InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
Federal Reserve fines Taiwanese bank $29 million for anti-money laundering compliance deficiencies
On January 17, the Federal Reserve Board (Fed) ordered a Taiwanese bank to pay a $29 million penalty in connection with alleged Bank Secrecy Act and anti-money laundering (BSA/AML) violations. According to the Fed’s Order, examinations conducted in 2016 identified “significant deficiencies” in three of the bank’s U.S. branches’ BSA/AML compliance and risk management controls. In addition to assessing a penalty, the Order required the bank and its New York, Chicago, and San Jose branches to, among other things, (i) submit a written plan from the board of directors for improving senior management oversight, including building a sustainable governance framework for BSA/AML compliance; (ii) submit compliance plans for enhanced internal controls, independent testing, risk assessment, and employee training; (iii) submit a revised program designed to conduct customer due diligence; (iv) ensure timely, accurate, and complete suspicious activity monitoring and reporting; (v) engage an independent third-party to review the identification and reporting of suspicious activity “involving high risk customers or transactions”; (vi) comply with Office of Foreign Assets Control regulations; and (vii) submit periodic progress reports to the branches’ applicable Federal Reserve Banks detailing actions taken to comply with the provisions of the order.
Senate Banking Committee: The impact of cryptocurrency in AML/BSA enforcement
On January 17, the Senate Committee on Banking, Housing, and Urban Affairs held a second hearing with witnesses from the Treasury and Justice departments to further address the need to modernize and reform the Bank Secrecy Act and anti-money laundering (BSA/AML) regime. The hearing, entitled “Combating Money Laundering and Other Forms of Illicit Finance: Administration Perspectives on Reforming and Strengthening BSA Enforcement,” follows a January 9 hearing before the same Committee on related issues (see previous InfoBytes coverage here). Committee Chairman Mike Crapo, R-Idaho, opened the hearing by stating the need to understand the government’s position on “strengthening enforcement and protecting the integrity of the U.S. financial system in a new technological era,” while also recognizing the challenges technology creates for law enforcement. A primary topic of interest to the Committee was “the rise of cryptocurrencies and their potential to facilitate sanctions evasion and perhaps, other crimes.”
The first witness, Treasury’s undersecretary for terrorism and financial crimes, Sigal Mandelker (testimony), noted that money laundering related to cryptocurrencies is “an area of high focus” for Treasury, and highlighted actions taken by Treasury’s Financial Crimes Enforcement Network (FinCEN), such as the release of guidance announcing that “virtual currency exchangers and administrators” are subject to regulations under the BSA. Regulated entities, Mandelker stated, are required to file suspicious activity reports (SARs) and are subject to FinCEN and IRS examinations and enforcement actions. Mandelker further commented that Treasury is “aggressively tackling” illicit financing entering the U.S. system and elsewhere, and stressed that other countries face consequences if they fail to have an AML/Combating the Financing of Terrorism regime that meets Treasury standards.
The second witness, DOJ acting deputy assistant attorney general M. Kendall Day (testimony), informed the Committee of the recent hiring of a digital currency counsel who is responsible for ensuring prosecutors are up-to-date on the latest money-laundering threats in the digital currency field. Day also commented on recent DOJ prosecutions in this space, and emphasized the need for enhanced information sharing for law enforcement, including the benefit of deriving information from SARs.
State AGs file protective petition to stop rollback of net neutrality rules; Senate Democrats announce plans to reverse FCC rule
On January 16, a coalition of 22 state attorneys general filed a protective petition for review in the D.C. Circuit Court of Appeals against the Federal Communications Commission (FCC) and the United States to block the FCC’s Declaratory Ruling, Report and Order released last December to rollback the 2015 Open Internet Order rules (known as “Net Neutrality” rules). As previously covered in InfoBytes, the rollback removes the restrictions barring providers from slowing down or speeding up web traffic based on business relationships, and places the enforcement authority of the new regulatory framework with the Federal Trade Commission (FTC).
In the petition, the states allege violations of the Administrative Procedure Act’s notice-and-comment rulemaking requirements, and claim that the FCC's actions with respect to Net Neutrality were “arbitrary, capricious, and an abuse of discretion.” According to a press release issued by New York Attorney General Eric T. Schneiderman:
The FCC’s new rule fails to justify the Commission’s departure from its long-standing policy and practice of defending net neutrality, while misinterpreting and disregarding critical record evidence on industry practices and harm to consumers and businesses. . . Moreover, the rule wrongly reclassifies broadband internet as a Title I information service, rather than a Title II telecommunications service, based on an erroneous and unreasonable interpretation of the Telecommunications Act. Finally, the rule improperly and unlawfully includes sweeping preemption of state and local laws.
