InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
CFPB issues Supervisory Highlights special edition on consumer reporting
On December 9, the CFPB released a special edition of its fall 2019 Supervisory Highlights, focusing on recent supervisory findings in the areas of consumer reporting and information furnishing to consumer reporting companies (CRCs). This is the second special edition to focus on consumer reporting issues, and follows a report that the Bureau released in March 2017 covered by InfoBytes here. According to the Bureau, recent supervisory reviews of FCRA and Regulation V compliance have identified new violations as well as compliance management system (CMS) weaknesses at CFPB-supervised institutions. However, the Bureau noted that examiners have also observed significant improvements, such as continued investment in FCRA-related CMS.
Highlights of the supervisory findings include:
- Recent examples of CMS weaknesses and FCRA/Regulation V violations (where corrective action has either been taken or is currently being taken) in which one or more (i) mortgage loan furnishers did not maintain policies and procedures “appropriate to the nature, size, complexity, and scope of the furnisher’s activities”; (ii) auto loan furnishers’ policies and procedures failed to provide sufficient guidance for investigating indirect disputes containing allegations of identity theft; (iii) debt collection furnishers’ policies and procedures failed to differentiate between FCRA disputes, FDCPA disputes, or validation requests, leading to a lack of consideration for applicable regulatory requirements when handling these matters; and (iv) deposit account furnishers lacked written policies and procedures for furnishing or validating the information provided to specialty CRCs.
- Examiners found that one or more furnishers provided information they knew, or had reasonable cause to believe, was inaccurate. Examples include inaccurate derogatory status codes due to coding errors and unclear addresses for consumers to submit disputes.
- Examiners discovered several instances where furnishers failed to send prompt notifications to CRCs after determining that information previously furnished was inaccurate, including situations where furnishers failed to promptly update or correct information after consumers paid charged-off balances in full or discharged them in bankruptcy.
- Examiners found that some furnishers reported the incorrect date of the first delinquency in connection with their responsibility to provide notice of delinquent accounts to CRCs.
- Examiners found several instances where furnishers failed to investigate disputes, complete investigations in a timely manner, or notify consumers of certain determinations related to “frivolous or irrelevant” disputes.
The Bureau also discussed supervisory observations concerning CRC compliance with FCRA provisions, and commented that CRCs continue to (i) improve procedures concerning the accuracy of information contained in consumer reports; (ii) implement improvements to prevent consumer reports from being furnished to users who lack a permissible purpose; (iii) strengthen procedures to “block information that a consumer has identified as resulting from an alleged identity theft”; and (iv) investigate and respond to consumer disputes.
CFPB settles with two military loan companies
On November 25, the CFPB announced a settlement with two companies that originated and serviced travel-related loans for military servicemembers and their families. According to the consent order with the lender and its principal, the lender (i) charged fees to customers who obtained financing, at a higher rate than those customers who paid in full, but failed to include the fee in the finance charge or APR; (ii) falsely quoted low monthly interest rates to customers over the phone; and (iii) failed to provide the required information about the terms of credit and the total of payments in violation of TILA and the TSR. The consent order prohibits future lending targeted to military consumers and requires the lender and its principal to pay a civil money penalty of $1. The order also imposes a suspended judgment of almost $3.5 million, based on an inability to pay.
In its consent order against the servicer, the Bureau asserts the servicer engaged in deceptive practices by overcharging servicemembers for debt-cancellation products and, in violation of the FCRA’s implementing Regulation V, never established or maintained written policies and procedures regarding the accuracy of information furnished to credit reporting agencies. The consent order issues injunctive relief and requires the servicer to (i) pay a $25,000 civil money penalty; (ii) provide redress to consumers who were allegedly overcharged for the debt-cancellation product; (iii) pay over $54,000 in restitution to borrowers with no outstanding balance on their loans and issue additional account credits to borrowers with outstanding balances; and (iv) establish reasonable policies and procedures for accurate reporting to consumer reporting agencies.
CFPB reaches $8.5 million settlement with background screening company
On November 22, the CFPB announced a settlement with an employment background screening company resolving allegations that the company violated the FCRA. In the complaint, the Bureau asserts that the company failed to “employ reasonable procedures to assure maximum possible accuracy” in the consumer reports it prepared. Specifically, the Bureau claims that until October 2014, the company matched criminal records with applicants based on only two personal identifiers, which created a “heightened risk of false positives” in commonly named individuals. The company also had a practice of including “high-risk indicators,” sourced from a third party, in its consumer reports and did not follow procedures to verify the accuracy of the designations. Additionally, the Bureau asserts that the company failed to maintain procedures to ensure that adverse public record information was complete and up to date, resulting in reporting outdated adverse information in violation of the FCRA. Under the stipulated judgment, in addition to injunctive relief, the company will be required to pay $6 million in monetary relief to affected consumers and a $2.5 million civil money penalty.
