Latest / COMPLY: The Marketing Compliance Podcast / UDAAP Compliance Under CFPB Director Chopra. Pt. 2

Transcript

UDAAP Compliance Under CFPB Director Chopra. Pt. 2 · COMPLY: The Marketing Compliance Podcast

• 0:05
  Speaker 1: Hey there comply podcast listeners.
• 0:07
  Speaker 1: Today's podcast is part two of a discussion had between Ronda McGill, senior director of client solutions here at perform line and Tony Alexis partner at Goodwin law and former assistant director and head of the office of enforcement at the CFPB where he developed and managed the CFP B's enforcement strategy, consumer financial investigations and litigation.
• 0:28
  Speaker 1: Before you listen to today's podcast, make sure you go back and listen to part one of the conversation in our previous podcast, but on today's show, Rhonda and Tony continue that discussion of UDAP compliance under CFPB director Chopra, specifically talking about the CFP B's updated procedural rules that provide them with the authority to carry out enforcement actions in house expectations on the state's enforcement of UDAP and the role of a strong compliance management system in UDAP compliance as always.
• 0:56
  Speaker 1: Thanks for listening and enjoy the show.
• 1:03
  Speaker 2: Do you feel based on, you know, just this discussion around that, um, the examination guide, do you feel that there's anything in there that's noteworthy?
• 1:11
  Speaker 2: It sounds like there's the more of the same, but a lot more of it.
• 1:15
  Speaker 2: And then there's the, you know, additional amendments.
• 1:19
  Speaker 3: So I, I would say, as I understand, I have an examiner that works in my office and, uh, he and I chat from time to time about the manual.
• 1:30
  Speaker 3: And one of the things that he brought to my attention that I didn't realize was that, you know, cyber security had moved into a, a certain, uh, section of the manual in a way that clearly made it, uh, clear to the institutions that is a, a risk priority, uh, for the most part, even though it grows and it shrinks my sense as the exam manual is incredibly good authority, uh, in a good way to prepare for your exams to prepare for your compliance programs, uh, and to just be prepared for what your risks are.
• 2:10
  Speaker 3: Um, I, I, I, I clearly, and, and frankly, even though I find myself, uh, while helping with, with clients paging through the exam manual to look for definitions that I think that people would be comfortable with for particular product services or, uh, you know, the rules themselves or the laws themselves.
• 2:31
  Speaker 2: So it sounds like basically this is a good time to really look at the compliance program itself and just to do some adjustments and kind of parallel your policies and procedures and alignment with what could potentially be coming your way with an examination.
• 2:47
  Speaker 3: Yeah, well, you know, I, I I've heard some institutions have kind of laid off on compliance or, or thought themselves to be in a, in an environment in which compliance was not going to necessarily be a driver of the business mm-hmm and now are somewhat behind the ball as they try to play catch up.
• 3:09
  Speaker 3: But yes, I think the compliance manual, uh, is a good place to start.
• 3:14
  Speaker 3: And I also think that compliance is very, very important to any particular financial service team, uh, and really needs to be refreshed.
• 3:25
  Speaker 3: Uh, and the actual activities need to be moment.
• 3:29
  Speaker 2: Yeah.
• 3:30
  Speaker 2: I, um, had one client, I think they actually asked the question about, well, they said they ran a pretty tight ship and they thought that they were pretty conservative as it applies to UDAP.
• 3:39
  Speaker 2: So I think a lot of folks are now kind of reevaluating and saying, are we as conservative as we thought we were?
• 3:44
  Speaker 2: Or, you know, so what pitfalls are out there because there are potential pitfalls,
• 3:50
  Speaker 3: Right?
• 3:51
  Speaker 3: But, well, for, for lack of better phrase, no one quite true is nomenclature is, uh, and I actually heard someone say, look, I don't think it's my responsibility.
• 4:03
  Speaker 3: When I fear of to tell someone where to set their compliance program or what risk factors they're willing to take for, uh, profit and loss, the issue is what happens if you get clients the first place to look of why that mistake happened was to go look at your compliance
• 4:21
  Speaker 2: Client program.