Separately that same day, Senate Democrats announced plans to formally introduce a resolution of disapproval under the Congressional Review Act to reverse the FCC’s vote and restore the Net Neutrality rules. Once the rule is submitted to both houses of Congress, the resolution will be formally introduced, published in the Federal Register, and voted upon within 60 legislative days.
FTC report highlights 2017 privacy and data security enforcement work
On January 18, the FTC released its annual report on the agency’s privacy and data security work performed in 2017. Among other items, the report highlights consumer-related enforcement activities in 2017, including:
- a settlement with a ride-sharing company over allegations that it violated the FTC Act by making deceptive claims about its privacy and data practices (previously covered by InfoBytes here);
- the first EU-U.S. Privacy Shield action resulting in settlements with three companies over allegations that they falsely claimed they were certified to take part in the framework (previously covered by InfoBytes here); and
- a joint settlement with the New Jersey Attorney General against a “smart” television manufacturer for claims that it secretly gathered users’ viewing data and sold it to third parties who used the data for targeted advertising (previously covered by InfoBytes here).
The report also covers the FTC’s approval of TRUSTe’s proposed modifications to its safe harbor program under the Children’s Online Privacy Protection Act of 1998 (COPPA), previously covered by Infobytes here; and the agency’s actions related to the national “Do Not Call” Registry.
Servicemember and bank settle SCRA issue, dismiss Supreme Court request
On January 5, the Supreme Court dismissed a servicemember’s petition for a writ of certiorari after receiving a Stipulation of Dismissal from both parties who agreed to settle the dispute. As previously covered by InfoBytes, the servicemember filed the petition after the U.S. Court of Appeals for the Fourth Circuit affirmed the lower court’s decision that the servicemember was not entitled to the protections against non-judicial foreclosures under the Servicemembers Civil Relief Act (SCRA). The lower court concluded that because the servicemember “incurred his mortgage obligation during his service in the Navy, the obligation was not subject to SCRA protection” even through the servicemember, after a discharge period, later re-enlisted with the Army.
OCC highlights supervisory priorities in fall 2017 semiannual risk report
On January 18, the OCC announced the release of its Semiannual Risk Perspective for Fall 2017, identifying key risk areas for national banks and federal savings associations. Top supervisory priorities will focus on credit, operational, and compliance risk. As previously discussed in the spring 2017 semiannual report, compliance risk continues to be an ongoing concern, particularly as banks continue to adopt new technologies to help them comply with anti-money laundering rules and the Bank Secrecy Act (BSA), in addition to addressing increased cybersecurity challenges and new consumer protection laws. (See previous InfoBytes coverage here.) The OCC commented that these types of risks can be mitigated by banks with “appropriate due diligence and ongoing oversight.”
Specific areas of particular concern include the following:
- easing of commercial credit underwriting practices;
- increasing complexity and severity of cybersecurity threats, including phishing scams that are the primary method of breaching bank data systems;
- using limited third-party service providers for critical operations, which can create “concentrated points of failure resulting in systemic risk to the financial services sector”;
- compliance challenges under the BSA; and
- challenges in risk management involving consumer compliance regulations.
The report also raises concerns about new requirements under the Military Lending Act along with pending changes to data collection under the Home Mortgage Disclosure Act, which could pose compliance challenges. It further discusses a new standard taking effect in 2020 for measuring expected credit losses, which “may pose operational and strategic risk to some banks when measuring and assessing the collectability of financial assets.”
The data relied on in the report was effective as of June 30, 2017.
