Photo of Ronald I. Raether, Jr.

Ron leads the firm’s Privacy + Cyber team. Drawing from nearly 30 years of experience, he provides comprehensive services to companies in all aspects of privacy, security, data use, and risk mitigation. Clients rely on his in-depth understanding of technology and its application to their business to solve their most important challenges — from implementation and strategy to litigation and incident response. Ron and his team have redefined the boundaries of typical law firm privacy and cyber services in offering a 360 degree approach to tackling information governance issues. Their holistic services include drafting and implementing bespoke privacy programs, program implementation, licensing, financing and M&A transactions, incident response, privacy and cyber litigation, regulatory investigations, and enforcement experience.

Please join us for a special cross-over episode of FCRA Focus and The Consumer Finance Podcast, where Troutman Pepper Partners Chris Willis, Dave Gettings, Kim Phan, and Ron Raether look at the latest developments in the CFPB’s FCRA rulemaking process. Topics include:

On October 24, the Biden-Harris administration announced amendments to the regulations implementing title IV of the Higher Education Act of 1965 (HEA). According to the fact sheet, the amendments are intended to allow the Department of Education (ED) to better protect students from the negative effects of sudden college closures, restrict colleges from withholding course credits paid for with federal money from students’ transcripts, require colleges to clearly communicate how much financial aid students will receive, and provide a more streamlined process for states to approve postsecondary opportunities for students without a high school diploma or its equivalent. The amended regulations will take effect on July 1, 2024.

On October 30, President Biden issued a sweeping Executive Order calling on Congress to enact privacy laws and directing federal agencies to review existing rules and potentially explore new rulemakings governing the use of artificial intelligence (AI) across various sectors of the U.S. economy. Among other things, the Executive Order will require AI system developers to submit safety test results to the federal government, establish standards for detecting AI-generated content to fight consumer fraud, and develop AI tools to identify and fix vulnerabilities in critical software. According to the White House fact sheet, the stated goal of the Executive Order is to “ensure that America leads the way in seizing the promise and managing the risks of [AI].” To that end, the Executive Order focuses on national security, privacy, discrimination and bias, healthcare safety, workplace surveillance, innovation, and global leadership.

The Delete Act (SB 362), signed into law by California Gov. Gavin Newsom on October 10, imposes additional disclosure and registration requirements on data brokers. It requires data brokers to support deletion requests through a central “deletion mechanism” managed by the California Privacy Protection Agency (CPPA). The law also empowers consumers to request deletion of their personal information from all registered data brokers with a single submission.

On October 12, the U.S. District Court for the Northern District of Illinois denied certification of a putative class action asserting that TransUnion violated the Fair Credit Reporting Act (FCRA) and the Missouri Merchandising Practices Act (MMPA) by allegedly misleading consumers about the accuracy and popularity of VantageScore 1.0, TransUnion’s proprietary credit scoring model. The court held that the plaintiff was an inadequate class representative due to his lack of credibility, and the asserted class claims failed both the commonality and predominance prongs of Federal Rule of Civil Procedure (FRCP)23.

A new enforcement action provides more detail on the expectations of the Consumer Financial Protection Bureau (CFPB) and Federal Trade Commission (FTC) (collectively, the agencies) for the content of tenant screening reports.

As discussed here, on September 21 the Consumer Financial Protection Bureau (CFPB) released an outline of its plans for rulemaking under the Fair Credit Reporting Act (FCRA). The outline was supplied for initial comment to a panel of small business representatives convened under the Small Business Regulatory Enforcement Fairness Act (SBREFA).

The Consumer Financial Protection Bureau (CFPB) today outlined a plan for rulemaking under the Fair Credit Reporting Act (FCRA) that could significantly impact the entire consumer data ecosystem. The proposed rulemaking could redefine “data brokers” and “data aggregators” and extend FCRA regulation to businesses that do not currently meet the FCRA’s definition of “consumer reporting agency.” The CFPB’s plan could also impose stricter rules for obtaining consumer consent and increase compliance requirements and risks for both new and existing members of the FCRA-regulated consumer data ecosystem.

Join us for the third episode in a special three-part series covering the CFPB’s intention to propose new rules under the Fair Credit Reporting Act (FCRA). In this episode, Troutman Pepper Partners Chris Willis, Dave Gettings, Kim Phan, Ethan Ostroff, and Ron Raether discuss the potential implications of regulating data brokers under the FCRA, and how this might affect data brokers as well as other types of entities, including users, consumer reporting agencies, and resellers.

Join us for the third episode in a special three-part series covering the CFPB’s intention to propose new rules under the Fair Credit Reporting Act (FCRA). In this episode, Troutman Pepper Partners Chris Willis, Dave Gettings, Kim Phan, Ethan Ostroff, and Ron Raether discuss the potential implications of regulating data brokers under the FCRA, and how this might affect data brokers as well as other types of entities, including users, consumer reporting agencies, and resellers.