• 4:22
  Speaker 2: for sure.
• 4:24
  Speaker 2: So in some recent comments, director Chopra talked about concentrating on more non-bank financial organizations that they deem presented some additional consumer risk.
• 4:36
  Speaker 2: Are there certain areas within consumer finance that really should be taking heat?
• 4:41
  Speaker 2: I know some folks, we, we were just talking a little bit ago about the cyber security.
• 4:46
  Speaker 2: I think some folks are talking crypto and all of these there's so much out there.
• 4:51
  Speaker 2: You have any thoughts on that?
• 4:53
  Speaker 3: So my sense is anything which can sneak up on you, uh, with lightning speed.
• 5:00
  Speaker 3: And what I mean is, for example, by now pay later, uh, has been around a substantial period of time.
• 5:08
  Speaker 3: I'm not saying decades, but I would say a little about a decade or longer mm-hmm and it, it was doing well, their pace was good.
• 5:18
  Speaker 3: You could make good living, but working at a, uh, by now pay later, uh, enterprise, uh, but then during the pandemic, they caught the fire.
• 5:30
  Speaker 2: They really, and
• 5:32
  Speaker 3: Yes, and it was really interesting that people who, you know, know the market know, knew about BPL, but never thought of them as players.
• 5:42
  Speaker 3: They really catapulted into what I would consider to be the driver seat of so many different aspects of the market.
• 5:52
  Speaker 3: Uh, you know, uh, you know, low credit, poor credit, and thin file people, uh, people of a certain age at, at, at.
• 6:03
  Speaker 3: And I think ultimately what you have with, uh, FinTech is because of their size and because of the services that they're, that they get involved with, that their growth can all of a sudden go from, you know, zero or close to zero, uh, to, you know, numbers that are just too hard to calculate.
• 6:27
  Speaker 3: Right.
• 6:27
  Speaker 3: And do it seemingly overnight.
• 6:30
  Speaker 3: My sense is that's the thing that he's incredibly worried about.
• 6:33
  Speaker 3: And so when, you know, again, you, you, you spoke to crypto.
• 6:37
  Speaker 3: Yeah.
• 6:38
  Speaker 3: Crypto is probably nothing that he's worried about at this particular point.
• 6:42
  Speaker 3: And doesn't really need a, I would say a C F P uh, type of deep dive to the consumer program.
• 6:51
  Speaker 3: Mm-hmm but nevertheless, my sense is, as crypto becomes the basis of potential, um, changes in our payment system, then that means it'll catch fire that put, and if you are the company and or if you are the C, I don't think that that's the first time you wanna think about the clients, uh, as related to that particular market.
• 7:16
  Speaker 3: So that those are the types of things.
• 7:18
  Speaker 3: And that is those markets which can grow almost overnight and do harm in very bad or distinct harm to consumers very quickly.
• 7:33
  Speaker 2: All right.
• 7:34
  Speaker 2: So, um, another change, and I think this is kind of going into that the, um, some of the space that we spoke about earlier was, um, with regards to, um, updated procedural rules that provide the bureau with the authority to carry out enforcement actions in house.
• 7:50
  Speaker 2: Can you talk a little bit about that, what that means to folks?
• 7:54
  Speaker 2: Um, because I there's been a couple of questions where folks are not quite sure where they're going with this.
• 8:01
  Speaker 3: I mean, so, well, I mean, ultimately the issue is it when the CF B and, uh, a consumer company, uh, are reach impase and they need to resolve an issue, then the two choices, or I guess the third choice is to give up and not do anything.
• 8:21
  Speaker 3: But the first choice is to take him to the us district court mm-hmm, uh, and, uh, that, that process seems like it's took a long time, uh, you know, because you have to get into the regular queue, uh, you get assigned a judge, you have to go through the phases of civil, um, you know, trial that includes, you know, discovery, uh, and after discovery, uh, you know, pretrial then trial.
• 8:49
  Speaker 3: And then if anyone is dissatisfied with the outcome of, of what happened in district court, then you can take it to appeal, uh, to, to one of the circuits or the appropriate circuit.
