Federal regulators recently took two coordinated steps that significantly shift expectations for how lenders and banks treat non‑work authorized individuals and their employers. On June 5, the Consumer Financial Protection Bureau (CFPB or Bureau) issued a formal statement on how immigration status should factor into ability‑to‑repay determinations under the Truth in Lending Act (TILA) and Regulation Z. On the same day, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN), jointly with the federal banking agencies and in coordination with the Internal Revenue Service (IRS), released a detailed advisory on fraud, payroll schemes, and money laundering risks associated with the unlawful employment of non-work authorized persons, including specific guidance regarding the use of Individual Taxpayer Identification Numbers (ITINs) and Suspicious Activity Reports (SARs).

On June 4, the Federal Deposit Insurance Corporation (FDIC) filed an amicus brief in the Tenth Circuit’s en banc rehearing of National Association of Industrial Bankers v. Weiser, supporting industry plaintiffs and arguing that the Depository Institutions Deregulation and Monetary Control Act of 1980 (DIDMCA) § 525’s phrase “loans made in such State” refers to the state where the bank is located and performs key lending functions, not where the borrower resides. The filing confirms the FDIC’s historical position on the DIDMCA opt out and directly bears on the limited applicability of Colorado’s opt out and UCCC rate caps.

Yesterday, President Trump signed an Executive Order titled “Integrating Financial Technology Innovation into Regulatory Frameworks.” The Order directs federal financial regulators to review and streamline regulations, guidance, supervisory practices, and application processes that may impede financial technology (fintech) innovation and competition, and it asks the Federal Reserve to evaluate potential direct access to Reserve Bank accounts and services for uninsured depository institutions and certain non‑bank financial firms, including digital asset companies. The Order is the latest in a series of administration actions aimed at positioning the U.S. as a global leader in digital assets and financial technology.

On May 15, the Office of the Comptroller of the Currency (OCC) finalized two closely linked rules on mortgage escrow accounts that respond directly to the issues we discussed in our recent post, Second Circuit on Remand in Cantero: New York Escrow-Interest Law Is Preempted, Over a Vigorous Dissent. In that decision, the Second Circuit held that New York’s 2% interest‑on‑escrow statute is preempted as applied to national banks under the Barnett Bank standard, deepening a circuit split with the First and Ninth Circuits. The OCC’s new rules both adopt the Second Circuit’s view of the underlying bank powers and attempt to bring regulatory clarity to the interest‑on‑escrow preemption question for OCC‑regulated institutions nationwide.

On May 12, the Colorado legislature passed Senate Bill 26‑189, a substantial rewrite of its 2024 law establishing consumer protections for artificial intelligence (formerly referred to as the CO AI Act), and replaced it with a more targeted framework for “automated decision‑making technology” (ADMT). The changes will take effect on January 1, 2027.

Yesterday, California Governor Gavin Newsom announced the appointment of Rohit Chopra, former Director of the Consumer Financial Protection Bureau (CFPB) and former Federal Trade Commission (FTC) Commissioner, as Secretary of the state’s new Business and Consumer Services Agency (BCSA). The new cabinet‑level agency, which formally launches on July 1, 2026, is designed to consolidate and elevate state‑level consumer and market oversight at a moment when federal enforcement is being scaled back. Governor Newsom framed the move as bringing “one of the nation’s most prominent consumer protection leaders” into state government to crack down on corporate abuse, curb junk fees, and lower costs for Californians.