On April 30, the U.S. Circuit Court of Appeals for the District of Columbia Circuit vacated a Securities and Exchange Commission order imposing sanctions. The court held that an investment advisory firm and its owners did not violate Section 207 of the Investment Advisers Act of 1930, 15 U.S.C. § 80b-7, by negligently omitting material…

A federal district court recently refused to dismiss a complaint alleging that a real estate marketing company operated its “co-marketing program” among real-estate agents and mortgage lenders in a manner that violated the anti-kickback provision of the Real Estate Settlement Procedures Act (“RESPA”). In particular, the court concluded that plaintiffs in the case had plausibly…

On April 29, the New York Department of Financial Services (NY DFS)—the state’s principal banking and insurance regulator—announced that it is creating a new Consumer Protection and Financial Enforcement (CPFE) division. The new division, described by commentators as a state-level version of the Consumer Financial Protection Bureau (CFPB), or “mini CFPB,” will have responsibility…

As soon as next week, the Consumer Financial Protection Bureau (CFPB) is expected to propose the first substantive regulations under the Fair Debt Collection Practices Act (FDCPA) since the law’s enactment in 1977. This rulemaking has the potential to substantially clarify and modernize many of the FDCPA’s requirements, with important implications not only for debt collection agencies and others who fit the law’s narrow definitions of “debt collector,” but for any entity engaged in the collection or sale of consumer debts.

Interest among industry and consumer-group stakeholders likely will be intense: An earlier agency notice about possible subjects for FDCPA rulemaking drew over 23,000 written comments to the CFPB, and a concrete proposal like the one forthcoming could generate many more. That level of interest is not surprising, given that debt collection activities consistently have ranked either first or second on the list of areas generating the highest number of consumer complaints to the Bureau. According to some press reports, the proposal may be released Wednesday, May 8, in connection with a CFPB Town Hall hosted by Director Kraninger.

Given the likely implications and widespread interest in the proposal, this alert serves as a primer on the anticipated rulemaking, both by placing it in context through a brief summary of its background, and by focusing on topics that the proposal is likely to cover.

On April 16, the SEC’s Office of Compliance Inspections and Examinations (“OCIE”) issued a Risk Alert highlighting Regulation S-P compliance deficiencies and issues it found in recent examinations of broker-dealers and investment advisers. Regulation S-P is the primary SEC rule detailing the safeguards these firms must take to protect customer privacy. The Risk Alert provides…

On Wednesday, Consumer Financial Protection Bureau (CFPB) Director Kathy Kraninger delivered her first policy speech since succeeding Mick Mulvaney as head of the CFPB in December. Forecasting the Bureau’s agenda over the coming months, Kraninger promised that, among other things, the Bureau will publish within weeks proposed rules to implement the Fair Debt Collection Practices…

As recognized by new guidance from the Financial Industry Regulatory Authority (FINRA), the departure of a registered representative often prompts customer questions about the departing representative and the continued servicing of a customer’s account. In light of the continued frequency of movement of registered representatives from, or among, member firms, FINRA issued guidance on April…

What is this bill?  A new bill introduced in the U. S. Senate on March 14, 2019 would require companies to obtain explicit user consent before facial recognition data could be collected and shared. The bill is known as the Commercial Facial Recognition Privacy Act of 2019, and was introduced by Sens. Brian Schatz. D- Hawaii and Roy Blunt, R-Missouri.

What does the bill prohibit?  The bill makes it unlawful for any covered entity to knowingly use facial recognition technology to collect facial recognition data, UNLESS the covered entity obtains explicit consent from the individual after providing notice to such individuals. The bill would also require that covered entities notify individuals whenever their facial recognition data is used or collected.

On March 12, 2019, the United States Attorney’s Office for the District of Massachusetts announced federal criminal charges in “Operation Varsity Blues,” the largest college admissions case ever prosecuted by the Department of Justice. Fifty people have been charged for their involvement in what prosecutors describe as a nationwide conspiracy to get the children of…

On 7 February 2019, the German competition law regulator, the Federal Cartel Office (FCO), concluded a lengthy investigation into Facebook.  It found that the company abused its dominant market position by making the use of its social network conditional on the collection of user data from multiple sources.

The FCO’s probe into Facebook is one of the first cases in the EU concerning the intersection between the EU’s new data privacy laws (contained in the General Data Protection Regulation or GDPR) and competition law. The abuse finding under German competition law (which is broadly the same as the pan-EU competition law in this regard) relied on what was, according to the FCO, a breach of EU data protection law.