InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
FTC report to Congress suggests legislative enhancements on consumer protection
On April 10, the FTC issued a report addressed to Congress detailing its efforts to collaborate with state attorneys general (AGs) from across the U.S. on consumer protection law enforcement goals. The report, titled “Working Together to Protect Consumers: A Study and Recommendations on FTC Collaboration with the State Attorneys General,” was issued pursuant to the FTC Collaboration Act of 2021 and included legislative recommendations to enhance the FTC’s consumer protection efforts. The report followed a request for information issued by the FTC in June 2023, seeking public comments on how the FTC might improve collaboration with state AGs to protect consumers from fraud and ensure fairness in the marketplace.
The FTC's report was divided into three main sections:
- The first section outlined the existing collaborative practices between the FTC and state AGs, detailing their shared roles in combating frauds and scams, the respective law enforcement authority of the FTC and the AGs, and the ways federal and state enforcers can share the information they gather, including through networks such as the Consumer Sentinel Network consumer complaint database.
- The second section described best practices to ensure effective collaboration between the FTC and state AGs, including strong information-sharing practices and coordination of enforcement actions. It also suggested ways to expand the sharing of technical resources and expertise between federal and state agencies.
- The third section provided legislative recommendations aimed at improving collaboration efforts by providing the FTC with clearer authority to pursue legal actions. This section emphasized a request for Congress to restore the FTC’s authority to seek monetary refunds for consumers who have been defrauded, following a 2021 U.S. Supreme Court decision holding that such relief was not available to the Commission (covered by InfoBytes here). Additionally, this section suggested giving the FTC independent authority to seek civil penalties and clear authority to take legal action against facilitators of unfair or deceptive practices.
In its report to Congress, the FTC emphasized the importance of a collaborative approach to consumer protection among enforcement agencies and states, continuing to seek ways to strengthen its ties with state AGs to address future challenges.
FTC orders mental health service company to pay for privacy and data violations
On April 15, the FTC released its administrative complaint and joint stipulated order against a mental health service provider, requiring the provider to pay a total of more than $7 million, including $5.1 million for consumer refunds and $2 million in civil penalties. According to the complaint, the defendant collected sensitive personal health information and sold online mental healthcare treatments (i.e., telehealth) through its website to “hundreds of thousands” of patients between 2021 to 2022. The FTC alleged the mental health service provider had engaged in deceptive and unfair practices relating to the marketing of its data security practices, like failing to disclose material items, failing to obtain consumers’ express informed consent, and failing to implement adequate data security measures. In addition, the FTC alleged that the provider misled consumers about its cancellation of services, including failure to provide a mechanism to stop recurring charges. The FTC’s complaint specifically found that the company misrepresented how it would use and disclose patients’ personal information, mishandled and exposed “hundreds of thousands” of personal information, and failed to provide a means to cancel subscriptions. The FTC charged the defendant with violating Section 5 of the FTC Act covering deceptive privacy practices, deceptive data security practices, unfair privacy and data security practices, and deceptive cancellation practices – allegedly violating the Opioid Act, and violating the Restore Online Shoppers’ Confidence Act (ROSCA).
In the joint stipulated order, although the defendant neither admitted nor denied these allegations, the judgment prohibited the defendant from disclosing any covered information to any third party for advertising purposes, disclosing any covered information to an outside party without obtaining a consumer’s affirmative express consent, and misrepresenting its cancellation policies. The order also required the defendant to implement stronger protections of the private information of individuals and initiate regular assessments of its data security practices. The court ordered the defendant to pay $5,087,252 as monetary relief to consumers and a civil money penalty of $10 million, which the FTC agreed to suspend in exchange for a payment of $2 million, based on the defendant’s inability to pay the full civil money penalty.
