InfoBytes Blog

CFPB and FTC Announce Memorandum of Understanding to Coordinate Regulatory Activities

On January 23, the CFPB and the FTC announced that the agencies had entered into a memorandum of understanding (MOU) to facilitate coordination of the agencies’ consumer financial rulemaking, enforcement, and supervision activities. The MOU establishes regular meetings between the two entities, as well as processes for providing notice of enforcement activities. Under the MOU, the CFPB and the FTC will be able to share consumer complaint information, and the FTC can request CFPB examination reports and confidential supervisory information.

CFPB FTC

FTC Enhances Confidentiality of Investigations and Proposes Rule to Expedite Investigatory Processes

On January 13, by a vote of 5-0, the FTC adopted a new rule of practice (Rule 2.17) that streamlines internal procedures for staff seeking a court order to prevent investigation targets from learning about subpoenas and civil investigative demands issued by the FTC. The rule allows individual FTC Commissioners or the FTC’s general counsel to authorize the filing of a court action to delay notification to individuals required under the Right to Financial Privacy Act and the Electronic Communications Privacy Act when the FTC is seeking records from financial institutions or service providers.

Also on January 13, the FTC proposed additional changes to Parts 2 and 4 of its Rules of Practice to expedite Commission investigations and ensure that the FTC’s investigatory processes keep pace with electronic discovery advances. Among the proposed changes is a requirement for an accelerated meet-and-confer schedule to resolve electronic discovery disputes, as well as a proposal to relieve parties of their obligations to preserve documents after a year passes with no written communication from the FTC. The public can comment on the proposed rule changes through March 23, 2012.

FTC

Upromise Settles with FTC Over Collection of Consumers' Personal Information

On January 5, the FTC announced that Upromise had agreed to settle charges that its collection of consumers’ personal information was deceptive and an unfair practice, and that the collection violated federal law. Upromise’s website offered consumers a “TurboSaver Toolbar” download with a “Personalized Offers” feature to tailor savings opportunities to the consumer. The FTC alleged that the feature collected and transmitted, without encryption, the names of websites consumers visited, which links they clicked on, and information entered into webpages such as search terms, user names, and passwords. According to the FTC, the information collected also included credit card and financial account numbers, security codes and expiration dates, and Social Security numbers. Upromise’s privacy statement, however, stated that (i) the toolbar would only infrequently and inadvertently collect personal identifying information, (ii) personal information would be removed before the data was transmitted, and (iii) Upromise automatically encrypts users’ sensitive information. The proposed settlement requires in part that Upromise (i) destroy data collected, (ii) update its disclosures, (iii) notify consumers regarding the type of information collected and how to disable the toolbar, and (iv) obtain a biennial independent audit for the next twenty years. The proposed settlement is open for public comment through February 6.

FTC Privacy/Cyber Risk & Data Security

FTC Obtains Agreement from Payment Processor to Prohibit Use of New Payment Method

On January 5, the FTC announced a settlement with a payment processor and two of its principals that will prohibit the company from using a new payment method, through which accounts were debited without account-holder consent. The FTC alleged that the company actively promoted the method as a way to avoid scrutiny associated with other payment methods, and ignored red flags - such as payment-rejection rates exceeding 80 percent - that its merchant customers were seeking to defraud account-holders. As a result, according to the FTC, consumers incurred significant costs, including for overdraft fees. In addition to banning the use of this payment process, the settlement requires, among other things, that the company monitor client return rates and investigate rates exceeding 2.5 percent.

FTC Payment Systems