InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
House subcommittee holds hearing on cybersecurity
On November 3, the House Financial Services Subcommittee on Consumer Protection and Financial Institutions held a hearing titled “Cyber Threats, Consumer Data, and the Financial System.” The hearing examined cybersecurity and consumer data protection challenges for financial institutions, discussed agencies efforts to strengthen cyber defenses for financial institutions, and reviewed the current legal framework governing data security. According to a committee memorandum, cyberattacks on banks are increasing in number. In the first half of 2021, banks and credit unions saw a 1,318 percent increase in ransomware attacks. In written testimony, one of the witnesses expressed his concern regarding the technological disparity between minority depository institutions (MDI) and large banks, observing that “cultural shifts inside the financial services industry, including the core processors and regulators, are necessary to help MDIs better orient themselves to meet new customer demands.” Another witness discussed in his written testimony support for the NCUA to obtain data security and privacy authority over third-party vendors, which is an authority currently given to other federal agencies. Among other things, the hearing addressed several bills on cybersecurity and consumer protection: (i) Safeguarding Non-bank Consumer Information Act; (ii) Strengthening Cybersecurity for the Financial Sector; and (iii) Enhancing Cybersecurity of Nationwide Consumer Reporting Agencies Act. Specifically, one of the witnesses in his written testimony recommended that Congress revise the definition of “data aggregators” in the Safeguarding Non-bank Consumer Information Act to ensure that it covers non-financial institution entities and individuals.
House fintech task force examines buy now/pay later industry
On November 2, the House Financial Services Committee’s Task Force on Financial Technology held a hearing titled “Buy Now, Pay More Later? Investigating Risks and Benefits of BNPL and Other Emerging Fintech Cash Flow Products,” urging regulators to examine the BNPL industry. The committee memorandum highlighted the rise in consumers products offered by fintechs, such as BNPL, earned wage access, and overdraft avoidance products, and warned that while these products may help consumers manage their personal cash flow, they also have the potential to create unsustainable levels of debt. FSC staff noted that many lending disclosure requirements, including those under TILA, may not apply to several of these products, thus creating concerns regarding consumers’ understanding of the associated risks. Pointing out that payments made on many of these products are not reported to credit bureaus, FSC staff raised the issue of whether consumers are missing out on opportunities to build credit.
The task force heard from several industry witnesses who discussed, among other things, current federal and state consumer protection regulations that apply to BNPL products. One witness stressed the importance of “balanced and thoughtful regulation” that benefits consumers and merchants using these new payment solutions, and noted that the industry is actively working with credit bureaus on ways to share repayment data. House Financial Services Chair Maxine Waters (D-CA) also urged the CFPB to “look[ ] deeply” at these emerging products to gain a better understanding of how they may impact low- and moderate-income consumers and borrowers of color. Representative Blaine Luetkemeyer (R-MO) noted, however, that these products “allow[] people to purchase products, [and] pay for them in a timely manner as they can afford them.” Representative Warren Davidson (R-OH) agreed, stressing that policymakers need to “avoid punishing new products for not fitting within regulatory buckets that were already built” and “should avoid overly impairing consumer choices on how they spend money.”
Chopra testifies on CFPB direction
On October 27, newly sworn in CFPB Director Rohit Chopra appeared for the first time before the House Financial Services Committee to offer some of the first insights into his priorities at the Bureau. Chopra’s opening remarks focused on concerns regarding “Big Tech” and its control over the flow of money in the economy (these comments followed the issuance of information requests to six technology companies, covered by InfoBytes here). Chopra also focused on a need to ensure robust competition in financial markets and listen to local financial institutions and nascent players about obstacles they face when seeking to challenge dominant incumbents. Chopra also stressed the importance of holding “repeat offenders” accountable, highlighted an intent to coordinate efforts with federal and state regulators, and indicated a preference for scrutinizing larger market participants over smaller entities. He noted, however, potential leniency for companies that self-identify their own issues and violations. Additional highlights of the hearing include the following:
Enforcement. Chopra noted that “markets work well when rules are easy to follow and easy to enforce.” He also expressed his view that the CFPB should focus its resources on larger industry participants and “repeat offenders” rather than “strong-arming” small businesses into settlements to create law. Chopra also expressed a preference for setting regulatory guidelines through enforcement, indicating that “markets work well when rules are easy to follow, and easy to enforce.”