FTC amends the TSR on recordkeeping and prohibiting misrepresentations
On April 16, the FTC issued a final rule amending the Telemarketing Sales Rule (TSR) to add requirements for telemarketers to maintain transaction records, prohibit misrepresentations, and add a new definition for “previous donor” in the context of robocalls on behalf of charitable organizations. This will be the fifth time the TSR has been amended since its enactment in 1995, with previous amendments creating the National Do Not Call Registry in 2003, prohibiting sellers to use prerecorded messages (i.e., robocalls) in 2008, banning debt relief services from requiring an advance fee in 2010, and most recently, barring certain payment mechanisms used in fraudulent transactions in 2015. The FTC’s new amendments to the TSR will require telemarketers to retain a copy of each prerecorded message, call detail records, records to show an established business relationship, records on charitable donations and the do-not-call registry. On the rule’s efforts to prohibit misrepresentations, marketers will be prohibited from making misrepresentations about the good or service they are selling or false statements to induce a charitable contribution. The final rule also will update the definition of “previous donor” to allow telemarketers to place robocalls on behalf of a charity only to customers who have donated to a charity within the previous two years. The amendment will go into effect on May 16 with mandatory compliance beginning October 16.
CFPB, FTC submit amicus brief in FCRA case
On March 29, the CFPB and the FTC filed an amicus brief in the U.S. Court of Appeals for the Eleventh Circuit, arguing that the FCRA mandated consumer reporting agencies (CRAs) when a consumer challenged the “completeness or accuracy of any item or information” in their file, must perform a “reasonable reinvestigation.”
In the underlying case, a consumer claimed she identified multiple inaccuracies in her credit report held by the defendant CRA, including issues with her name, address, and Social Security number. She allegedly contacted the defendant three times to dispute these errors, but the defendant directed her to resolve the issues with the misinformation sources and did not conduct its own reinvestigation as the consumer believed was required by the FCRA.
The consumer then filed a lawsuit against the defendant CRA for not performing the reinvestigation. The district court acknowledged that the defendant should have completed the reinvestigation under the FCRA but nonetheless concluded that the defendant did not violate the statute because it did not reasonably interpret that the FCRA did not require a reinvestigation.
The case will now be under the appeal process and the CFPB and FTC have submitted a joint amicus brief arguing that the FCRA required a CRA to reinvestigate a consumer’s dispute about personal identifying information, and that the district court correctly determined that a reinvestigation was required. The brief also argued that the district nonetheless erred in concluding that the defendant did not negligently or willfully violate the FCRA because the defendant’s interpretation of the FCRA was not “objectively reasonable.”
FTC to hold an informal hearing on its proposed “junk fee” rules
On March 27, the FTC published a notice in the Federal Register informing the public of its decision to hold an informal hearing on its proposed rule prohibiting “junk fees.” As previously covered by InfoBytes, the FTC released a notice of proposed rulemaking (“NPRM”) titled “Rule on Unfair or Deceptive Fees” and extended the comment period last October. In the NPRM, the FTC presented the opportunity for any party to present their positions orally. The FTC announced that 17 commenters requested to partake in the informal hearing by presenting oral statements and an administrative law judge for the FTC will serve as the presiding officer. The informal hearing will be presented virtually on April 24 at 10:00 a.m. Eastern time. The hearing will be presented live to the public on the FTC’s website, and a recording will be placed in the rulemaking record.
CFPB, federal and state agencies to enhance tech capabilities
On March 26, the CFPB announced as a part of a coordinated statement with other federal and state agencies, the intent to enhance its technological capabilities. As part of this initiative, the CFPB will be hiring more technologists to help enforce laws and find remedies for consumers, workers, small businesses, etc. These technologists will join interdisciplinary teams within the CFPB to monitor and address potential violations of consumer rights within the evolving tech landscape, particularly considering the growing attention to generative artificial intelligence (AI). The CFPB's technologists will be tasked with identifying new technological developments, recognizing potential risks, enforcing laws, and developing effective remedies. CFPB Director Rohit Chopra emphasized the essential role of technology in the Bureau’s efforts to regulate data misuse, AI issues, and big tech involvement in financial services. Chopra and Chief Technologist Erie Meyer remarked that the CFPB has integrated technologists into its core functions, with these experts now actively involved in supervisory examinations, enforcement actions, and other regulatory proceedings. They also note that the CFPB has researched how emerging technologies, such as generative AI and near-field communication, are used in consumer finance. To foster a competitive and “law-abiding” marketplace, Chopra and Meyer also note that the CFPB will continue to issue policy guidance to assist firms with understanding legal obligations.
FTC fines two fintech firms $59 million for PPP loan practices
On March 18, the FTC announced enforcement actions against two companies that allegedly made “false promises” to small businesses seeking Paycheck Protection Program (PPP) loans. Both companies have agreed to settle with the FTC to resolve alleged violations of the Covid-19 Consumer Protection Act and the FTC Act.