FCRA allowable disclosure charge remains unchanged
On November 27, the CFPB announced that the ceiling on the maximum allowable charge for disclosures by a consumer reporting agency to a consumer pursuant to section 609 of the FCRA will remain unchanged at $12.50 for the 2020 calendar year. The final rule announcing the amount was published the same day in the Federal Register.
11th Circuit reinstates FCRA suit, addresses “false pretenses”
On November 12, the U.S. Court of Appeals for the Eleventh Circuit issued an order reversing in part and affirming in part a district court’s dismissal of claims brought by a consumer who claimed a bank violated the Fair Credit Reporting Act (FCRA) and the FDCPA when it allegedly provided debt information using a “false name” to a credit reporting agency and requested the consumer’s credit report without a proper purpose. In 2016, the consumer filed a lawsuit asserting the bank (i) violated the FDCPA by using a name other than its true name in connection with the collection of debt; and (ii) violated the FCRA when it failed to investigate the accuracy of the information provide to the credit reporting agency, and requested his credit report without a permissible purpose. The district court dismissed the complaint for failure to state a claim.
On appeal, the 11th Circuit affirmed the dismissal of the FDCPA claim, concluding that, while the false-name exception stipulates that the FDCPA applies to a creditor that uses any name other than its own when collecting its own debts (which may indicate a third party was collecting or attempting to collect the debt), the exception does not apply in this instance because “even the least sophisticated consumer” would understand that the bank and the entity named in the consumer report were related. However, the appellate court held that the district court erred in dismissing the FCRA claims. According to the opinion, the consumer stated three plausible claims for relief, including that the bank failed to investigate the accuracy of the information it sent, as required when a dispute arises, and that it unlawfully obtained his credit report. The 11th Circuit noted that while it has never addressed the meaning of “false pretenses” under the FCRA, it now joins other courts in holding that “intentionally obtaining a credit report under the guise of a permissible purpose while intending to use the report for an impermissible purpose can constitute false pretenses.” Moreover, the appellate court noted that while the bank may have obtained the consumer’s credit report for proper purposes, or that it may have disclosed the true purpose to the credit reporting agency, “this fact question cannot be resolved on a motion to dismiss.”
9th Circuit allows FCRA action to move forward against national bank
On October 31, the U.S. Court of Appeals for the Ninth Circuit, in a split panel decision, reversed the district court’s dismissal of a consumer’s FCRA action against a national bank alleging the bank obtained her credit report for an impermissible purpose. According to the opinion, the consumer filed the complaint against the bank after reviewing her credit report and noticing the bank had submitted “numerous credit report inquiries” in violation of the FCRA because she “did not have a credit relationship with [the bank]” as specified in the FCRA and, therefore, the inquiries were not for a permissible purpose. The bank moved to dismiss the action, arguing that the consumer did not suffer any injury from the credit inquiries. The district court agreed, and dismissed her claim with prejudice for lack of standing and failure to state a claim.
On appeal, the majority disagreed with the district court, concluding that (i) a consumer suffers a concrete injury in fact when a credit report is obtained for an impermissible purpose; and (ii) a consumer only needs to allege that her credit report was obtained for an impermissible purpose to survive a motion to dismiss. The appellate majority emphasized that the consumer does not have the burden of pleading the actual purpose behind the bank’s use of her credit report; the burden is on the defendant to prove the credit report was obtained for an authorized purpose. Moreover, the majority noted that the consumer alleges she only learned about the bank’s inquiry after reviewing her credit report and, therefore, it is implied “that she never received a firm offer of credit from [the bank],” and taken together with the fact that the bank actually obtained her credit report, she stated a plausible claim for relief.
One panel judge concurred in part and dissented in part, arguing that the consumer had standing but failed to state a plausible claim. Specifically, the judge argued that “the majority characterize[d] [the] plaintiff’s claim in terms of ‘possibility,’” but “mere possibility of liability does not plead a plausible claim.” Moreover, the judge disagreed with the majority’s conclusion that the defendant bears the burden of proof in these instances, stating “the Supreme Court has expressly placed the burden of pleading a plausible claim squarely on the plaintiff rather than on the defendant.”
California governor signs CCPA amendments
On October 11, the California governor signed several amendments to the California Consumer Privacy Act (CCPA) and other privacy-related bills. As previously covered by a Buckley Special Alert, AB 874, AB 1355, AB 1146, AB 25, and AB 1564 leave the majority of the consumer’s rights intact in the CCPA and clarify certain provisions—including the definition of “personal information.” Other exemptions were added or clarified regarding the collection of certain data that have a bearing on financial services companies. Notable revisions to the CCPA include the (i) “personal information” definition; (ii) FCRA exemption; (iii) employee exemption; (iv) business individual exemption; (v) verification and delivery requirements; (vi) privacy policy and training requirements; (vii) collection of information; and (viii) vehicle/ownership information exemption. The various amendments are effective on January 1, 2020, the same day the CCPA becomes effective.
Additionally, on October 10, the California attorney general released the highly anticipated proposed regulations implementing the CCPA. See the Buckley Special Alert for details of the proposed regulations.
