience in supervising cybercrime and digital currency cases as Chief of the U.S. Attorney’s Office for the District of New Jersey Cyber Crimes Unit and a member of the Economic Crimes Unit, including investigating money laundering using digital currency and prosecuting unlicensed digital currency exchanges.
OCC wants final judgment in NYDFS fintech charter challenge
On May 30, the OCC filed a letter with the U.S. District Court for the Southern District of New York notifying the court that it intends to work with NYDFS to issue a proposed final order to the court in the action challenging the OCC’s decision to allow fintech companies to apply for a Special Purpose National Bank Charter (SPNB). As previously covered by InfoBytes, in May, the court denied the OCC’s motion to dismiss, concluding that, among other things, the OCC failed to rebut NYDFS’s claims that the proposed national fintech charter posed a threat to the state’s ability to establish its own laws and regulations, and therefore, the challenge “is ripe for adjudication.” In its letter, the OCC states that while it “disagrees with the Court’s decision, and reserves its right to appeal, it believes that the decision renders entry of final judgment in this matter appropriate.” An entry of final judgment, would allow the OCC to challenge the decision with the U.S. Court of Appeals for the 2nd Circuit.
NYDFS fintech charter lawsuit survives challenge
On May 2, the U.S. District Court for the Southern District of New York denied the OCC’s motion to dismiss a complaint filed by NYDFS arguing that the agency’s decision to allow fintech companies to apply for a Special Purpose National Bank Charter (SPNB) is a move that will destabilize financial markets more effectively regulated by the state. (See previous InfoBytes coverage here.) The court, however, stated that because the OCC failed to rebut NYDFS’s claims that the proposed national fintech charter posed a threat to the state’s ability to establish its own laws and regulations, the challenge “is ripe for adjudication.” Specifically, NYDFS alleged that granting a national charter to fintech firms would limit its ability to regulate non-depository institutions and could potentially lead to a loss in revenue derived from assessments levied against state licensed institutions. The court rejected the OCC’s preemption arguments, writing that the “threats to New York's sovereignty are so clear that the OCC does not even mention, let alone contest, the state's interests. Instead, OCC focuses exclusively on constitutional and prudential ripeness.” The court further dismissed the OCC’s ripeness argument that it has yet to receive, review, or approve a SPNB application, and referred to NYDFS’ allegations that the OCC has “invited fintech companies . . . to discuss SPNB charters,” which potentially demonstrates “at least some demand for, and interest in, such charters.” While the court concedes that the potential for fintech companies to “flout” New York's laws would only occur once a fintech company has applied and been granted a SPNB charter, “those steps do not stymie [NYDFS’s] standing.”
In addressing NYDFS’s Administrative Procedures Act claim, the court found, among other things, that engaging in the “business of banking” under the National Bank Act (NBA) “unambiguously requires receiving deposits as an aspect of the business.” Furthermore, the court concluded that “absent a statutory provision to the contrary, only depository institutions are eligible to receive [a SPNB] from [the] OCC.” However, the court dismissed NYDFS’s claims that a SPNB charter conflicts with state law in violation of the Tenth Amendment of the U.S. Constitution. According to the court, while NYDFS has standing to raise a Tenth Amendment claim, it has failed to state such a claim “because federal law preempts state law only when ‘Congress has clearly expressed its intent,’” and in this instance, “the operative question is not whether the federal government has the power to take the action challenged in this case, but whether Congress has, in fact exercised that power.”
NYDFS creates Consumer Protection and Financial Enforcement Division
On April 29, NYDFS announced its newly created Consumer Protection and Financial Enforcement Division, led by Katherine Lemire as Executive Deputy Superintendent. The new office combines the Enforcement and Financial Frauds division with the Consumer Protection division and is responsible for ensuring compliance, fighting consumer fraud, and assisting NYDFS with the enforcement of the state’s Banking, Insurance and Financial Services laws. The office will have a particular investigative focus on the response to cybersecurity events and the creation of supervisory, regulatory and enforcement policy in the area of financial crimes. Prior to her new role, Lemire served as Assistant United States Attorney in the Southern District of New York where she investigated complex federal crimes, and as a prosecutor in the Manhattan District Attorney’s Office.
German-headquartered financial institution to pay $1.3 billion for Iran sanctions violations
On April 15, U.S. regulators announced settlements totaling $1.3 billion with several banking units of a German-headquartered financial institution to resolve allegations by the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC), the DOJ, the Federal Reserve Board, the New York Department of Financial Services (NYDFS), and the New York County District Attorney’s Office of apparent violations of multiple sanctions programs, including those related to Burma, Cuba, Iran, Libya, Sudan, and Syria. According to OFAC’s announcement, between January 2007 and December 2011, the institution’s banking units in Germany, Austria, and Italy processed thousands of payments through U.S. financial institutions on behalf of sanctioned entities “in a manner that did not disclose underlying sanctioned persons or countries to U.S. financial institutions which were acting as financial intermediaries.”
According to the settlement agreements (see here, here, and here), OFAC considered various aggravating factors, and noted, among other things, that the institution’s banking units failed to sufficiently enforce policies addressing OFAC sanctions concerns or restrict the processing of transactions in U.S. dollars involving persons or countries subject to sanctions programs administered by OFAC. Additionally, OFAC asserted that the Austrian banking unit claimed on several occasions that OFAC’s sanctions programs “were not legally binding or relevant to [the bank].” OFAC further stated that while the banking units failed to voluntarily self-disclose the alleged violations, they have each agreed to implement and maintain compliance commitments to minimize the risk of the recurrence of the alleged conduct.
NYDFS denies virtual currency license for BSA/AML compliance deficiencies
On April 10, NYDFS announced that it denied a company’s applications to engage in virtual currency business and money transmission activity in New York due to the company’s alleged deficiencies in BSA/AML and Office of Foreign Assets Control (OFAC) compliance requirements, capital requirements, and token and product launches. According to the denial letter, the company applied for a virtual currency business activity license in August 2015, and had been operating under NYDFS’ virtual currency “safe harbor” ever since. Additionally, in July 2018, the company applied to engage in money transmission activity with the state. According to NYDFS, the state’s licensing law requires an applicant to demonstrate the ability to comply with the provisions of the licensing requirements, including “implementing an effective BSA/AML/OFAC compliance program as well as other measures to protect customers and the integrity of the virtual currency markets.” Based on NYDFS’ four-week on-site review of the company’s operations, NYDFS concluded, among other things, that the company’s BSA/AML/OFAC compliance program lacked (i) adequate internal policies, procedures and controls; (ii) a qualified, effective compliance officer; (iii) adequate employee training; (iv) adequate independent program testing; and (v) adequate customer due diligence. The company is required to immediately cease operating in New York State and doing business with New York residents and has 60 days to wind down or transfer its positions and transactions.