On October 27, the Federal Trade Commission (FTC) announced a final rule amending the Standards for Safeguarding Customer Information (Safeguards Rule) under the Gramm-Leach-Bliley Act. The Safeguards Rule requires nonbanking financial institutions to develop, implement, and maintain a comprehensive information security program to keep their customers’ information safe. The amendment will require financial institutions to notify the FTC no later than 30 days after discovery of a security breach involving the information of 500 or more consumers. The amendment will go into effect 180 days after publication of the final rule in the Federal Register.

On October 24, the Federal Trade Commission (FTC) and the Wisconsin Department of Justice announced a settlement with Wisconsin auto dealer group Rhinelander Auto Center, Inc. (Rhinelander), its current and former owners, and general manager. The lawsuit was brought under the FTC Act, the Equal Credit Opportunity Act (ECOA), the Wisconsin Deceptive Trade Practices Act, and the Wisconsin Consumer Act.

A new enforcement action provides more detail on the expectations of the Consumer Financial Protection Bureau (CFPB) and Federal Trade Commission (FTC) (collectively, the agencies) for the content of tenant screening reports.

On October 11, the Consumer Financial Protection Bureau (CFPB or Bureau) published a special edition of its Supervisory Highlights report. This report serves as a “victory lap” for the Bureau, which highlights the relief it has obtained for consumers since the release of its March 2023 Special Fees Edition, discussed here. According to the Bureau, its supervisory efforts have led to institutions refunding over $140 million to consumers, including $120 million in overdraft and non-sufficient funds (NSF) fees.

The Third Circuit Court of Appeals overruled a district court’s reading of an exception into §1681s-2(b) of the Fair Credit Reporting Act (FCRA) that would allow a furnisher discretion to refuse to investigate an indirect dispute it deems frivolous or irrelevant. Instead, the Third Circuit held that a furnisher must investigate even frivolous indirect disputes — disputes submitted by a consumer first to a consumer reporting agency (CRA) that are then transmitted by the CRA to the furnisher. A copy of the decision can be found here.

Yesterday, the Consumer Financial Protection Bureau (CFPB) and Federal Trade Commission (FTC) (collectively, the agencies) filed an amici curiae brief urging the U.S. Court of Appeals for the Second Circuit to reverse a district court’s decision finding a furnisher’s investigation of a consumer’s dispute and subsequent furnishing of the disputed information to be reasonable under the Fair Credit Reporting Act (FCRA).

On August 16, a coalition of seven state attorneys general (AG) announced a settlement with participants alleged to be involved in a “massive” robocall operation. The stipulated order, which names Scott Shapiro, Michael T. Smith, Jr., and Health Advisors of America (defendants), permanently bans Shapiro and Smith from initiating or facilitating robocalls; working in or with companies that make robocalls; and engaging in telemarketing. The settlement also requires the defendants to make monetary payments to the coalition, which is comprised of AGs from the states of Arkansas, Indiana, Michigan, North Carolina, North Dakota, Ohio, and Texas (the AGs).

Deceptive advertisements, market manipulation, misappropriation of customer funds, and “Ask Me Anything (AMA)” sessions served as the catalysts of a civil enforcement action the Federal Trade Commission (FTC) recently filed against bankrupt digital asset services provider Celsius Network LLC (Celsius) and its co-founders on July 13. This is a groundbreaking move by the FTC for two reasons. First, it marks the first time that the agency has filed suit against a digital asset-based company. Second, the FTC’s request for civil money penalties is predicated on a novel theory under the Gramm-Leach-Bliley Act (GLBA). Alongside the FTC, the Department of Justice has filed criminal charges against ex-CEO Alexander Mashinsky, and the Securities and Exchange Commission and the Commodity Futures Trading Commission have filed separate civil enforcement actions against Celsius.

On June 20, the Consumer Financial Protection Bureau’s (CFPB or Bureau) Office of Servicemember Affairs published its Annual Report analyzing complaints submitted by servicemembers, veterans, and their families in 2022. The report found that in 2022, servicemembers submitted over 66,400 complaints, representing a 55% increase from 2021, and a 62% increase from 2020. As in prior years, credit reporting remained the top issue for servicemembers, followed by debt collection and credit cards. Nonetheless, much of the report focused on the rising number of complaints from servicemembers related to payment app fraud and recommended steps the industry can take to address this issue.

On June 12, the Federal Trade Commission (FTC or Commission) published a request for public comment seeking comments and suggestions on effective coordination efforts with state attorneys general nationwide to help educate and protect consumers from potential fraud. This comes at the direction of the FTC Collaboration Act of 2021, which was signed into law last October by President Joe Biden.

The Collaboration Act directs the FTC to “conduct a study on facilitating and refining existing efforts with State Attorneys to prevent, publicize, and penalize frauds and scams being perpetrated on individuals in the United States.”