InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
CFPB focuses on in-game video game market and its consumer protection issues
On April 4, the CFPB released a report titled “Banking in video games and virtual worlds” that examined the gaming industry and the consumer financial systems that affect it. The Bureau’s report identified three key findings: (i) a network of financial products and services has entered the gaming industry to leverage and support the transfer of gaming assets and currency; (ii) the increased value of these assets has led to an increase of hacking attempts, account theft, scams, and unauthorized transactions; and (iii) the consumer data collected by gaming companies was bought, sold, and traded between companies, which can pose a risk to gaming customers. As a result, the CFPB will intend to monitor these issues in gaming and other such non-traditional markets to ensure companies comply with federal consumer financial protection laws.
The report noted that the proliferation of gaming and the evolution of the industry to offering in-game purchases and gaming assets has created the need for an infrastructure to enable fiat currency to flow into and out of games and virtual worlds. This can include transactions within the game, trading virtual items with other players, buying products on secondary markets, converting gaming assets to traditional currency, withdrawals of that currency, and/or using third parties to convert and withdraw the currency. As a result, companies have established financial products and services that increasingly resemble traditional financial products, like loans, payment processing, and money transmission.
In addition to the gaming economy creating a relatively new and unregulated financial marketplace, the Bureau identified additional risks similar to those found in the traditional market surrounding fraud, identity theft, money laundering, and privacy. For example, the report noted that these highly valuable gaming assets have made player accounts vulnerable to phishing and hacking attempts as well as unauthorized transactions. However, efforts by the FTC or CFPB to address complaints related to this activity have been met with a “buyer beware” approach by gaming companies.
Further, gaming companies collect a significant amount of data on players as a way to personalize the experience. However, the companies use this data to monetize gameplay to entice more spending as well as buy, sell and trade this data. The report noted that (i) the use of personal data can result in highly individualized pricing and (ii) the storage and transfer of consumer data poses privacy risks for gamers. In light of these various issues, the CFPB plans to work with other agencies to monitor both these non-traditional financial products and services as well as the companies that collect and sell sensitive consumer data.
CFPB Director speaks on new and proposed rules for data brokers
On April 2, the Director of the CFPB, Rohit Chopra, delivered a speech at the White House Office of Science and Technology Policy highlighting President Biden’s recent Executive Order (EO) to Protect Americans’ Sensitive Personal Data and how the CFPB will plan to develop rules to regulate “data brokers” under FCRA. As previously covered by InfoBytes, the EO ordered several agencies, including the CFPB, to better protect Americans’ data. Chopra highlighted how the EO not only covered data breaches but also regulated “data brokers” that ingest and sell data. According to the EO, “Commercial data brokers… can sell [data] to countries of concern, or entities controlled by those countries, and it can land in the hands of foreign intelligence services, militaries, or companies controlled by foreign governments.”
Consistent with the EO, the CFPB will plan to propose rules this year that will regulate “data brokers,” as per its authority under FCRA. Specifically, the proposed rules would include data brokers within the definition of “consumer reporting agency”; further, a company’s sale of consumer payment or income data would be considered a “consumer report” subject to requirements, like accuracy, customer disputes, and other provisions prohibiting misuse of the data.
CFPB reports on the relationship between discount points and interest rates
On April 5, the CFPB issued a report on the relationship between trends in discount points and interest rates. The report used HMDA data between Q1 of 2019 and Q3 of 2023 when interest rates were at “record-highs” and before the Federal Reserve announced its intention to lower interest rates. The CFPB found that (i) the majority of borrowers paid discount points, (ii) more borrowers paid discount points as interest rates increased, and (iii) borrowers with low credit scores were even more likely to pay discount points. Delving deeper into the data, 87 percent of borrowers with cash-out refinances paid discount points (up from 61 percent in 2021), and borrowers with cash-out refinance loans paid twice the number of discount points compared to other borrowers (with a median of 2.1 points per loan). Additionally, almost 77 percent of FHA borrowers with a credit score below 640 paid discount points compared to 65 percent of all FHA borrowers. Considering these trends, the CFPB will plan to monitor the use of discount points and weigh the advantages against the potential risks to borrowers.