Section 1033 of Dodd-Frank. With respect to implementing this set of requirements, which deals with consumers’ rights to access information about their financial accounts, Chopra indicated a desire to “unlock more competition,” but warned that there also needs to be assurance that “banks and nonbanks are operating under the same set of rules” and that there is “not regulatory arbitrage.” While Chopra did not specify a timeline for promulgating the final rule implementing this section, he noted that the process is underway and that the Bureau is consulting with various experts. (Issuance of the ANPR was covered by InfoBytes here.)
Abusive acts and practices. Chopra said that he agreed with former acting Director Dave Uejio’s decision to rescind a policy statement on “abusive” conduct issued by former Director Kathy Kraninger. Chopra stated he has “huge aspirations to create durable jurisprudence” regarding the definition of “abusive” in Dodd-Frank. He noted that “it could be a mix” of judicial decisions and “how the CFPB may use rules and guidance to help articulate those standards.”
Cryptocurrency and stablecoins. Chopra expressed concerns about the potential for big payment platforms to process stablecoins—cryptocurrencies pegged to stable commodities or currencies like the dollar. However, Chopra clarified that it is not his intention to use his regulatory authority to ban or limit the use of cryptocurrency or blockchain technology. Regarding the CFPB’s role in cryptocurrency, Chopra claimed that depending on the laws implicated, there is a “fact-based determination as to any sort of law that cryptocurrencies or digital currencies have to comply with.” He further described that this is “something that the CFPB is working with the other regulators on,” and emphasized that “where digital payments [are] involved, the Electronic Fund Transfer Act is a key law with key consumer protections.”
QM Rule. When asked about the postponement of the mandatory compliance date of the General Qualified Mortgage final rule to October 2022 (covered by InfoBytes here), Chopra said he is eager “to hear of places where it needs to be changed” but emphasized that the postponement was before his time and that the rule has gone into effect. He also stated that “QM is a key part of the mortgage market and the mortgage regulatory guidelines.” Therefore, he wants to ensure that the CFPB is always looking at it to make sure the objectives that Congress laid forward in Dodd-Frank are being carried out. When asked about his support of the proposed change in the QM rule, Chopra said he did not know but wants “to make sure he understands the full basis of it.”
Chopra echoed such sentiments in his October 28 testimony before the Senate Banking Committee.
House fintech task force discusses consumer data privacy
On September 21, the House Financial Services Committee’s Task Force on Financial Technology held a hearing titled, “Preserving the Right of Consumers to Access Personal Financial Data,” to discuss developments in fintech sharing and consumers’ right to control their own financial data. Task Force Chair, Stephen Lynch (D-MA), opened the hearing by expressing his concerns about the “uncertainty given the transformational technology and advancements as well as changing relationships and customer preferences.” He also noted that while the Committee is in agreement regarding the importance of protecting consumers’ control over their own financial data, “there’s a question whether both regulators and policymakers alike are moving fast enough to address the uncertainties.” The committee memorandum focused on recent developments in the data sharing fintech ecosystem discussed during the hearing, which included the following, among other things:
- Consumer Data Market Participants. The task force reported that new technologies have led financial service providers to utilize consumer-authorized data, such as data aggregators and payment processors. The task force also noted data privacy advocates have concerns that consumers may authorize the use of their data for purposes beyond what is understood by the consumer, and stated that the CFPB may consider the need for regulatory guidance on data use limitations, including possible time restrictions, in its rulemaking.
- Regulatory Structure Over Consumer Data. The task force discussed federal and state laws that cover data privacy, such as the Gramm-Leach-Bliley Act, FCRA, ECOA, and EFTA and their respective purposes in protecting consumer data through privacy and security.
- Screen Scraping, Application Program Interface (API), and Open Banking. The task force noted that many data aggregators have transitioned to using a structured data feed or API, instead of credential sharing and screen scraping. However, the task force expressed concerns that these methods may “lack adequate consumer protections and privacy protections, and face cybersecurity weaknesses.”
- DFA 1033 Rulemaking, Executive Order 14036, and Other Recent Developments. The task force discussed regulatory guidance and the need for clarity on consumer data sharing between financial institutions. The task force noted that some concerns from consumer advocates may involve the burden of liability or risk shifting to the consumer when consumers provide consent to financial institutions.
