Top Story Operations Related

The CFPB on Friday announced it has published an order establishing supervisory authority over Google Payment Corp. While Google Payment Corp. is already subject to CFPB’s enforcement jurisdiction, the CFPB has determined that Google Payment Corp. has met the legal requirements for supervision. The CFPB is making this order public to provide transparency about how it assesses risks using consumer complaints and other factors.

The CFPB's order does not constitute a finding that the entity has engaged in wrongdoing and does not require the CFPB to conduct a supervisory examination.

CNN reported on Friday that Google has filed suit against the CFPB, challenging the Bureau's decision to place Google Payment Corp. under federal supervision. A Google spokesman was quoted as saying "This is a clear case of government overreach involving Google Pay peer-to-peer payments, which never raised risks and is no longer provided in the U.S., and we are challenging it in court.”

The Federal Reserve Board has released results of a survey of senior financial officers at banks about their strategies and practices for managing reserve balances. The Senior Financial Officer Survey is used by the Board to obtain information about banks' reserve balance management strategies and practices, their deposit pricing strategies, their expectations for potential changes in both the size and composition of their balance sheets, and their views regarding Federal Reserve facilities.

The CFPB has announced it has sued Comerica Bank for "systematically failing its 3.4 million Direct Express cardholders — primarily unbanked Americans receiving federal benefits" on Direct Express prepaid debit cards. The CFPB alleges that Comerica deliberately disconnected 24 million customer service calls, impeding cardholders from exercising their rights under the law, charged illegal ATM fees to over 1 million cardholders, and mishandled fraud complaints while providing federal benefits through the Direct Express prepaid debit card program. The CFPB is asking the court to order Comerica to halt these practices, provide refunds to affected customers, and pay civil penalties that would go to the CFPB's victim relief fund.

The Bureau's complaint against Comerica seeks to stop Comerica’s unlawful conduct, to provide redress for harmed borrowers, and the imposition of a civil money penalty, which would be paid into the CFPB’s victims relief fund.

[Editor's Note:The Treasury Department's Bureau of the Fiscal Service recently announced it has selected Bank of New York Mellon Corporation to be the Financial Agent of the Direct Express program for five years starting January 3, 2025.]

FinCEN has published [89 FR 96708] an invitation to the public to nominate financial institutions, trade groups, and non-Federal regulators or law enforcement agencies for membership in the Bank Secrecy Act Advisory Group (BSAAG). New members will be selected for three-year membership terms.

BSAAG membership is open to financial institutions subject to the BSA, trade groups that represent financial institutions subject to the BSA, and federal and non-federal regulators and law enforcement agencies that are located within the United States. The BSAAG is the means by which the Treasury receives advice on the reporting requirements of the Bank Secrecy Act (BSA) and informs private sector representatives on how the information they provide is used.

Nominations must be emailed to BSAAG@fincen.gov, and received by January 6, 2025.

Yesterday, the Federal Reserve Board, CFPB, FDIC, OCC, FinCEN, NCUA and state financial regulators issued a joint press release to announce a joint Statement on Elder Financial Exploitation.

The eleven-page Statement provides supervised institutions with examples of risk management and other practices that may be effective in combating such exploitation.

• FDIC FIL-83-2024
• OCC Bulletin 2024-34

The Treasury Department has reported that OFAC has sanctioned five individuals and four entities — including Pullman Global Solutions LLC, a Wyoming-based entity that is owned 50 percent or more by a sanctioned individual — that are associated with or leverage the TGR Group, a sprawling international network of businesses and employees that have facilitated significant sanctions circumvention on behalf of Russian elites.

For the names and identification information of the designated individuals and entities, see yesterday's BankersOnline OFAC Update.

The Treasury Department yesterday announced that the U.S. is imposing sanctions on 35 entities and vessels that play a critical role in transporting illicit Iranian petroleum to foreign markets. This action imposes additional costs on Iran’s petroleum sector following Iran’s attack against Israel on October 1, 2024, as well as Iran’s announced nuclear escalations. Petroleum revenues provide the Iranian regime with the resources to fund its nuclear program, develop advanced drones and missiles, and provide ongoing financial and material support for the terrorist activities of its regional proxies.

For the names and identification information of the designated entities and vessels, see yesterday's BankersOnline OFAC Update.

The OCC has issued Bulletin 2024-33 announcing it has issued version 1.1 of its “Unfair or Deceptive Acts or Practices and Unfair, Deceptive, or Abusive Acts or Practices” booklet of the Comptroller’s Handbook. The booklet contains information for examiners regarding supervision of a bank’s practices related to section 5 of the Federal Trade Commission Act, which prohibits banks from engaging in unfair or deceptive acts or practices (UDAP), and sections 1031 and 1036 of the Dodd-Frank Act, which prohibit unfair, deceptive, or abusive acts or practices (UDAAP).

The updated booklet—

• provides further clarity regarding sound risk management practices and guidance to examiners regarding overdraft services.
• incorporates updates from the Consumer Financial Protection Bureau regarding data protection and information security.
• includes an updated version of the “Appendix B: UDAP and UDAAP Risk Indicators.”
• reflects OCC and interagency issuances that have been published or rescinded since June 2020.
• includes other minor updates for general clarity.

The FDIC has updated its webpage Questions and Answers Related to the FDIC's Part 328 Final Rule to add several answers to a growing collection of frequently asked questions relating to the updated regulation from stakeholders, including banks, trade associations, tech companies, vendors, and others.

The Consumer Financial Protection Bureau this morning proposed a new rule to rein in data brokers that sell Americans' sensitive personal and financial information. The proposed rule would limit the sale of personal identifiers like Social Security Numbers and phone numbers collected by certain companies and make sure that people’s financial data such as income is only shared for legitimate purposes, like facilitating a mortgage approval, and not sold to scammers targeting those in financial distress. The proposal would make clear that when data brokers sell certain sensitive consumer information they are "consumer reporting agencies" under the Fair Credit Reporting Act (FCRA), requiring them to comply with accuracy requirements, provide consumers access to their information, and maintain safeguards against misuse.

The proposed rule would:

• Treat data brokers just like credit bureaus and background check companies: Companies that sell data about income or financial tier, credit history, credit score, or debt payments would be considered consumer reporting agencies required to comply with the FCRA, regardless of how the information is used.
• Protect consumers' personal identifiers from abuse and misuse: When consumer reporting agencies collect information like names, addresses, or ages for credit reports, any subsequent sale of that information would be covered by the FCRA's protections.
• Require clear consumer consent for data sharing: Under the proposed rule, companies relying on consumers’ consent to obtain or share a consumer’s credit report would need separate, explicit authorization to do so, rather than burying permissions in fine print.

Comments on the proposal will be accepted through March 3, 2025.

• Fact Sheet on the proposed rule
• Director Chopra's remarks on the proposal
• Proposed rule
• Press release
• Publication update: Published at 89 FR 101402 on 12/13/2024