CFPB, FTC submit amicus brief in FCRA case
On March 29, the CFPB and the FTC filed an amicus brief in the U.S. Court of Appeals for the Eleventh Circuit, arguing that the FCRA mandated consumer reporting agencies (CRAs) when a consumer challenged the “completeness or accuracy of any item or information” in their file, must perform a “reasonable reinvestigation.”
In the underlying case, a consumer claimed she identified multiple inaccuracies in her credit report held by the defendant CRA, including issues with her name, address, and Social Security number. She allegedly contacted the defendant three times to dispute these errors, but the defendant directed her to resolve the issues with the misinformation sources and did not conduct its own reinvestigation as the consumer believed was required by the FCRA.
The consumer then filed a lawsuit against the defendant CRA for not performing the reinvestigation. The district court acknowledged that the defendant should have completed the reinvestigation under the FCRA but nonetheless concluded that the defendant did not violate the statute because it did not reasonably interpret that the FCRA did not require a reinvestigation.
The case will now be under the appeal process and the CFPB and FTC have submitted a joint amicus brief arguing that the FCRA required a CRA to reinvestigate a consumer’s dispute about personal identifying information, and that the district court correctly determined that a reinvestigation was required. The brief also argued that the district nonetheless erred in concluding that the defendant did not negligently or willfully violate the FCRA because the defendant’s interpretation of the FCRA was not “objectively reasonable.”
FTC to hold an informal hearing on its proposed “junk fee” rules
On March 27, the FTC published a notice in the Federal Register informing the public of its decision to hold an informal hearing on its proposed rule prohibiting “junk fees.” As previously covered by InfoBytes, the FTC released a notice of proposed rulemaking (“NPRM”) titled “Rule on Unfair or Deceptive Fees” and extended the comment period last October. In the NPRM, the FTC presented the opportunity for any party to present their positions orally. The FTC announced that 17 commenters requested to partake in the informal hearing by presenting oral statements and an administrative law judge for the FTC will serve as the presiding officer. The informal hearing will be presented virtually on April 24 at 10:00 a.m. Eastern time. The hearing will be presented live to the public on the FTC’s website, and a recording will be placed in the rulemaking record.
State AGs sue to block Biden's SAVE Plan for student loan forgiveness
On April 1, 10 state attorneys general filed a lawsuit in the U.S. District Court for the District of Kansas against President Biden, the Secretary of Education, and the Department of Education seeking to block the enactment of the SAVE Plan. As previously covered by InfoBytes, the SAVE Plan was an income-driven repayment plan, intended to calculate payments based on a borrower’s income and family size, rather than the loan balance, and forgave balances after several years since repayment. According to the complaint, the government released a rule for the new SAVE Plan intended to eliminate at least $156 billion in student debt as the second step in a three-part loan forgiveness initiative. The first step involved an attempt to cancel $430 billion in student loans under the HEROES Act, which the U.S. Supreme Court ruled unconstitutional in Biden v. Nebraska.
The SAVE Plan assumed $430 billion in loans would be forgiven beforehand, but after the Supreme Court's decision, the defendants allegedly did not revise the cost estimate in anticipation of overturning the case. This oversight led to a significant underestimation of the SAVE Plan's true cost; plaintiffs alleged.
Plaintiffs further claimed that the SAVE Plan was written before the Supreme Court's ruling in Biden v. Nebraska and thus included outdated statements of confidence in the defendants' authority to pursue debt relief. The rule would take effect on July 1, but defendants allegedly have already started forgiving loans for some individuals before this date. The complaint alleged that on February 21, the Department of Education forgave the debt of 153,000 borrowers, which the state attorneys general claimed violated Biden v. Nebraska.
Plaintiffs brought claims under the Administrative Procedure Act, contending that the Department of Education exceeded its authority under the Higher Education Act of 1965 by issuing the rule and that the rule would be arbitrary and capricious since defendants failed to account for the full cost of the rule.