- International Data Sharing Landscape. The task force mentioned that several foreign countries promote consumer-permissioned data sharing access through APIs, due to cybersecurity concerns. For example, the United Kingdom requires large banks to adopt open API banking standards and the European Union’s General Data Protection Regulation established a set of rules regarding personal data throughout the EU.
Task force members heard concerns from witnesses regarding tighter legal and regulatory measures around data-sharing among financial institutions and third parties, in addition to requests for more robust, informed consent from consumers when their information is aggregated and allocated. Congressman Davidson (R-OH) expressed hope that the CFPB will find that individuals have a property right in their own data, and called for regulators to continue to “provide [a] consumer-focused, principle-based framework that will allow for innovation and competition.” He also found it encouraging that the “CFPB [is] continuing to make progress towards rulemaking under Section 1033 of the Dodd-Frank Act.”
CSBS responds to Waters on state supervisory activities
On August 26, the Conference of State Bank Supervisors (CSBS) sent a letter to House Financial Services Committee Chairwoman Maxine Waters (D-CA) detailing information on CSBS' response to the Covid-19 pandemic related to supervisory efforts, policy initiatives, and mortgage servicing plans. The letter is in response to an August 5th letter from Chairwoman Waters to CSBS, CFPB, OCC, NCUA, FDIC, and Fed asking the agencies, among other things, to immediately update the “Joint Statement on Supervisory and Enforcement Practices Regarding the Mortgage Servicing Rules in Response to the COVID-19 Emergency and the CARES Act dated April 3, 2020,” and to take other steps to “provide vigorous oversight and encourage mortgage servicers to work with borrowers to avoid unnecessary foreclosures.”
The letter from the CSBS detailed the consumer protection and supervision efforts of state regulators during the Covid-19 pandemic, noting that they have “monitored the activities of mortgage originators and servicers … and have acted responsively and decisively with expanded examination approaches, new policy, and public guidance.” The letter expanded on these actions by setting forth its efforts in “three very broad categories”: networked supervision, direct supervision, and supervision policy. In the latter two categories, CSBS noted the steps it has taken during the pandemic to “remain vigilant to signs of unwarranted foreclosure activity or other consumer harm.” The letter also agreed that the “states’ dual mandate to protect consumers and ensure a healthy economic environment has been the appropriate approach” during Covid-19.
Waters urges foreclosure moratoria extension
On June 21, Chairwoman of the House Financial Services Committee Maxine Waters (D-CA) sent a letter to several federal agencies “urging them to administratively extend their moratoria on foreclosures at least until the CFPB is able to finalize and implement its pandemic recovery mortgage servicing rule.” As previously covered by a Buckley Special Alert, the Bureau issued a proposed rule in April that would broadly halt foreclosure initiations on principal residences from August 31, 2021 until 2022, and change servicing rules to promote consumer awareness and processing of Covid-relief loss mitigation options. The proposed rule also would create new and detailed obligations for communicating with borrowers to ensure they are aware of their loss mitigation options for pandemic-related hardships.
The letter, which was sent to the secretaries of HUD, the Department of Agriculture, the Department of Veterans Affairs, as well as the director of FHFA and the acting director of the CFPB, stresses that many homeowners will face the risk of foreclosure when the emergency federal foreclosure mortarium expires on June 30, as the Bureau’s proposed rule is not expected to take effect until August. This gap in critical protections, Waters cautions, “could result in servicers expediting efforts to initiate foreclosures before a final rule takes effect, especially for borrowers who have not been able to access forbearance options during the pandemic[.]” The letter requests not only an extension of the current foreclosure moratoriums but also urges the Bureau to finalize the rule (or issue an interim final rule if necessary) as soon as possible to prevent unnecessary foreclosures and ensure homeowners have the opportunity to finalize affordable loan modifications. Additionally, Waters urges the Bureau to alert servicers of the consequences should they, among other things, fail to notify homeowners about their post-forbearance options, unnecessarily delay reviewing loan modification applications, engage in improper foreclosure-related activity, unlawfully discriminate against borrowers, or provide inaccurate, adverse information to credit reporting agencies.
