Skip to main content

Recent Regulation Changes and Policies – Spring 2023

Share

New regulations and updates to current regulations impact compliance policies for financial services professionals. Staff members need to know about these changes, what is expected of them, and when the changes take place to make sure they are compliant with all the regulations that affect them.

BAI constantly monitors regulation updates impacting the financial services industry. Many updates were passed in Q4 of 2022 that go into effect in Q1 of 2023. Below are some of the biggest changes that were passed, along with what needs to be done to be compliant with them.

Beneficial Ownership Information (BOI)

Since multiple entities are involved when it comes to beneficial ownership, it is important to make sure all information is kept secure.

The Financial Crimes Enforcement Network

(FinCEN) issued a proposal to implement strict access and confidentiality safeguard requirements to protect sensitive BOI submitted to FinCEN’s confidential database. The database requirement was created under the Corporate Transparency Act (CTA), which was passed in 2021. The proposal includes the following measures:

1. Only authorized recipients have access to BOI

  • The financial institution  shall  restrict  access to information to insiders such as directors, officers, employees, or authorized third parties like contractors, and agents, all of which must be located within the United

2. Authorized recipients access the information only for purposes permitted by the CTA.

  • Access by financial institutions is only permitted to fulfill customer due diligence requirements under the law and institutions must obtain the consent of the reporting Only law enforcement (local, state, federal, and international) is permitted access outside of institutions required to comply with due diligence requirements.
  • Institutions must certify that access requests are compliant with due diligence requirements and written consent has been obtained from the reporting company.

3. Authorized recipients only  re-disclose BOI in a way that protects its security and confidentiality and is subject to strict cybersecurity controls, confidentiality protections and restrictions, and robust audit and oversight measures.

If the proposal passes, organizations will need to update their Bank Secrecy Act/anti-money laundering policies and procedures to comply with the changes. Written comments on this proposed rule were due to be submitted on or before February 14, 2023.

Regulation II Updates

When the Federal Reserve Board promulgated Regulation II, the market had not yet developed solutions to broadly support multiple networks over which merchants could route card-not-present debit card transactions. At the time, many networks could not process such transactions at all, while others could do so only with technology that was not widely deployed in the marketplace. In the decade since the adoption of Regulation II, however, technology has evolved to address these barriers, and most networks can now process card-not-present transactions. Recent data collected by the Board confirm that most single message networks are now capable of processing card-not-present transactions.

In light of these technological updates, the Board of Governors is adopting a final rule going into effect on July 1, 2023. The rule amends Regulation II to include the following:

  1. Specify that the requirement for each debit card transaction to be processed on at least two unaffiliated payment card networks applies to card-not present
  2. Clarify the requirement that debit card issuers ensure that at least two unaffiliated networks have been enabled to process a debit card
  3. Standardize and clarify the use of certain

To be compliant with these updates, banks must be able to do the following to process debit card transactions:

  • The enabled networks in combination must not result in the operation of only one network or only multiple affiliated networks for a geographic area, specific merchant, particular type of merchant, or particular type of transaction.
  • Each of the enabled networks must have taken steps reasonably designed to be able to process the electronic debit transactions that they would reasonably expect will be routed to them, based on expected transaction volume.
  • IT network topologies and business continuity plan (BCP) policies will need to be updated to match the designs for both networks used to process the card-not-present debit

CPFB Bulletin on Unanticipated Overdraft Fee Assessment Practices

Overdraft fees were established as a way for financial institutions to approve transactions for consumers when they don’t have sufficient funds to otherwise make a purchase. More and more transactions are being done with auto draft though, and given

the way institutions settle previous transactions, some consumers might think they have a higher balance than they do. This has caused more instances of overdraft fees being assessed and has regulators looking at banks for UDAAP violations.

In most cases, an available balance is the ledger balance plus any deposits that have not yet cleared but are made available, less any pending (i.e., authorized but not yet settled) debits. Since consumers can easily access their available balance via mobile application, online, at an ATM, or by phone, they reasonably may not expect to incur an overdraft fee on a debit card transaction when their balance shows sufficient available funds. However, the way some institutions used back-office practices was both misleading and harmful to the consumer.

In September 2022, the Consumer Financial Protection Bureau (CFPB) found that a financial institution had engaged in unfair and abusive conduct when it charged authorize positive, settle negative (APSN) fees. They determined that the account had a sufficient available balance at the time the financial institution authorized the payment, but through complex background settlement practices, the financial institution ended up charging an overdraft fee to the consumer.

With this ruling by the CFPB, it is important for institutions to clearly lay out how they manage transaction settlements so consumers can have an accurate idea of how much money and what type of spending power they have before incurring an overdraft fee. Institutions need to monitor their UDAAP and overdraft policies and review and update procedures, disclosures, and practices if necessary to ensure compliance with the guidance.