• 9:02
  Speaker 3: The issue in administrative is it's pretty quick.
• 9:08
  Speaker 3: Uh, you still have someone that's neutral, uh, and that person, you know, the ALJ makes a decision.
• 9:18
  Speaker 3: And if a party is not satisfied with the outcome, then that person can appeal it first to the judge.
• 9:27
  Speaker 3: I mean, to the D uh, the, yeah, to the director, and then after the director, then they can also go to the circuit, uh, you know, to the court of appeals mm-hmm and appeal the manner.
• 9:40
  Speaker 3: I think, you know, what, what, what, what most people may be concerned with is given the way that the rules function administratively.
• 9:52
  Speaker 3: There are opportunities for the director to take Liberty with certain aspects of, uh, of the matter while it's pending.
• 10:02
  Speaker 3: Uh, and that's like, okay, that would be pretty tough for some type of a company, especially if they have investors, uh, and they have a limited, uh, amount of, of, of capital to be able to fund litigation forever.
• 10:20
  Speaker 3: Right.
• 10:20
  Speaker 3: You know, all of a sudden, take it on the chin pretty quickly in the process.
• 10:25
  Speaker 3: And then afterwards, you know, then finish, uh, you know, the process and end up then for the first time, say going to the DC circuit, the third circuit or fourth circuit, or whichever circuit
• 10:38
  Speaker 2: Circuit mm-hmm
• 10:39
  Speaker 3: , and, you know, courts of appeals are not known for, uh, you know, very quick dispositions as well.
• 10:46
  Speaker 3: I mean, you know, they vary, it clearly has a lot to do with the issue that's being appealed, but I, I could see one of those matters, uh, probably drawing out for a certain period of time.
• 10:59
  Speaker 3: And a lot of those cases, I would say the assumption or the presumption is the CF would've already prevailed in what it wanted to do at an earlier phase and court.
• 11:14
  Speaker 2: Okay.
• 11:14
  Speaker 2: Thank you.
• 11:15
  Speaker 2: So, um, I wanna do a little bit of a shift because there was a question that came in with regards to, um, some of the states and some of the states act like they're little, many CFPB.
• 11:26
  Speaker 2: So, um, based on some of the changes that are happening within the CFPB, have you seen any evidence that states are, um, how they're going to interpret UDAP?
• 11:35
  Speaker 2: Are they gonna make any changes?
• 11:37
  Speaker 2: Are they, I feel like in some instances they're already a little bit stricter than the federal, but not, so it depend,
• 11:45
  Speaker 3: Look, it really depends if some states, uh, you know, like California, which, uh, restructure it's California department of business oversight, the, you know, the DV yeah.
• 12:00
  Speaker 3: D
• 12:02
  Speaker 2: Yeah.
• 12:04
  Speaker 2: Financial, yeah.
• 12:05
  Speaker 2: Protection something.
• 12:07
  Speaker 2: Yeah.
• 12:08
  Speaker 3: And I, the people are still the same there, but I would say they, they, they created some chartering differences, uh, in terms of, you know, what they would pursue, uh, the type of enterprises that do business in the state that they wanna see either registered or licensed, uh, activities that are designed to get people who aren't licensed or registered, uh, registered.
• 12:36
  Speaker 3: Um, I, I see that level of activity, um, in terms of how they interpret it, how they interpret UDAP remember one or two things, number one, uh, under the dive or the consumer financial protection act, it already is the case that a state, uh, attorney general, after they give notice to the C P B can file a suit against an enterprise that's working within its borders and per and pursue them with any of the provisions of, of, you know, UD a or, or other aspects of rules and regulations, uh, that the CF has.
• 13:24
  Speaker 3: So it's not necessarily unusual to see a, a state have a U a case that happened recently with, I think, MoneyGram, I think the New York DFS or the New York ag mm-hmm with the C F P B.
• 13:44
  Speaker 3: Uh,
• 13:45
  Speaker 2: Yes.