CFPB succession update: CFPB requests zero funding; seeks public comment regarding Bureau’s activities; & more
On January 17, in a letter to Federal Reserve Chair Janet Yellen, acting CFPB Director Mick Mulvaney requested zero dollars for the Bureau’s quarterly operating funds. Each fiscal quarter, as required by law, the CFPB formally requests that the Federal Reserve transfer a specified amount of money to the Bureau so it can perform the functions outlined in its budget. In his letter, Mulvaney stated that the prior Director maintained a “reserve fund” for the CFPB, and the money in this fund is sufficient to cover the CFPB’s expenses for the second quarter. This will be the first time in the history of the CFPB that its Director has requested no additional amount to fund quarterly operations. The CFPB also announced its plan to publish a series of Requests for Information (RFIs) in the Federal Register seeking public input on the way the Bureau is performing its statutory obligations. These RFIs will request “comment on enforcement, supervision, rulemaking, market monitoring, and education activities.” The first RFI will seek information regarding the Bureau’s Civil Investigative Demand processes and procedures.
On January 18, the CFPB voluntarily dismissed its case against four online installment lenders for allegedly deceiving customers by collecting debts that were not legally owed, previously covered by InfoBytes here. The complaint, filed in the United States District Court for the Northern District of Illinois, alleged, among other things, that the lenders engaged in unfair, abusive, and deceptive acts—a violation of the Dodd-Frank Act—by collecting on installment loans that are partially or wholly void under state law. In September 2017, the case was transferred to Kansas, where the Bureau’s notice of dismissal was filed. The notice does not specify a reason for the dismissal.
CFPB plans to reconsider payday rule
On January 16, the CFPB announced plans to reconsider its final rule addressing payday loans, vehicle titles loans, and certain other extensions of credit (previously covered in a Buckley Sandler Special Alert) by engaging in a rulemaking process. While the announcement was made on the effective date of the final rule, most provisions do not require compliance until August 19, 2019. However, the deadline for submitting a preliminary approval to become a registered information system is April 16, 2018. The Bureau noted that it will consider waiver requests from potential applicants.
Notably, this marks the second recent announcement in which the agency refers to itself as “the Bureau of Consumer Financial Protection,” instead of the more-commonly used “Consumer Financial Protection Bureau.” Both titles are used in the text of the Dodd-Frank Act, though the sections of the Dodd-Frank Act authorizing creation of the CFPB used the “Bureau of Consumer Financial Protection” naming convention. The agency also previously updated its mission statement located at the bottom of each release.
For more InfoBytes coverage on the latest CFPB changes, click here.
New York Senate bill proposes replacing online lending task force with study
On January 8, the New York State Senate Committee on Rules voted to amend legislation to authorize the New York Department of Financial Services (NYDFS) to conduct a study about online lending. The original legislation, S6593A, signed into law by Governor Cuomo on December 29, 2017, created a seven-person task force responsible for analyzing online lending activity in the state. The proposed amendments to this legislation, S07294 and A8938, which would be effective immediately if passed by both houses of the New York legislature and signed into law, remove the requirement for a task force, and instead authorize NYDFS to direct the study and produce a public report with recommendations prior to July 1. According to the amendments, the study should analyze (i) lending practices of the online lending industry and primary differences between online lenders and traditional lenders; (ii) types of credit products available online; (iii) a review of available complaints, actions and investigations related to online lenders; and (iv) a survey of existing state and federal laws that apply to the online lending industry.
City of Philadelphia’s discriminatory lending lawsuit moves forward
On January 16, a federal judge in the U.S. District Court for the Eastern District of Pennsylvania denied a national bank’s motion to dismiss the City of Philadelphia’s (City) claims that the bank engaged in alleged discriminatory lending practices in violation of the Fair Housing Act (FHA). As previously covered in InfoBytes, the City filed a complaint in May of last year against the bank alleging discrimination under both the disparate treatment and disparate impact theories. The City asserted that the bank’s practice of offering better terms to similarly-situated, non-minority borrowers or refusing to make loans in minority neighborhoods has led to foreclosures and vacant homes, which in turn, has resulted in a suppression of property tax revenue and increased cost of providing services such as police, fire fighting, and other municipal services. In support of its motion to dismiss, the bank argued, among other things, that the City’s claim (i) is time barred; (ii) improperly alleges the disparate impact theory; and (iii) fails to allege proximate cause as required by a recent U.S. Supreme Court ruling (see previous Special Alert here).
While the court expressed “serious concerns about the viability of the economic injury aspect of the City’s claim with regard to proximate cause,” the court found that the bank “has not met its burden to show why the City’s entire FHA claim should be dismissed.” Consequently, the court held that the case may proceed to discovery beyond the two-year statute of limitations period for FHA violations in order to provide the City an opportunity to prove whether the bank’s policy caused a racial disparity that constituted a violation continuing into the limitations period.