Latest / COMPLY: The Marketing Compliance Podcast / Recent CFPB Rulemaking Activity & Looking Ahead for 2024
Transcript
- 0:11Speaker 1: Hey , complied podcast listeners and welcome to this week's episode. Today's episode is part two of the discussion between John Zarella perform Lines , SVP of Sales and CFPB alumni Gary Stein and Melissa Ball Rizzi . In this episode, the three discuss their thoughts and observations on recent CFPB rulemaking activity steps you can take now to get ahead of regulatory scrutiny, looking ahead into rulemaking for 2024 and what impact the upcoming election may have on operations at the CFPB . Thanks for listening and enjoy.
- 1:06Speaker 2: We know this year the CFPB has been very active with things like combating junk fees and issue 29 of their supervisory highlights. Um, there was also the proposed rule to supervise larger non-bank companies that offer services like digital wallets and payments apps with all of these sort of new rules coming down. Um, I'm curious in , in your opinion, you know, is there one that stands out that is going to be more of the focus of the CFP PB from an enforcement standpoint? And again, you know, any kind of best practices that you would advise clients on, on to how to stay ahead of some of those? Um, would love to just hear some of your thoughts on that. And again, Gary, if you wanna start with this one, go for it.
- 1:47Speaker 3: Yeah, I mean, I think it depends on who you are. If you're Apple or Google, you're probably a little more focused on the larger participant rule. Um , but also any of the companies like Bill Pay companies that could be , um, swept into that, you know, there's a data brokers rule, you , you know , um, uh, junk fees, you know , uh, as the White House has , has coined them. Um, you know, I, I think what's interesting with them are, like 10 33 is a great example of where the statute to do that, you know, has existed since , um, the Dodd-Frank was enacted and the bureau was created. And here it is, you know, 13 years later, and they're proposing, and I , I , I haven't met a single person who thinks it should have come out sooner. I think the overall direction of the market hadn't matured enough to do it and everything. And, and what's great here, yes, there, there will be real implementation work for the ecosystem players, but again, it is, there's an opportunity to pave the cow paths, you know, and look and see, okay, how is this working today? What's important? What creates consumer harm? And how do we do that in other instances with some of these rules, you know, and overdraft and NSF BS and things like that. Look, that's, that's been talked about for decades. Um, you know , uh, I'd I'd argue that since, you know, since the creation of the Bureau and maybe since , um, the FFIC started forcing large banks to start reporting N-S-F-O-D fees in a more transparent manner so that everybody could see what they're actually collecting. You know, banks have increased and fintechs have emerged to offer kind of fee free alternatives to banking. Um, we, we , we've seen a , you know, some decline, maybe not in the overall levels, but companies adopting no fee policies . So that's, those things have been happening and they're not catching anyone by surprise. Um, I apologize for the sunlight here. The , um, the, the interesting ones, like the LP rule and the data brokers rule that might sweep in companies that might not have been the primary target. So those rules could create fundamental changes for those types of organizations. So an example in the data brokers side are companies, you know, and I , that, that might be doing fraud screening , um, and fraud monitoring. Who, you know, I I I , I think it's highly justified for the bureau to wonder aloud , maybe in hand in hand with the prudential regulators, whether consumers are denied access to financial services products because of fraud and don't have the same recourse they do if it's because of credit or something. But at the same time, there's a safety and soundness mission there, and there would be implications if we started giving, you know, fraudsters that are stealing identities , um, adverse action notices, intended for the original consumer, right? So there are that, that, that would create some business model changes that probably weren't as much on the spectrum for some of those entities as those other types of rules. And then there could be a more fundamental review of the business model,
- 5:12Speaker 4: Melissa? Yeah. So I'm gonna take a, I'm gonna pull up and be more, a little bit 10,000 foot , uh, on it, because to me, all of the rules that are coming out now , uh, hand in hand with some of the supervisory and enforcement actions that have come out recently really is just along the lines of a larger strategy. That data in and of itself, and payments are really clear focuses of the CFPV , um, and the fact that payments and data flow together, that data is a consumer protection concern, is really something that we're seeing all across . So you didn't, you know, we hadn't really mentioned the Fair Credit Reporting Act yet. All of the things that are happening out of the Bureau now is an attempt to really regulate the flow of both funds and consumer information. And there's gonna be some issues for all the players in the space related to how that plays out, because funds and data don't actually function the same way. Right ? And so some of the things, just picking some of the, the, the soft points or things that are TBD in these rules and how they will play out in 10 33, there's a lot about the collection, the limited collection of data for the only, that what is reasonably necessary for a product or service limited holds, but data does more than that in this economy. Uh, and a lot of companies rely on data for different things like marketing or com improvement of products , uh, and user experience. So how is that gonna work? You know, it's unclear and the, and while the, the actual data has to flow, and that's part of the rule, who's liable for what, even if the obligations are actually laid out, you know, someone's supposed to take the, the express informed consent , which is a new level of requirement that I think is going to be a , a real level of friction for most, but who's liable for that not happening is still unclear TBD, right? And then the LP rule, while it's not really an enforcement piece in the Office of Enforcement traditional sense, it's a expansion of the examination authority. It's the first time the CFPB came out and said that crypto digital assets could be underneath its jurisdiction. That's really important because that is, you know, sort of a nod to the fact that now we can have enforcement actions that are on crypto products that are consum consumer financial products. And so what you see is all of this is like a full court press on expanding the bureau's jurisdiction over markets that it conceives our consumer facing , but maybe not as traditional financial services as many who have been working in this space have thought.