• 13:45
  Speaker 2: I think that, that was mentioned in the supervisory note, um, update,
• 13:50
  Speaker 3: Right.
• 13:52
  Speaker 3: And given that you can see that some actors might find it very comforting to hide behind the C as opposed to going it alone, because there's some, you know, there's some resource savings.
• 14:06
  Speaker 3: Um, but yes, there are gonna be some states that are going to be, uh, you know, uh, pro UDAP in the sense that they think that the best way to address consumer challenges in their jurisdiction is to be, uh, incredibly aggressive with the law enforcement.
• 14:27
  Speaker 3: And there's some places who find that that's not necessarily the right way to, to address a problem.
• 14:33
  Speaker 3: And the notion of scaring business off, uh, you know, has its own ramifications.
• 14:39
  Speaker 3: And, and they may not, uh, you know, look at UDAP and agree with the CF P B's annunciation about what the, uh, what the laws and what the laws, uh, you know, address.
• 14:56
  Speaker 2: Okay, great.
• 14:58
  Speaker 2: So, um, back in 2019, you, co-authored an article title compliance in a UDAP risk environment.
• 15:07
  Speaker 2: And that talked about how a strong compliance management system is critical to any financial institution, especially as it relates to UDAP.
• 15:16
  Speaker 2: Could you talk a little bit about that and why a strong compliance management system is so critical for organizations to get out ahead of risk.
• 15:26
  Speaker 2: And also that article was written prior to the pandemic, the COVID 19 pandemic.
• 15:33
  Speaker 2: So given that the impact of the pandemic, um, had what it's had on compliance, is there anything that you would add to that article, um, and new learnings and best practices?
• 15:46
  Speaker 3: Um, so the, the, the first piece is it really was just general taking my perspective of compliance and compliance management and how you can address a lot of potential problems later, by really looking at the compliance formulas first, you know, because compliance really is about addressing risk.
• 16:11
  Speaker 3: Uh, and a lot of risk in consumer compliance programs are, I would say, known risk, you know, like follow the complaints, treat complaints very quickly.
• 16:25
  Speaker 3: You know, those, those things are incredibly, uh, laid out in front of you.
• 16:31
  Speaker 3: They're easy to monitor.
• 16:33
  Speaker 3: I think they're easy to pick out, et cetera, the pandemic, eh, you know, if I could rewrite that again, I'm not too sure I rewrite it again, because ultimately, you know, the companies that were cited for potential, uh, violations, uh, it came out in the supervisory highlights, uh, prioritized assessments edition, which was winner of 20, 21 in January.
• 17:04
  Speaker 3: Mm-hmm, the first advisory islands that came out.
• 17:07
  Speaker 3: When that came out.
• 17:09
  Speaker 3: I, I, I found what they did was they gave a list of potential, uh, you know, steps and, uh, transactions that would feel very ordinary.
• 17:22
  Speaker 3: Cause remember at that time we had people who were, uh, being kept at home, right.
• 17:29
  Speaker 3: We had, uh, people who didn't know if they were ever going to go back to the workplace, uh, you had, uh, states who were closed and therefore you had limited funds available and people's bank accounts to pay their bills, their mortgages, their credit cards, their, uh, you know, their automobile, everything,
• 17:49
  Speaker 2: Everything.
• 17:49
  Speaker 3: And then the critical issue became, well, what would happen if we froze the payments and said, Hey, we're not gonna give you a pay vacation, but what we're gonna say is you don't have to pay while we temporarily stop the clock.
• 18:05
  Speaker 3: Well, the critical issue is right.
• 18:07
  Speaker 3: So I may be January, February, and March or off, but when I start up again in April, what am I gonna do?
• 18:15
  Speaker 3: Am I gonna ask for all three of those payment?
• 18:18
  Speaker 3: Or am I just take those three payments and move them at the end of the, I mean, the end of the particular product mm-hmm and a lot of questions about that.
• 18:28
  Speaker 3: How do you disclose that to a consumer?
• 18:31
  Speaker 3: How do you disclose with the APRs?
