Skip to main content
Menu Icon
Close

InfoBytes Blog

Financial Services Law Insights and Observations

Filter

Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.

  • State Banking Regulators Issue Model Regulatory Framework for Virtual Currency Activities

    Fintech

    On September 15, the Conference of State Bank Supervisors (CSBS) issued its Model Regulatory Framework for State Regulation of Certain Virtual Currency Activities (Model Framework). The CSBS Emerging Payments Task Force developed the Model Framework to assist states in licensing and regulating virtual currency activities. The Model Framework includes key components to a regulatory scheme that the CSBS hopes will protect consumers and the larger marketplace while facilitating innovation. It also defines virtual currency and describes specifically covered virtual currency activities, such as those involving third-party controls of virtual currency. Additionally, the Model Framework provides flexibility in denominating permissible investments, tailoring cybersecurity audits to a company’s business model, and includes an addition to the BSA/AML Compliance section that recommends that states require verification of an entity’s service users and account holders. The Model Framework also includes a supervision component that requires the establishment of policies and procedures that protect customer access to funds in the event of an institutional failure.

    The Model Regulatory Framework for State Regulation of Certain Virtual Activities can be seen here.

    CSBS Virtual Currency

  • Traders Who Allegedly Profited from Hacked News Releases Settle With SEC for $30 Million

    Privacy, Cyber Risk & Data Security

    On September 14, the SEC announced that it had reached a $30 million settlement with two defendants who allegedly profited from trading based on information hacked from newswire services. The settlement stems from an SEC complaint filed in August against 34 defendants for their alleged involvement in an international scheme that generated over $100 million in illegal profits over a five-year period. According to the SEC charges, defendants hacked into newswire services and transmitted stolen data to a network of international traders. The SEC claims that the parties to the settlement made $25 million in illicit profits by buying and selling contracts-for-differences (CFDs) based on hacked press release information they received from other defendants. In the proposed settlement offer, which requires court approval, the two defendants neither admit nor deny the SEC’s allegations, but agree to be enjoined from violating U.S. and SEC securities antifraud provisions, and to return $30 million in alleged illegal profits. The Chief of the SEC Enforcement Division’s Complex Financial Instruments Unit stated that the discovery and prosecution of the scheme “should serve as a shot across the bow of any trader who thinks that CFDs traded outside the United States can be used to mask their unlawful conduct,” and demonstrates the SEC’s “ability to police this opaque market.” The SEC’s case against the remaining 32 defendants remains pending.

    SEC Enforcement Privacy/Cyber Risk & Data Security

  • NYDFS Reaches Agreements with Four Banks on New Symphony Chat & Messaging Platform

    Privacy, Cyber Risk & Data Security

    On September 14, the New York State Department of Financial Services (NYDFS) announced that it had reached agreements with four financial institutions on record-keeping requirements and other protections intended to help ensure the institutions’ responsible use of the new Symphony Communications LLC (Symphony) chat and messaging platform. NYDFS had recently expressed concerns that certain Symphony features, such as its promise of “Guaranteed Data Deletion,” could hinder regulatory investigations on Wall Street. Under the agreements, Symphony will retain for seven years a copy of all electronic communications sent through its platforms to or from the four banks, and the banks will store duplicate copies of the decryption keys for their messages with independent custodians.

    Electronic Records Data Collection / Aggregation NYDFS

  • FCC Cites Two Companies over Unauthorized Telemarketing Allegations

    Privacy, Cyber Risk & Data Security

    On September 11, the FCC issued citations against a Pennsylvania-based financial institution and a transportation network company (TNC), alleging that both companies engaged in unlawful business practices by infringing consumers’ rights to be free of unauthorized telemarketing robocalls to residential and wireless phones. The financial institution’s citation alleges that the bank required customers to agree to receive autodialed telemarketing texts in order to use its online banking and Apple Pay services. The TNC’s citation alleges that, although it allows consumers who sign up for ride-sharing service to opt out of receiving autodialed or prerecorded telemarketing calls and texts, the TNC does not allow users to access the service if they exercise these opt out rights. Both citations allege that these practices violate the FCC’s rules implementing the Telephone Consumer Protection Act (TCPA), and direct the companies to take immediate steps to come into compliance with the FCC’s rules, orders, and the TCPA prohibition against unlawful marketing and advertising calls. The FCC also warned that future violations may result in monetary forfeitures.