- 8:15Speaker 3: Yeah.
- 8:15Speaker 4: And I think that's be challenge. I
- 8:16Speaker 3: Think's a great point to , to riff on that, and maybe to go even higher level than that, when you think about it , um, there used to be a line that we used to use at the Bureau on a lot of press release , you know, to helping consumers take control of their financial lives. At the end of the day , um, consumers have assets, you know, it's, it's easy. And we've always thought of those assets as the dollars in their bank account or that might, you know, they might owe. Um, but, you know, as, as Melissa's pointed out, data is increasingly that too. And so transparency and control and ensuring that consumer, you know, whether it's written, express, written consent, you know, the , the concept of a consumer authorization and directive and ensuring that you are, if you are accessing or touching those consumer assets , um, you know that you are doing that in , uh, in line with what a consumer would expect or , um, want. And the want comes from the authorization. The expect comes from probably the transparency there. And , and , and you're right, the world's only gonna get more complicated. You know, the , the types of credit services available to us are expanding and becoming more and more specialized, right? The horses out of the barn, we're not gonna go back just to having an auto loan, you know, a mortgage and a credit card. Um, and, and so that , and , and the way we pay, you know, we , we've moved on from check and cash to card and a CH and now a variety of other mechanisms, and it's not gonna be reduced down to one or two things. So as all these models come about, I think what, what we've always tried to think about , um, is what is the spirit of existing regulation? What is it trying to ensure and, and what have the lawmakers and the regulators thought in terms of what could go wrong and apply that lens to these existing models? And if you think about it that way, you know, you could probably anticipate the consumer risks before a regulators knocking on your door.
- 10:30Speaker 2: Yeah, it's really interesting. I like the way that you sort of started out a little bit more in the weeds and, and pulled up to the higher level view. Um , Melissa, the way you broke it down, you know, kind of just talking about the focus, being on data and payments across these different segments is, is really a good way to look at it. It certainly seems consistent with a lot of what we're seeing there. Um, so now I'm gonna ask you to look ahead, right? And I don't know the answer to this, but when you all were at the bureau, if you could have, you know, seen the writing on the wall that some of these current rules would , would make their way into the, the public domain. And maybe those are things already being worked on looking into next year and beyond. Um, can you gimme an idea of what you think the CFPB has in stores for financial institutions or beyond in , in 2024?
- 11:17Speaker 3: Hmm . It's a good question. I , talking with our former colleagues that are still there , uh, I think everybody there is quite busy, so don't expect nothing , . Um, there's obviously a lot of balls in the air right now. All the rules we discussed, and none of them have been finalized. You know, there were data collections started like on BNPL that really, the shoe hasn't dropped on that. Um, there's always been a constant rumor of something coming out back on overdraft. We talked a little bit about , uh, that NSF , um, earlier, and, and, and I will say, by the way, you know, Melissa and I are both payment data geeks. Mm-Hmm . , you know , um, you know , uh, I , I , we probably both spent some time in mortgage, but less attuned, you know , uh, or at least I am to that in some of the other collateralized lending markets. Um, if , if we tend to show a bias on, on those types of things. I mean, to me, I, I, what I really would like to see if this, if we can sit on Santa's lap , is , um, I , I'd like to see something to help the market , um, get to with just enough tough love, but not for the sake of being tough, a , a clean way to enable the bass model. Hmm . Because I, I firmly believe that, look, if, if banking has become, it's, it , it is a balance sheet driven business. And back in the day when I was an , a former consultant and , um, banker, you know, a lot of projects had to do with branch location. It was a geographic business. That's no longer really the case unless you're an ag lending and certain other commercial businesses, it tends not to be, I mean, even credit union charters are like broad. They're not generally geographic or many are, but , uh, in any event. So that means now you've gotta serve and compete with everybody in the marketplace. And how do you do that? You're gonna do that by being specialized, going after very defined target segments, use cases on the small and , and , and larger business side industry verticals. And that requires specialization that I think many banks haven't traditionally invested in. And, and where many fintechs emerge in saying, Hey, we see this slice of the pie, we can help do it. And so it, it's really, I think , um, I , I , I , I'm a big believer in the bass model. I think the fintechs get the benefit of oversight and structure, not to mention insured deposits, you know, from from bank relationships and the banks. I , you know, if, if they aren't able to use these fintechs third parties as product development r and d distribution centers, I think we'd see a , a , a massive amount of bank consolidation. So when I look forward, there's a lot of hemming and hawing about how this works, and I think we'd all agree that we haven't reached a mature state where every bank understands its obligation for its underlying fintechs, and every FinTech is aware of what their expectations should be. So I'd love to see more focus on setting that so that the model will work for everybody. Having said that, I think we'll probably see more punitive regulations. Hmm . .
