All Entries

Subscribe to All Entries via RSS

Yesterday, the Consumer Financial Protection Bureau (CFPB or Bureau) filed a brief in the U.S. District Court for the Northern District of Texas in support of its motion to dissolve the preliminary injunction that has stayed the implementation of its credit card late fee rule. Concurrently, the Bureau also filed a notice of supplemental authority in support of their motion to dismiss or transfer on the grounds that the Fort Worth Chamber of Commerce does not have associational standing to bring the suit. Within hours, the court issued an order requiring further briefing on the issue of associational standing.

Dear Mary,

I am the privacy compliance officer at a cloud-based software company. We recently experienced an incident where, although none of our client’s data was compromised, it appears that our employees’ information may have been copied and removed from our environment. This information includes employees’ full names, salaries, and salary schedules. All of our employees reside in California, and given the CCPA’s broad definition of personal information, I am assuming notification will be required?

– Frowning in Fresno

After several attempts in the Missouri legislature, last week Governor Mike Parson signed a Commercial Financing Disclosure Law. This legislation requires certain disclosures to be made by providers of commercial purpose closed-end and open-end loans, and sales-based financing transactions. The law will take effect six months after the Division of Finance finalizes promulgating rules or on February 28, 2025, if the Division does not intend to promulgate rules.

As we predicted here, the Consumer Financial Protection Bureau (CFPB or Bureau) last week proposed new and, in some cases, streamlined rules governing what mortgage servicers must do after a borrower becomes delinquent. The proposed rules incorporate some pandemic-era practices, such as allowing servicers to offer assistance without a comprehensive review of the borrower’s financial situation. According to the CFPB, the new rules would require mortgage servicers to prioritize loss mitigation over foreclosing, reduce paperwork requirements, improve communication with borrowers, and ensure critical information is provided in the borrowers’ preferred language.

As discussed here, on February 3, 2023, an Illinois federal court dismissed a case brought by the Consumer Financial Protection Bureau (CFPB or Bureau) in 2020 against Townstone Financial, Inc., a Chicago mortgage lender, for alleged violations of the Equal Credit Opportunity Act (ECOA). The CFPB had accused Townstone of discouraging prospective African American applicants in the Chicago metropolitan area from applying for mortgages.

On July 5, the California Privacy Protection Agency (CPPA) published a Notice of Proposed Rulemaking regarding Data Broker Registration pursuant to Senate Bill 362 (the Delete Act). The Delete Act requires the CPPA to establish an accessible deletion mechanism. This mechanism allows a consumer, through a single verifiable consumer request, to request that every data broker delete any personal information related to that consumer held by the data broker or associated service provider or contractor. The stated aim of the proposed rulemaking is to clarify and enhance the registration process for data brokers.

The California Department of Financial Protection and Innovation (DFPI) has once again modified its proposed rulemaking on earned wage access (EWA) products. As discussed here, this spring the Office of Administrative Law (OAL) rejected the proposed regulations for failure to comply with the clarity standard of the Administrative Procedure Act (APA) and failure to follow the required APA procedures. These new modifications attempt to address those concerns.

Dear Mary,

One of our employees recently fell victim to a phishing attack, allowing unauthorized access to their email account for a brief period. To be safe, we reset everyone’s passwords and terminated all active sessions. We’re now in the process of hiring a law firm to determine if we need to notify anyone about the incident. It’s taking a little longer to get them engaged, but I’m hoping to have this done soon. In the meantime, is there anything else we should be considering?

– Not Entirely Clueless in Connecticut

On July 1, amendments to Florida’s Consumer Finance Act took effect. Among other things, the amendments raise the maximum tiered interest rates on consumer finance loans, increase the grace period before late fees can be imposed from 10 to 12 days, require licensees to offer free credit education courses to borrowers at the time a loan is made, provide for the suspension of certain collection activities in the event of a disaster, and require branches of businesses making consumer finance loans to obtain a license.