    TCPA FCC Enforcement

  • DOJ Unveils New Policy on Individual Liability in White-Collar Prosecutions

    Financial Crimes

    On September 9, the Department of Justice (DOJ), issued a policy memorandum concerning DOJ’s goal of holding individuals accountable for corporate fraud or other misconduct.  While some of the guidelines set forth in the memorandum are statements of practices already being followed by DOJ, or by specific U.S. Attorney’s Offices, some of the measures are new and reflect an enhanced  focus on DOJ’s goal of holding individuals criminally or civilly liable for corporate wrongdoing. The memo sets forth “six key steps” to accomplish this goal and further DOJ’s underlying policies of deterring future illegal activity, incentivizing change in corporate behavior, holding proper parties responsible for their actions, and promoting public confidence in the justice system.

    First, the memo provides that, to be eligible to receive any credit for cooperating with the government in a civil or criminal investigation, a company must completely disclose to DOJ all relevant facts about individual misconduct, regardless of the individual’s position, status or seniority at the company.  If a company provides incomplete information about individual employees’ misconduct, then the company’s cooperation will not be considered a mitigating factor in a criminal investigation and will not support, in the case of a prosecution, a cooperation-related reduction at sentencing.  Likewise, where the company is not completely forthcoming about individual wrongdoing in a civil investigation, DOJ will not consider the company’s cooperation in negotiating a settlement agreement.

    Second, the memo provides that both criminal and civil investigations should focus on individuals from the outset of the investigation, in order to discern the full extent of alleged misconduct, increase the likelihood of cooperation by individuals with knowledge of the misconduct, and maximize the chances that resolution of the investigation will include civil or criminal charges against both the company and culpable individuals.

    Third, the memo emphasizes that DOJ criminal and civil attorneys should be in routine communication with one another, so that the DOJ can consider the full range of potential remedies to address alleged misconduct by individuals.

    Fourth, the memo provides that, absent “extraordinary circumstances,” no corporate resolution will provide protection for criminal or civil liability for any individuals. Fifth, the memo states that DOJ attorneys should not resolve civil or criminal investigations of a corporation without a “clear plan” to resolve related individual cases. In addition, if a decision is made not to prosecute or proceed civilly against individuals who committed the misconduct, DOJ attorneys must memorialize and submit for approval the reasons for that decision.

    Finally, the memo provides that civil prosecutors should consistently focus on individuals as well as the company, and evaluate the decision whether to sue an individual based on considerations beyond the individual’s ability to pay. The memo notes that, while DOJ attorneys may validly consider an individual corporate wrongdoer’s ability to satisfy a judgment in determining whether to pursue an action against that person, DOJ attorneys also should consider other goals and concerns in making this determination, including such things as the seriousness of a person’s misconduct, the person’ s past history, the ability to obtain and sustain a judgment, and the long-term deterrent effects of holding an individual accountable.

    Civil Fraud Actions DOJ Financial Crimes

  • Federal Reserve Appoints Chicago Fed Official to Payments Security Post

    Fintech

    On September 10, the Federal Reserve announced the appointment of Federal Reserve Bank of Chicago Senior Vice President Todd Aadland as its Payments Security Strategy Leader. Aadland will also continue to serve as a Senior Vice President and Chief Information Officer within the Federal Reserve Bank of Chicago’s Customer Relations and Support Office. In his new role, Aadland will lead the Federal Reserve System’s initiatives to address fraud risk, and promote the safety and security of the U.S. payment system. In addition, Aadland will serve as chairman of the Secure Payments Task Force, a group comprised of more than 170 payments stakeholders representing academia, government, and industry. Aadland’s appointment follows a Federal Reserve announcement naming a Faster Payments Strategy Leader tasked with improving the speed and efficiency of current and emerging payment systems.