• 18:33
  Speaker 3: How do you, you know, disclose if there is, for example, a, uh, you know, a, a challenge, a dispute resolution, which has very strict timelines in, in which you're supposed to conduct your investigation, you're supposed to tell your consumer what the outcome of the investigation is.
• 18:55
  Speaker 3: You're supposed to provide, uh, temporary credit.
• 18:58
  Speaker 3: If you can't get the, uh, the, the dispute invested and resolved, uh, investigation resolve, you know, typically, or can sometimes, uh, involve reaching out to a third party, guess what people couldn't make those timelines.
• 19:15
  Speaker 3: And the reason why they couldn't make those timelines is because I'm working from home.
• 19:20
  Speaker 3: It doesn't make sense that bank of Alexis also has people who aren't working exactly, you know, at, at, at the office place and may not have access to some of the, uh, you know, some of the service files and some of those systems, you know, from a home computer and, you know, really, cause I would say the incredible number of hypotheticals to come true.
• 19:46
  Speaker 3: And, you know, to capture that in our article, which I felt was more practical advice as opposed to, uh, once in a lifetime advice.
• 19:58
  Speaker 3: So I don't regret not addressing any of those issues in, in the, you know, during the pandemic.
• 20:05
  Speaker 2: Super thank you so much.
• 20:08
  Speaker 2: So, um, as we are gonna be, um, looks like we're almost hitting an hour.
• 20:12
  Speaker 2: So, um, as we're concluding today's webinar, Tony, can you share what, um, you would take, um, as the, maybe the top takeaways from this, what would you like to share with folks that you'd like them to really have take away from this and really take under consideration as they're going back to their workspaces?
• 20:34
  Speaker 3: Yeah.
• 20:35
  Speaker 3: Number one, you know, I'll, I'll never forget that there was a scene in a movie platoon and once they're going out on ambush and the Sergeant said, no matter what, when you get lost, don't shout out what made serious.
• 20:47
  Speaker 3: You don't wanna raise your voice and, and let the enemy know where you were as it is, you are in this particular environment, you need to shout out, shout
• 20:57
  Speaker 2: Out
• 21:00
  Speaker 3: Right, because you need to speak to your supervisors.
• 21:04
  Speaker 3: You need two speak to people that can help you who've had the experience.
• 21:08
  Speaker 3: Then you need to also be able to speak out to outside consultants.
• 21:12
  Speaker 3: You know, I perform woman or in, in, in my case, you know, specific firms and believe me, it doesn't mean that automatically you're on the clock, I'm going to get billed for it, etcetera.
• 21:24
  Speaker 3: My sense is, you know, have a, a core group of people who you trust, who are generally right, can either point you to the right answer or the person that can be the right answer, uh, or, uh, otherwise provide access to resources.
• 21:41
  Speaker 3: I, I think that that's critical.
• 21:43
  Speaker 3: Uh, the other aspect that I think is critical is, you know, I don't think, I don't think it's overly, uh, you know, harmful to be somewhat, uh, envious of your competitors.
• 21:59
  Speaker 3: And if it works for them, then find out why it works.
• 22:03
  Speaker 3: , you know, ask, you know, you, you can find someone there and, and ask, you know, the issue might be because they have unlimited resources or the issue might be, they have unlimited money.
• 22:16
  Speaker 3: Or the issue might be is they're making their internal investigations in the right place.
• 22:23
  Speaker 3: They have a sharp team, they have a sharp compliance team.
• 22:27
  Speaker 3: They have a audit team that looks at everything and has a regular audit schedule.
• 22:32
  Speaker 3: They have a good risk team.
• 22:34
  Speaker 3: My sense is really dig in and find out what the answers to those questions are.
• 22:40
  Speaker 1: Thanks for listening to this episode of the comply podcast, we hope you enjoyed.
• 22:44
  Speaker 1: Part two of the conversation had between Rhonda and Tony around UDAP compliance under CFPB director Chopra for additional insights into all things, marketing compliance, you can head to content dot, perform line.com and be sure to check out the links and resources in today's show notes as always, thanks so much for listening and we'll see you next time.