Photo of Kim Phan

Kim is a partner in the firm’s Privacy + Cyber Practice Group, where she is a privacy and data security attorney, who also assists companies with data breach prevention and response, including establishing effective security programs prior to a data breach and the assessment of breach response obligations following a breach.

As previously reported here, on May 25, 2022, the Consumer Financial Protection Bureau (CFPB or Bureau) published a blog post, examining what it described as the “practice of suppressing payment data” by credit card issuers in connection with their credit reporting. In its blog post, the CFPB alleged its research conducted in 2020

As discussed here, on October 27, 2022, the CFPB released an Outline of Proposals and Alternatives Under Consideration for public comments on the CFPB’s Section 1033 rulemaking. The window for providing written feedback closed on January 25, 2023. Below we have highlighted some of the submissions by industry and consumer groups.

The proposed rules

On January 4, the Consumer Financial Protection Bureau (CFPB) issued its 2022 Fall Rulemaking Agenda containing pre-rule, proposed rule, and final rules under consideration. The CFPB releases regulatory agendas twice a year in voluntary conjunction with a broader initiative led by the Office of Budget and Management to publish a Unified Agenda of Regulatory and Deregulatory actions across the federal government. In the preamble to the Federal Register notice, the CFPB states that the information is current as of September 30, 2022 and identifies regulatory matters the CFPB “reasonably anticipates” having under consideration during the period from December 1, 2022, to November 30, 2023. The CFPB has not yet posted a blog or issued a press release about the agenda.

The deadline for complying with certain provisions of the Standards for Safeguarding Customer Information (Safeguards Rule) has been extended to June 9, 2023. As we previously posted, on January 10, the Federal Trade Commission’s (FTC) final rule amending the Safeguards Rule under the Gramm-Leach-Bliley Act became effective. The Safeguards Rule requires nonbanking financial institutions

At the Money 20/20 fintech conference, Consumer Financial Protection Bureau (CFPB) Director Rohit Chopra announced his intent to move forward with the CFPB’s rulemaking under Section 1033 of the Consumer Financial Protection Act as part of the financial services industry’s movement toward “open banking,” a concept that involves the use of APIs that provide direct

Please join Consumer Financial Services Partner Chris Willis and his colleagues Ron Raether and Kim Phan, partners in our Privacy + Cyber Practice Group, as they discuss recent privacy and data security updates in the consumer financial services industry. Topics include:

  • The CFPB’s and FTC’s regulatory stance on privacy and data security issues;
  • The current landscape of privacy legislation; and
  • Emerging trends in privacy and data security litigation, including the status of litigation under the California Consumer Privacy Act, and how businesses can protect themselves going forward.

This blog post was republished by Westlaw Today.

On September 26, Representative French Hill (R-AR) introduced new legislation, H.R. 8985, also known as the Credit Access and Inclusion Act of 2022, to amend the Fair Credit Reporting Act and allow payment information for utility bills and phone payments to be furnished to credit

Troutman Pepper Partner Kim Phan will present “Dawn of the Web3 Era and the Legal Landscape on Blockchain, NFTs, and Metaverses” during NCVAA’s 16th Annual Conference in New York City. With the recent explosion of cryptocurrencies and other blockchain technologies, many companies are looking ahead to what this means for the next generation of the

Please join Consumer Financial Services Partner Kim Phan and her guests and colleagues Alan Wingfield and David Anthony in the second episode of a special four-part series on recent developments with the Consumer Financial Protection Bureau (CFPB). In this episode, topics include the CFPB’s position on preemption issues, Fair Credit Reporting Act (FCRA) state law infringement, and the CFPB’s general position on state interactions and enforcement.