    Payment Systems Federal Reserve

  • New York AG Settles with Community Bank over Redlining Allegations

    Lending

    On September 10, New York Attorney General Eric Schneiderman announced a settlement agreement with a New York-based community bank to resolve allegations that the bank engaged in discriminatory mortgage lending practices by excluding potential borrowers who resided in predominantly African-American neighborhoods in the Buffalo area. Under terms of the agreement, the bank agreed to revise its consumer and commercial lending policies to eliminate minimum mortgage amount requirements, provide fair lending training, to expand its lending footprint into previously excluded areas, and to establish an $825,000 fund to promote new homeownership and affordable housing opportunities.

    Fair Lending Enforcement Community Banks Discrimination Redlining

  • Treasury Deputy Secretary Raskin Delivers Remarks On Cybersecurity and Insurance

    Privacy, Cyber Risk & Data Security

    On September 10, Deputy Secretary of the Treasury Sarah Bloom Raskin delivered remarks at the Center for Strategic and International Studies Strategic Technologies Program in Washington, D.C. After summarizing threats posed to U.S. companies and strategic interests, citing to notable recent cyberattacks, Raskin laid out the roles governments, the insurance industry, and state insurance regulators can take in responding to cyberattacks.

    Raskin noted that governments can facilitate information-sharing related to cyber threats and deter incidents through law enforcement and diplomatic engagement as well as by imposing financial sanctions on wrongdoers overseas. The insurance sector can gauge the risks and costs posed by cyber incidents and provide an important risk mitigation tool by allowing policyholders to transfer some financial exposure associated with cyber events. The insurance qualification and underwriting process also encourages businesses to engage in increased cybersecurity and risk-mitigation activities. Finally, state insurance regulators can assist response by setting standards for cybersecurity and the protection of the sensitive information of policyholders at the entities that they regulate.

    Department of Treasury Cyber Insurance Privacy/Cyber Risk & Data Security

  • CFPB Issues Consent Orders Regarding Debt Collection Practices

    Consumer Finance

    On September 9, the CFPB ordered the two largest U.S. debt buyers and collectors to pay a combined total of nearly $80 million in civil penalties and consumer restitution related to their debt collection practices. The CFPB alleged that both companies, among other things, engaged in robo-signing, sued (or threatened to sue) on stale debt, made inaccurate statements to consumers, and engaged in other illegal collection practices. In particular, the CFPB criticized the practice of purchasing debts without obtaining important documentation or information about the debt, or verifying to ensure the debts were accurate and enforceable before commencing collection activities. Under the consent orders, one company agreed to provide up to $42 million in consumer refunds, pay a $10 million civil money penalty, and cease collecting on a portfolio of consumer debt with a face value of over $125 million. The other company agreed to provide $19 million in restitution, pay an $8 million civil money penalty, and cease collecting on a consumer debt portfolio with a face value of over $3 million. In addition, both companies are also generally prohibited from reselling consumer debt. In prepared remarks announcing the enforcement action, CFPB Director Richard Cordray noted, “the terms of the orders will help reform and improve the tactics and approaches” within the debt collection market. The CFPB’s action comes as the industry anticipates the CFPB’s issuance of new debt collection rules.

    CFPB FDCPA UDAAP Debt Collection Enforcement Debt Buying

  • Banking Trade Associations Urge Senate Leaders to Pass Regulatory Relief Legislation for Community Institutions

    Consumer Finance

    On September 8, four trade associations representing 14,000 financial institutions – the American Bankers Association, the Credit Union National Association, the Independent Community Bankers of America, and the National Association of Federal Credit Unions – submitted a letter to Senate Banking Committee Chairman Richard Shelby and Ranking Member Sherrod Brown urging them to enact bipartisan legislation that would provide “regulatory relief to community financial institutions.” The letter describes the measures that community banks have been forced to make to address the “growing volume and complexity of regulations,” including cutting back on their loan officers ranks in favor of additional compliance staff and adjusting or eliminating financial products and services offered to consumers. The letter urges the Senate to pass the Financial Regulatory Improvement Act of 2015, S. 1484, which was approved by the Senate Banking Committee in May. This legislation, the letter claims, will “addresses statutory and regulatory obstacles that thwart the ability of community banks and credit unions to fully serve the diverse financial services needs of consumers.”

    U.S. Senate Community Banks

Pages

Upcoming Events