All Entries

Subscribe to All Entries via RSS

On October 2, the Consumer Financial Protection Bureau (CFPB or Bureau) published a final rule in the Federal Register, officially extending compliance dates for its 2023 small business lending data collection and reporting rule under the Equal Credit Opportunity Act (ECOA) and Regulation B, which implements Section 1071 of the Dodd-Frank Act. The final rule replaces an interim rule released in June 2025 that pushed back compliance deadlines. This extension was issued by the CFPB in response to ongoing litigation by both industry and consumer advocacy groups, as well as court orders, to create a uniform timeline for financial institutions to comply with data collection and reporting requirements for women-owned, minority-owned, and small businesses.

On September 29, the California Department of Financial Protection and Innovation (DFPI) announced significant modifications to the proposed regulations under the Digital Financial Assets Law (DFAL) and the Money Transmission Act (MTA). These changes are part of an ongoing effort to refine the regulatory framework governing digital financial assets and ensure clarity in the application of these laws.

According to a recent report by WebRecon, court filings under the Fair Credit Reporting Act (FCRA), Fair Debt Collection Practices Act (FDCPA), Telephone Consumer Protection Act (TCPA), and complaints filed with the Consumer Financial Protection Bureau (CFPB) were all down for the month of August. However, year over year, only FDCPA complaints have decreased, and not by much.

Recently, the U.S. Department of Housing and Urban Development (HUD) issued two memoranda that clarify HUD’s role in enforcing the Fair Housing Act (FHA), explain how future enforcement efforts will proceed, and officially rescind several guidance documents related to disparate impact and redlining, among other topics.

On September 17, California Governor Gavin Newsom signed Assembly Bill 144 (AB 144) into law, a move in response to recent changes in immunization recommendations by the U.S. Food and Drug Administration (FDA). The bill, which took effect immediately, mandates that health plans cover a wide range of preventive care services, including immunizations, without cost-sharing or utilization management. This legislation is particularly noteworthy for its implications on vaccine coverage requirements.

On September 15, Oregon Governor Tina Kotek signed into law House Bill 3178, introducing new requirements for auto dealers in the state. This legislation aims to standardize certain aspects of auto finance transactions, specifically those involving retail installment contracts (RICs) or lease agreements, and ensure clarity in the car-buying process. The law will take effect in 2026.

On September 19, the U.S. Department of the Treasury issued an Advance Notice of Proposed Rulemaking (ANPRM) seeking public input on the implementation of the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act. This ANPRM builds upon the Request for Comment on Innovative Methods to Detect Illicit Activity Involving Digital Assets issued by Treasury on August 18, which remains open for comment until October 17, 2025.

Key point: Plaintiffs’ attorneys have started sending a wave of letters asserting opt-out and access rights under California’s Shine the Light law.

Over the last three months, businesses have been receiving requests from California residents seeking to exercise their rights under California’s Shine the Light law, Cal. Civ. Code § 1798.83. These requests are sent by attorneys who purport to represent a California resident who is a “customer” of, and has an “established business relationship” with, the business receiving the request. The requests seek an accounting of the customer’s personal information disclosed to third parties for direct marketing purposes within the past year.