According to the FTC’s complaint on the first company—a company that offers online financing products to small businesses—and its subsidiary allegedly engaged in a pattern of deceptive and unfair conduct by quoting shorter processing times for consumers’ applications, despite being aware of the significant delays. The companies also allegedly ignored consumers’ requests to withdraw their pending applications frequently. The FTC further alleged that roughly 40 percent of the companies’ consumers had their applications canceled or rejected. The proposed stipulated order included a prohibition against misrepresentations, an injunction concerning the companies’ application practices (which had prohibited them from failing to allow consumers to promptly withdraw their applications), and a $33 million judgment for monetary relief. The companies must also comply with reporting requirements detailed in the settlement.
The FTC’s complaint against the second company—an online platform offering PPP financing services to small businesses—and its CEO, alleged that respondents made deceptive claims to consumers, many of whom were eligible but never received funding because the respondents failed to fix known technical issues with their system or provide consumers with assistance. According to the complaint, the company claimed that processing a loan would only take 24 hours through the “fast lane” service, but the company’s chat support was slow, as were its review and processing times. The FTC noted that the time-sensitive nature of PPP funding meant any delays had significant impacts on consumers. In addition to the $26 million monetary judgment, the settlement with the company and its CEO prohibited them from making any deceptive, false, or unsubstantiated claims about financial services or products.
FTC confirms two members as its board returns to full strength
On March 8, the FTC announced the confirmation of two new commissioners: Andrew N. Ferguson and Melissa Holyoak. Additionally, current Commissioner Rebecca Kelly Slaughter received a confirmation vote for a second term. Newcomers Ferguson and Holyoak were nominated by President Biden and will serve until September 25, 2025; Slaughter will serve until the same date in 2029. Ferguson had previously been working as solicitor general of Virginia, and before that he was chief counsel to U.S. Sen. Mitch McConnell of Kentucky and as Republican counsel on the U.S. Senate Judiciary Committee. Holyoak was most recently solicitor general with the Utah Attorney General’s Office. Before that, she served as president and general counsel of a D.C.-based public interest law firm.
FTC updates the Telemarketing Sales Rule, proposes tech support rule
On March 7, the FTC announced updates to the Telemarketing Sales Rule (TSR) to extend fraud protections to businesses and modernize recordkeeping requirements in response to technological advancements. These updates were part of an ongoing review of the TSR, which governs telemarketing practices and includes the Do Not Call Registry (DNC) and issued rules against telemarketing robocalls.
The newly finalized rule broadened the scope of prohibited deceptive and abusive telemarketing practices to include business-to-business calls, which were previously exempt, except in specific cases. The rule also revised the TSR's recordkeeping requirements to reflect changes in technology and telemarketing methods, which included maintaining detailed call records and consent documentation, as well as compliance with the DNC Registry.
In addition to these updates, the FTC proposed a rule that would enhance its ability to tackle tech support scams by extending the TSR's coverage to include inbound telemarketing calls for technical support services. This amendment addressed deceptive tech support schemes and would empower the FTC to seek stronger legal remedies such as civil penalties and consumer compensation. The Commission invited public feedback on a proposed definition of tech support scams.
FTC takes action against tax prep company for alleged unfair and deceptive practices
On February 23, the FTC announced an action against a tax preparation company for alleged unfair and deceptive acts and practices related to the sale of tax preparation products and services. The FTC alleged in its redacted administrative complaint that the defendant unfairly pushed consumers into paying for more expensive tax preparation products. The FTC further alleged the company made it unnecessarily difficult to downgrade the consumer’s tax preparation plan, both by requiring the consumer to first speak with a representative and by requiring the consumer to re-input the data if the consumer chooses to downgrade to the lower-priced product. The FTC also stated that the company’s upgrade policy, in contrast, is notably simple compared to its downgrade policy, and consumers’ “data seamlessly moves to the more expensive product instantly.” The FTC also claimed that the company’s “file for free” advertisements are deceptive because not all consumers’ tax situations are eligible for the free service.
This action follows the FTC’s action against another tax preparation software provider last month (covered by InfoBytes here).