CFPB Bulletin on Returned Deposited Item Fee Assessment Practices

In many circumstances, a check depositor has no control over whether a deposited check will be returned, and likely no reason to anticipate

that it will be. The check depositor generally cannot verify with the check originator’s depository institution, before depositing a check, that there are sufficient funds in the issuer’s account for the check to clear.

Many depository institutions have blanket policies of charging fees to the check depositor for every returned deposited item, irrespective of the circumstances of the transaction or patterns of behavior on the account. While certain entities, such as lenders and landlords, may be able to recoup such fees from the check originator, consumers generally cannot.

The CFPB issued a statement saying blanket policies of charging returned deposited item fees to consumers for all returned transactions irrespective of the circumstances of the transaction or patterns of behavior on the account are likely to be considered unfair. With that announcement, it is important for institutions to review their UDAAP and fee assessment policies and procedures, disclosures, and practices, and update them if necessary to ensure compliance with the guidance.

CFPB Bulletin on Returned Deposited Item Fee Assessment Practices

In many circumstances, a check depositor has no control over whether a deposited check will be returned, and likely no reason to anticipate that it will be. The check depositor generally cannot verify with the check originator’s depository institution, before depositing a check, that there are sufficient funds in the issuer’s account for the check to clear.

Many depository institutions have blanket policies of charging fees to the check depositor for every returned deposited item, irrespective of the circumstances of the transaction or patterns of behavior on the account. While certain entities, such as lenders and landlords, may be able to recoup such fees from the check originator, consumers generally cannot.

The CFPB issued a statement saying blanket policies of charging returned deposited item fees to consumers for all returned transactions irrespective of the circumstances of the transaction or patterns of behavior on the account are likely to be considered unfair. With that announcement, it is important for institutions to review their UDAAP and fee assessment policies and procedures, disclosures, and practices, and update them if necessary to ensure compliance with the guidance.

CFPB Complaint Bulletin: An Analysis of Consumer Complaints Related to Crypto Assets

Crypto-assets are increasingly offered and marketed to consumers, including crypto-asset rewards incorporated into other products such as credit, debit, and prepaid cards and crypto-asset product offerings by person-to-person (P2P) payments platforms. As these offerings have increased, so too have consumers’ complaints to the CFPB related to crypto assets.

More than 8,300  complaints  related to crypto assets were submitted to the CFPB from October 2018 to September 2022, most of which were made in the last two years. In these complaints, the most common issue selected was fraud and scams (40%), followed by transaction issues (with 25% about the issue of “Other transaction problem,” 16% about “Money was not available when promised,” and 12% about “Other service problem”).

  • The top issue across all crypto-asset complaints was “Fraud or scam.” This issue appears to be getting worse, as fraud and scams make up more than half of “virtual currency” complaints received in
  • Additional complaints were on frozen accounts, platform bankruptcies, consumer losses, difficulty obtaining restitution, poor customer service, and undisclosed or unexpected fees or costs.

The CFPB takes both consumer complaints and harm against consumers very seriously. We can expect them to use complaints about crypto assets to either create legislation to supervise cryptocurrency firms or investigate the claims and issue enforcement actions against cryptocurrency organizations to hold them accountable for unfair business practices.

FCC and Ringless Voicemail

On November 21, 2022, the Federal Communications Commission (FCC) clarified by a unanimous decision that ringless voicemail constitutes a “call” subject to the Telephone Consumer Protection Act (TCPA), for the same reasons the Commission found computer-generated text messages sent to a carrier’s text server to be calls for purposes of the TCPA. The TCPA protects consumers from unwanted robocalls, or an artificial or  prerecorded  voice to a wireless telephone number without the prior express consent of the consumer being called. The clarification means a company would be out of compliance with the Act for delivering ringless voicemails without receiving prior consent from the called consumer; such an act would be considered illegal. Violations of the rule could be enforced by the FCC or the consumer(s) could sue in court. On February 2, 2023, FCC Chairwoman Jessica Rosenworcel proposed the Commission take action and vote on adopting the new clarification.

An organization’s marketing and communication policies and procedures should be updated to clarify the ruling on ringless voicemails and how the organization will comply with the TCPA requirements if they are engaging in this type of activity. Once the policies and procedures have been updated, the organization should communicate the  information  to all staff to clarify the changes and expectations going forward.

About BAI

BAI has almost 100 years of experience in the financial services industry. We have worked with over 2,300 banks, credit unions, and other financial institutions to help them improve their compliance programs. Understanding new regulation and regulatory updates that have been passed is important for lenders to be compliant with each governing body that makes the rules. BAI monitors financial regulatory entities to make sure people in the financial services industry know what changes are coming and what they need to do to prepare. For more information on how BAI can help you and your business stay ahead of regulation updates, visit here: info.bai.org/contact-bai

Related Articles

Login to View This Content

 

Become a member to unlock exclusive content, connect with industry experts, and gain access to valuable resources. If your employer is an institutional member, activate your ProSight membership benefits with a simple email address.