- 14:48Speaker 4: Yeah. So Gary's always the more positive , I'm a lawyer , um, as
- 14:53Speaker 2: Gonna say, that's the non-attorney in him ,
- 14:55Speaker 4: That's the non-attorney in him. I agree. I think there's gonna be a lot more activity from every sector in the CFPB . They're very, very busy. Everybody's working hard. Um, more enforcement probably with the increase of staff, you'll see more investigations, you'll see more of them move to the end game , whether it's litigation or consent order and some big , uh, there're probably gonna be some big announcements in 24. I think that's in the, that's not gonna be a surprise to anyone. Um, the rules are gonna move forward. 10 33 should close, I think next year. Uh, FCRA will probably get a notice of proposed rulemaking in the next year. There'll be some, you know, I think there is a lean on overdraft, probably something comes out. There's a big push, I think at the CFPB to , uh, lock in the gains of some of the work that's been done over the last year and I think last couple years. And I think you'll see that in either advisory opinions or more , uh, of the rulemaking and supervision is gonna continue to, to actually note the dollars and cents it gets back in their exams. And we're seeing that exam , uh, examiners are asking for more and more money back from exam subjects. And so, you know, I think that's gonna happen as well.
- 16:16Speaker 3: Yeah. I, I do think, believe it or not, there is a fixed capacity to what the bureau can churn out. I mean, Melissa touched on this a little bit on the enforcement side. Rulemaking is done correctly not to suggest that the bureau is not doing it correctly. It's a heavy lift. I mean, there's , uh, you , you need data-driven evidence to do it, right. Um, it , it is a, there's a, these public comment periods that we're going through and it really has to be thought out. And then on top of all of that, as we continue to see, you know, there's gonna be legal , um, you know, threats and pushback on some of these things if they feel like the authorities, you know, weren't , uh, implemented, you know, effectively to carry out those rules. So , um, there will be a lot coming out, but, you know, you could easily get to a point where parts of the bureau are kind of consumed also. So , um, you know, I I , I'd I'd advise everybody to pay attention to the , um, regulatory agenda. I think the fall one hasn't come out yet, but it generally comes out, I thought around the end of November. You know , um, some of that may just be a confirmation on what we've already heard, but it can be an early indicator of things. You know, the first administration would indicate things on the pre-roll status and stuff that's in the pipeline. And so it's , um, uh, just look for the , um, uh, inter-agency regulatory agendas and look up to CCF pb and , uh, you'll in a few days, you , you , we should probably get some more insights.
- 17:57Speaker 2: Yeah, it sounds like, I mean, just in the last five minutes, you all gave a lot of , um, good things for the listeners to think about. When it comes to planning for next year and the CF PBS potential agenda, now is the time to start thinking about , um, you know, your regulatory change management practices. And like we talked about, whether it's, it's , uh, having to hire additional staff or , or make that proposal or adding technology that allows you to automate in certain areas and, and do more with less. It does seem like next year is going to be a , another year where a lot of these things are gonna be top of mind and , um, need to be actioned on by companies. I guess the , the last question I'll ask you, and it's sort of , uh, in the same vein , um, heading into an election year, Gary, you had mentioned earlier that the CFPB and its 12 year history pretty much had two resets, right? In 2016 and 2020 when we flipped administrations. Um, looking into 2024, if there is an administration shift, do we think there will be another sort of reset , um, because that's just kind of natural bringing people and , and if not, you know, if it, if it remains the same administration, do we think that will allow the CFPB to continue some of the momentum they've created over the last two years , uh, and build on some of these, these rules and programs?