Waters establishes Digital Assets Working Group
On June 16, Chairwoman of the House Financial Services Committee Maxine Waters (D-CA) announced the organization of the “Digital Assets Working Group of Democratic Members” to develop “legislation and policy solutions” on issues emerging in the digital asset space, including those related to (i) the regulation of cryptocurrency; (ii) the use of blockchain and distributed ledger technology; and (iii) the potential development of a U.S. central bank digital currency (see InfoBytes coverage on matters related to a CBDC here). During the first hearing held by the Task Force on Financial Technology, Waters stated that the working group will “focus on making sure there is responsible innovation in the cryptocurrency and digital asset space,” noting that “[a]s cryptocurrencies, central bank digital currencies and other digital assets enter the mainstream, the Committee will look at how digital assets have begun to enter many aspects of our lives—from payments to investments to remittances—and consider how to devise legislation to support responsible innovation that protects consumers and investors while promoting greater financial inclusion.”
Six largest U.S. banks testify on pandemic responses and banking programs
On May 27, the House Financial Services Committee held a hearing entitled “Holding Megabanks Accountable: An Update on Banking Practices, Programs and Policies.” During the hearing, chief executive officers from the six largest U.S. banks testified on their banks’ activities during the Covid-19 pandemic, as well as various issues related to safety and soundness, consumer protection, diversity and inclusion, risk management, compensation, climate risk, and the use of emerging technology. Several proposed bills containing provisions that would impact the banks if enacted were also discussed, including those that would (i) require the banks to publicly disclose and pay damages to harmed consumers within a short timeframe when more than 50,000 consumers are affected or potential remediation exceeds $10 million; and (ii) require federal regulators to design strategic plans to hold the banks accountable for compliance failures resulting in extensive consumer harm. The Committee’s memorandum focused on several areas discussed during the hearing including the following:
- Pandemic response. The Committee expressed concerns over allegations that some of the banks prioritized Paycheck Protection Program (PPP) loans for wealthier clients over smaller borrowers, including small and minority-owned businesses, and that certain banks allegedly inappropriately charged overdraft fees.
- Banking deserts. The Committee reported that the number of branches in the U.S. is down from ten years ago, noting that the existence of communities lacking adequate access to a bank branch makes it more difficult to reduce the number of unbanked and underbanked consumers.
- Diversity and inclusion. The Committee suggested that lack of diversity within the banks continues to be an issue, pointing out that shareholder proposals at certain banks for racial equality audits were not supported by the banks. However, the Committee noted that all six banks made commitments in 2020 to invest millions into supporting minority depository institutions and community development financial institutions to support communities of color during the pandemic.
- Fintech. The Committee discussed the increased use of artificial intelligence and machine learning to assist in digital banking, customer relations, fraud detection, and underwriting. Some of the banks, the Committee noted, have “acknowledged the competitive threat of fintech’s growth” and have asked regulators to “create a level playing field.” With respect to cryptocurrency custody services and the use of distributed ledger technology to perform payment activities, the Committee observed that while the banks do not yet provide these services, a few of them recently announced that they are considering the idea of offering funds to select investors allowing bitcoin ownership, while others may offer bitcoin investments in the near future.
Earlier in the week, the same CEOs discussed pandemic responses during the Senate Banking Committee’s hearing on the “Annual Oversight of Wall Street Firms.” The CEOs addressed challenges with building out digital platforms to facilitate PPP loan applications and forgiveness programs, as well as challenges to distributing funds quickly and in a manner that would prevent fraud from entering the system. The CEOs also emphasized their continued commitment to helping borrowers still facing financial hardships as federal foreclosure and eviction moratoriums begin to expire. One CEO noted during the hearing that his bank intends to continue to assist borrowers find loan modifications “irrespective of the deadline passing.”
Federal regulators discuss Covid-19 responses and priorities
On May 19, the House Financial Services Committee held a hearing entitled “Oversight of Prudential Regulators: Ensuring the Safety, Soundness, Diversity, and Accountability of Depository Institutions.” Committee Chairwoman Maxine Waters (D-CA) opened the hearing by expressing her concerns about the “harmful deregulatory actions” taken by the previous administration’s appointees to “roll back key Dodd-Frank reforms and other consumer protections.” She noted, however, that she was pleased that the Senate is moving forward to reverse the OCC’s true lender rule and commented that she has asked House leadership to address the related Congressional Review Act resolution as soon as possible.
Fed Vice Chair for Supervision Randal K. Quarles provided an update on the Fed’s Covid-19 regulatory and supervisory efforts, noting that the Fed has “worked to align [the Fed’s] emergency actions with other relief efforts as the economic situation improves” and is maintaining or extending some measures to promote continued access to credit. When Congresswoman Velazquez inquired how government programs like the Paycheck Protection Program helped to stabilize businesses and improve the overall economy, Quarles answered, “We would have experienced a much deeper and more durable economic contraction, and would have had more lasting economic scarring with closed businesses and defaulting obligations [] had those programs not been put in place.”
