Photo of Carlin McCrory

Carlin McCrory

Subscribe to Carlin McCrory's Posts

A seasoned regulatory and compliance attorney, Carlin brings extensive experience representing financial institutions, fintechs, lenders, payment processors, neobanks, virtual currency companies, and mortgage servicers.

Follow:Read more about Carlin McCroryCarlin's Linkedin Profile

In this special crossover episode of The Crypto Exchange and Payments Pros podcasts, hosts Ethan Ostroff and Carlin McCrory, along with James Stevens, co-leader of Troutman Pepper Locke’s Financial Services Industry Group, explore the dynamic landscape of partnerships between financial institutions and digital asset firms. They discuss the increasing demand for payment enablement, highlighting how these institutions facilitate fiat currency transactions through strategic collaborations with digital asset providers.

In this crossover episode of Payments Pros and The Consumer Finance Podcast, Carlin McCrory is joined by colleague Kim Phan to discuss the Consumer Financial Protection Bureau’s (CFPB) recent developments regarding Section 1033 of the Consumer Financial Protection Act (CFPA). This summer, the CFPB initiated a new rulemaking process, inviting industry comments on its final rule concerning personal financial data rights. With a deadline of October 21 for public comments, industry participants are encouraged to weigh in on access to consumer financial information.

In this episode of Payments Pros, Carlin McCrory is joined by colleague Kim Phan to discuss the Consumer Financial Protection Bureau’s (CFPB) recent developments regarding Section 1033 of the Consumer Financial Protection Act (CFPA). This summer, the CFPB initiated a new rulemaking process, inviting industry comments on its final rule concerning personal financial data rights. With a deadline of October 21 for public comments, industry participants are encouraged to weigh in on access to consumer financial information.

In this episode of Payments Pros, hosts Keith Barnett and Carlin McCrory examine the recent $5 million settlement between the Federal Trade Commission (FTC) and Paddle.com, a UK-based payment processor. The discussion centers on the FTC’s allegations against Paddle for violating the Restore Online Shoppers’ Confidence Act (ROSCA) and the Telemarketing Sales Rule (TSR). Paddle’s practice of aggregating merchant transactions under its own name led to significant compliance issues with card network rules and masked chargeback levels and disputes. The settlement imposes strict prohibitions on Paddle, including barring it from processing payments for tech support merchants and requiring enhanced client screening and monitoring.

On August 8, the Consumer Financial Protection Bureau (CFPB or Bureau) published a series of proposed rules aimed at redefining what constitutes a “larger participant” in several key financial markets. Under § 1024 of the Consumer Financial Protection Act, the Bureau’s supervisory authority extends to “larger participants” offering consumer financial products or services. The proposed rules seek to amend existing thresholds in the consumer reporting, auto financing, consumer debt collection, and international money transfer markets to better align with current market conditions and regulatory priorities. The Bureau is accepting comments on these proposals until September 22, 2025.

In a significant ruling, the U.S. Court of Appeals for the Ninth Circuit affirmed the dismissal of a consumer’s state law claims against a federal credit union on federal preemption grounds. The putative class action plaintiff’s claims challenged the credit union’s $15 dollar returned-check fee under California’s Unfair Competition Law (UCL), arguing it was an “unfair” and “unlawful” business practice, especially since the check the plaintiff deposited was declined without any funds being made available to him. The Ninth Circuit upheld the district court’s ruling that the plaintiff’s state law unfair competition claim was preempted by 12 C.F.R. § 701.35, which states expressly that state laws regulating bank fees do not apply to federal credit unions.

In this episode of Payments Pros, Carlin McCrory is joined by Pete Jeydel, a partner in the firm’s White Collar Litigation + Investigations Practice Group, to discuss the new Department of Justice (DOJ) Data Security Program (DSP), which took effect earlier this year. The DSP, administered by the DOJ’s National Security Division, aims to enhance protection for sensitive personal data linked to U.S. persons for activity involving countries of concern like China and Russia. Pete explains that this regulatory framework is distinct from traditional data privacy laws, emphasizing national security over individual consent and contractual protections. The program emerged rapidly following an executive order from President Biden in February 2024, reflecting long-standing concerns about foreign data access.

In a significant turn of events, the Consumer Financial Protection Bureau (CFPB or Bureau) has decided to initiate a new rulemaking process concerning its final rule on personal financial data rights under Section 1033 of the Consumer Financial Protection Act of 2010 (1033 rule). This decision comes amidst ongoing legal challenges, notably from Forcht Bank, N.A.; Kentucky Bankers Association; and the Bank Policy Institute, which filed a lawsuit immediately after the 1033 rule was finalized challenging it.

On July 18, America’s Credit Unions sent a letter to the Honorable Kyle Hauptman, Chairman of the National Credit Union Administration (NCUA), urging the agency to initiate rulemaking that would allow credit unions to take custody of digital assets for their members. This request comes in the wake of the recently enacted “Guiding and Establishing National Innovation for U.S. Stablecoins Act of 2025” (GENIUS Act), which provides a comprehensive federal framework for the regulation of payment stablecoins.