- 19:11Speaker 3: Well, let , let's remember that even before that, the Supreme Court could rule against the constitutionality of the bureau, although by the hearing they had earlier this fall, it didn't sound like they would create the, the, the chaos that could be in the market by unwinding everything that's been done. Um, but we should hold that out there. I mean, I, I, I was just, I'm glad you asked this question, John , because I was just about, I was just thinking that, you know, if there is an administration change , um, I , I think yes com the threat of examination or the depth of it or the threat of enforcement actions may subside. But you know, again, we talked about this, the , the point of all these regulatory obligations , um, is to ensure that at least in the CFPB consumers are treated fairly. And if, if I go back to what I said before, if you embrace the spirit of what's trying to be done there, I I wouldn't take my foot off the gas of any of those things. You might not have to staff up for exams quite as soon or as frequently as you thought, but , um, you know, if you are harming your consumers, you're probably harming your own business outlook. Um, if, if the , uh, Democrats win again , um, I still expect at some point that Director Chopra , um, would, would move on. I mean, they're on a five-year term maximum anyhow. And so, you know, we've seen , um, both Melissa and I worked with Rohit, you know, in the first iteration of the Bureau. Um, and the way that the bureau is being administered now is different than it was under rich. You know , um, they, their people have different styles and, and you are also at a point where , um, in some ways it was easier. In the beginning it was harder because new kid on the block, let's be careful about like , um, we're contentiously created, let's be careful about how we do that. But there were a lot of statutory obligations. Now rulemaking is becoming, you know, after 10 33 and 10 71 , um, more discretionary if you will. And so that just increases the likelihood that whoever the leadership is is going to come in with , um, you know , uh, different, different focus than the one before it . It could be less on payments and more on mortgage, especially depending upon how interest rates move and housing, you know, policies change. So all those types of things could change , uh, the flavor.
- 22:04Speaker 4: So what I'll say , uh, is I'm gonna put in a plug for career staff and the fact that after 12 years, there are people who are still there from day one. And so, you know, what happens up top will always change the, you know, the decor and maybe some of the direction. But the work that's there, the stuff that's in the pipeline, the work, the sunken costs of what already has been done is gonna maintain no matter who's up top after 24. And so it does not behoove anyone to take their foot off the gas, as Gary said, because the extensions of all the powers I talked about in enforcement, the broader jurisdiction will all be there. And I , I don't know about you Gary, but what I thought was interesting about serving all the different directors is once in that seat, no matter who it is, the tools become a little bit more fun to use
- 23:01Speaker 4: Regardless of how you , you know, you might not use them to the same degree, but they're still there. Um, and I think there is that piece of it that maintains no matter what. So you might have like a reprieve or what seems like a reprieve, but all of that stays for the next time. And, and it is not gonna do you well to sort of decide that you don't have to do anything and then wait till the tide turns again.
- 23:29Speaker 2: Yeah, I agree. And, and it does seem now , uh, we mentioned this a little bit in , in our pre-call, just the state of the economy as a whole. Gary, when I think back to what you said, you know, the Bureau was founded on helping consumers take control of their financial lives . Well, consumers are heading into another year of uncertainty, high interest rates , uh, increasing debt . And so the idea that, you know, this organization is here to help those consumers , um, it feels like will be an important thing to maintain some balance in no matter how the election goes. And you know, in addition to that, just look at the complaint volume number. It does seem like more consumers are now aware of the CFPB and what they're here to do, probably in a way that they weren't in 2016 when we saw, you know, kind of the first , uh, shift in administration. So
- 24:14Speaker 3: Way to bring it back, John .
- 24:15Speaker 2: Yeah. Yeah. Thank you . Appreciate that . Well, with , with all that, you know, we, we made it through um, just about an hour. We covered a lot of ground. You all were fantastic. We really appreciate , um, the time and the insights and to help our audience kind of prepare for what may be another challenging year for, for the compliance and legal side of the business. This will certainly be a great resource for them. Um, just so they know how , how can they get in touch with you if anyone has any follow up questions.
- 24:43Speaker 4: We both have very robust websites, I'm sure , I can, I'm at oric.com . Just follow reader easy . All my contact information is right there. Uh, and I'm also on LinkedIn.
- 24:55Speaker 3: Yep . Uh, nine FinTech , uh, with the word spelled out, fintech.com , um, g Stein at nine nine FinTech , uh, also on LinkedIn. And , uh, yeah. And , and, and if you can't find us, call John and John will forward to us.
- 25:11Speaker 2: Definitely. And if you need anything from Perform Line , call me anyway and I'll make sure that you , uh, that you get that. But Gary and Melissa, thanks for your time. Have a great holiday season. We look forward to seeing you again soon.
- 25:21Speaker 3: Thank you. Thanks for
- 25:22Speaker 4: Having me . Thank you.
- 25:31Speaker 1: Thanks for listening to this week's episode of The Comply podcast. I hope you were able to take away some useful information that will help you prepare your business for what's to come in the new year. As always, I'm happy to connect outside of the podcast. Feel free to follow or connect with me on LinkedIn. You can also find additional resources related to today's discussion, as well as contact information for our guests in today's show notes. As always, for the latest content on all things marketing compliance, head to content dot perform line.com . And for the most up-to-date, pieces of industry news events and content, be sure to follow Perform Line on LinkedIn. Thanks again for listening, and we will see you next time.