OCC Comptroller Michael Hsu discussed the agency’s increasing coordination with other federal and state regulators on fintech policy, in addition to OCC efforts to strengthen Community Reinvestment Act (CRA) regulations and address climate change. The OCC has been encouraging innovation, Hsu said, but added that his “broader concern is that these initiatives were not done in full coordination with all stakeholders. Nor do they appear to have been part of a broader strategy related to the regulatory perimeter.” In his written testimony, Hsu emphasized his concerns with providing charters to fintechs, noting that in doing so, it would “convey the benefits of banking without its responsibilities,” but also “that refusing to charter fintechs will encourage growth of another shadow banking system outside the reach of regulators.” Hsu expressed in his oral statement the importance of finding “a way to consider how fintechs and payment platforms fit into the banking system” and emphasized that it must be done in coordination with the FDIC, Fed, and the states. He also explained that “the regulatory community is taking a fragmented agency-by-agency approach to the technology-driven changes taking place today. At the OCC, the focus has been on encouraging responsible innovation. For instance, we updated the framework for chartering national banks and trust companies and interpreted crypto custody services as part of the business of banking.” When Congressman Bill Huizenga (R-MI) asked how the OCC planned to address the “true lender” rule, which would soften the regulations for national banks to sell loans to third parties, Hsu stated that the OCC originally intended to review the rule, but that after the Senate passed S.J.Res. 15 to invoke the Congressional Review Act and provide for congressional disapproval and invalidation of the rule (covered by InfoBytes here), the agency decided to leave it up to congressional deliberation and will monitor it instead.
FDIC Chairman Jelena McWilliams discussed, among other things, the FDIC’s policy of granting industrial loan company charters. As previously covered by Infobytes, the agency approved a final rule in December 2020 establishing certain conditions and supervisory standards for the parent companies of industrial banks and ILCs. McWilliams defended the FDIC’s new rule during the hearing, stating it “ensures that the parent company serves as a source of financial strength for the ILC while providing clarity about the FDIC's supervisory expectations of both the ILC and its parent company.”
NCUA Chairman Todd Harper also outlined agency measures taken in response to the pandemic. Among other things, Harper noted that the NCUA is supporting low-income credit unions through the Community Development Revolving Loan Fund and that the agency is working to strengthen its Consumer Financial Protection Program (CFPP) to ensure fair and equitable access to credit. During the hearing, Harper stated, “there is an increased emphasis on fair lending compliance, and agency staff are studying methods for improving consumer financial protection supervision for the largest credit unions not primarily supervised by the CFPP.”
House Financial Services Committee reauthorizes fintech, AI task forces
On April 30, the House Financial Services Committee announced the reauthorization of the Task Forces on Financial Technology and Artificial Intelligence. According to Chairwoman Maxine Waters (D-CA), the “Task Forces will investigate whether these technologies are serving the needs of consumers, investors, small businesses, and the American public, which is needed especially as we recover from the COVID-19 pandemic.” Representative Stephen Lynch (D-MA) will chair the Task Force on Financial Technology, which will continue to monitor the opportunities and challenges posed by fintech applications for lending, payments, and money management and offer insight on how Congress can ensure Americans’ data and privacy is protected. Representative Bill Foster (D-IL) will chair the Task Force on Artificial Intelligence, which will examine how AI is impacting the way Americans operate in the marketplace, how to think about identity security, and how to interact with financial institutions. The task forces will also examine issues related to algorithms, digital identities, and combatting fraud. As previously covered by InfoBytes, these task forces were set to expire in December 2019.
House GOP members also released a report that highlights efforts of the Task Forces on Financial Technology and on Artificial Intelligence and includes recommendations on how to utilize innovation. According to the report, the two “key takeaways” are that “Congress must (1) promote greater financial inclusion and expanded access to financial services, and (2) ensure that the federal government does not hinder the United States’ role as a global leader in financial services innovation.” The report also includes recommendations for policy regulators and Congress to: (i) decide how to assist innovation, especially in the private sector; (ii) use the power of data and machine learning to fight fraud, streamline compliance, and make better underwriting decisions; and (iii) “keep up with technology to better protect consumers.”