CFPB warns remittance transfer providers against falsely advertising the costs and speed of transfers
On March 27, the CFPB issued a circular cautioning remittance transfer providers against falsely advertising the costs or speed of sending transfers to avoid violating the CFPA’s prohibition on deceptive acts or practices. The CFPB would administer and enforce the Remittance Rule under the EFTA, but the Bureau noted that remittance providers also can be liable under the CFP Act for deceptive marketing practices, regardless of whether they comply with the Remittance Rule’s disclosure requirements. Through the circular, the CFPB warned against falsely marketing “no fee” or “free” services if the remittance transfer provider actually charges a fee, noting that “[w]ith respect to digital wallets or other similar products, it can be deceptive to market a transfer as ‘free’ if the provider imposes costs to convert funds into a different currency or withdraw funds,” and that “[i]t may also be deceptive to market international money transfers as ‘free’; if the provider is imposing costs on consumers through the exchange rate spread.” The Bureau also warned against “burying” promotional conditions in fine print, and falsely advertising how long a transfer will take especially if transfers may take longer to reach recipients. The circular would apply to traditional international money transfer providers, as well as “digital wallets” that send money internationally from the U.S. and would be part of the Bureau’s initiative to “rein in” alleged “junk fees.”
CFPB wins approval to move credit card late fee case to Washington, D.C.
On March 28, the U.S. District Court for the Northern District of Texas granted the CFPB’s motion to transfer a case to the U.S. District Court for the District of Columbia after identifying several concerns regarding litigating the case in the Texas venue. This case has been brought by multiple trade organizations to challenge the CFPB’s attempt to alter the structure and amount of credit card late fees under its alleged authority under the CARD Act, covered by InfoBytes here. The court agreed to transfer the case after finding that both defendants, along with three of the six plaintiffs, resided in Washington where the rule at issue was promulgated; comparatively, only one of the six plaintiffs resided in Fort Worth.
The court analyzed both private- and public-interest factors. On private-interest factors, the court agreed that Washington was a more practical venue, noting that eight of the ten attorneys representing the parties list offices in Washington, while only one plaintiff was headquartered in Texas. The court concluded that plaintiffs also have not identified any substantial or practical issues with this case being held in Washington. On public interest factors, the court weighed the comparative dockets and noted that, on average, a case in Washington would be resolved faster than in Texas. The court also reasoned that there was a strong interest in having the case decided in Washington. “The Rule at issue in this case was promulgated in Washington D.C., by government agencies stationed in Washington D.C., and by employees who work in Washington D.C. Most of the Plaintiffs in this case are also based in Washington D.C. and eighty percent of the attorneys in this matter work in Washington D.C. Thus, the [U.S. District Court for the District of Columbia] has a stronger interest in resolving this dispute, as it is the epicenter for these types of rules and challenges thereto.”
CFPB, federal and state agencies to enhance tech capabilities
On March 26, the CFPB announced as a part of a coordinated statement with other federal and state agencies, the intent to enhance its technological capabilities. As part of this initiative, the CFPB will be hiring more technologists to help enforce laws and find remedies for consumers, workers, small businesses, etc. These technologists will join interdisciplinary teams within the CFPB to monitor and address potential violations of consumer rights within the evolving tech landscape, particularly considering the growing attention to generative artificial intelligence (AI). The CFPB's technologists will be tasked with identifying new technological developments, recognizing potential risks, enforcing laws, and developing effective remedies. CFPB Director Rohit Chopra emphasized the essential role of technology in the Bureau’s efforts to regulate data misuse, AI issues, and big tech involvement in financial services. Chopra and Chief Technologist Erie Meyer remarked that the CFPB has integrated technologists into its core functions, with these experts now actively involved in supervisory examinations, enforcement actions, and other regulatory proceedings. They also note that the CFPB has researched how emerging technologies, such as generative AI and near-field communication, are used in consumer finance. To foster a competitive and “law-abiding” marketplace, Chopra and Meyer also note that the CFPB will continue to issue policy guidance to assist firms with understanding legal obligations.
Senator Romney et al. pen letter confirming nonbank lending regulations, specifically on the ILC charter
On March 13, Senator Mitt Romney (R-UT) with 11 other senators penned a brief letter to the heads of the FDIC, OCC, and CFPB that supported the FDIC’s regulation of the industrial loan company (ILC) charter but expressed concerns about delay in processing ILC charter applications. According to the letter, ILCs provide “critical access to credit opportunities within the regulated banking sector.” The letter stated the senators “strongly oppose” regulatory actions against lawful ILC charter applications that may further delay FDIC review and decision-making.