Class certification granted in FCRA suit against credit reporting agency
On October 1, the U.S. District Court for the Central District of California granted a plaintiff’s motion for class certification in an action against a national credit reporting agency for allegedly failing to follow reasonable procedures to assure maximum possible accuracy in the plaintiffs’ credit reports, in violation of the FCRA. As previously covered by InfoBytes, the credit reporting agency allegedly failed to delete all of the accounts associated with a defunct loan servicer, despite statements claiming to have done so in January 2015. As of October 2015, 125,000 accounts from the defunct loan servicer were still being reported, and the accounts were not deleted until April 2016. The class action alleges that the credit reporting agency violated the FCRA by continuing to report the past-due accounts, even after deleting portions of the positive payment history on the accounts. After the district court initially granted summary judgment in favor of the credit reporting agency, the U.S. Court of Appeals for the Ninth Circuit revived the lawsuit, holding that a “reasonable jury could conclude that [the credit reporting agency’s] continued reporting of [the account], either on its own, or coupled with the deletion of portions of [the consumer’s] positive payment history on the same loan, was materially misleading.”
In certifying a class of all persons whose credit report contained an account originated after January 21, 2015, from the defunct loan servicer, the district court concluded that the “Defendant’s failure to use maximum reasonable procedures to prevent the continued reporting of delinquent [loan servicer] accounts—presents a clear risk of material harm to Plaintiff’s concrete interest in accurate credit reporting.” The court rejected the credit reporting agency’s argument that the named plaintiff must prove standing on behalf of the entire class, determining that “for all the same reasons Plaintiff has standing, it’s at least possible that the unnamed class members also have standing.” Moreover, the court rejected the argument that damages should be an individual question because many class members “likely suffered no injury at all.” The court concluded that the fact that each class member may “collect slightly different amounts of statutory damages is insufficient, without more, to defeat a showing of predominance in this case.”
CFPB files claims against Maryland debt collectors
On September 25, the CFPB filed a complaint in the U.S. District Court for the District of Maryland against a debt collection entity, its subsidiaries, and their owner (collectively, “defendants”) for allegedly violating the FCRA, FDCPA, and the CFPA. In the complaint, the Bureau alleges that the defendants violated the FCRA and its implementing Regulation V by, among other things, failing to (i) establish or implement reasonable written policies and procedures to ensure accurate reporting to consumer-reporting agencies; (ii) incorporate appropriate guidelines for the handling of indirect disputes in its policies and procedures; (iii) conduct reasonable investigations and review relevant information when handling indirect disputes; and (iv) furnishing information about accounts after receiving identity theft reports about such accounts without conducting an investigation into the accuracy of the information. The Bureau separately alleges that the violations of the FCRA and Regulation V constitute violations of the CFPA. Additionally, the Bureau alleges that the defendants violated the FDCPA by attempting to collect on debts without a reasonable basis to believe that consumers owed those debts. The Bureau is seeking an injunction, damages, redress to consumers, disgorgement, the imposition of a civil money penalty, and costs.
CFPB issues summer 2019 Supervisory Highlights
On September 13, the CFPB released its summer 2019 Supervisory Highlights, which outlines its supervisory and enforcement actions in the areas of automobile loan origination, credit card account management, debt collection, furnishing, and mortgage origination. The findings of the report cover examinations that generally were completed between December 2018 and March 2019. Highlights of the examination findings include:
- Auto loan origination. The Bureau noted that one or more examinations found that guaranteed asset protection (GAP) products were sold to consumers with low loan-to-value (LTV) loans, resulting in those consumers purchasing a product that was not beneficial to them. The Bureau concluded these sales were an abusive practice, as “the lenders took unreasonable advantage of the consumers’ lack of understanding of the material risks, costs, or conditions of the product.”
- Credit card account management. The Bureau found several issues with credit card account servicing, including violations of Regulation Z for failing to clearly and conspicuously provide disclosures required by triggering terms in online advertisements and for offsetting consumers’ credit card debt against funds that the consumers had on deposit with the issuers without sufficient indication that the consumer intended to grant a security interest in those funds.
- Debt collection. The Bureau noted violations of the FDCPA’s prohibition on falsely representing the amount due when debt collectors claimed and collected interest that was not authorized by the underlying contracts between the debt collectors and the creditors.
- Credit information furnishing. The Bureau found multiple violations of the FCRA, including furnishers failing to complete dispute investigations within the required time period and failing to promptly send corrections or updates to all applicable credit reporting agencies after a determination that the information was no longer accurate.
- Mortgage origination. The Bureau noted that creditors had violated Regulation Z by disclosing inaccurate APRs for closed-end reverse mortgages and also by using a unit-period of one month instead of one year to calculate the total annual loan cost (TALC) rate and the future value of all advances, leading to inaccurate TALC disclosures.
The report notes that in response to most examination findings, the companies have taken, or are taking, remedial and corrective actions, including by identifying and compensating impacted consumers and updating their policies and procedures to prevent future violations.
Lastly, the report also highlights the Bureau’s recently issued rules and guidance.