Firm Alerts

In a recent complaint, the FTC alleged that Residual Pumpkin Entity, LLC, (formerly doing business as CafePress) and PlanetArt, LLC, failed to take proper security measures to protect consumer’s data. FTC Complaint, File No. 1923209, https://www.ftc.gov/system/files/ftc_gov/pdf/CafePressComplaint_0.pdf. TThe FTC alleged that Residual Pumpkin and PlanetArt stored social security numbers and security answers in clear readable text and created unnecessary risks to personal information by storing it indefinitely on its network without a business need. In February of 2019, hackers exploited...

On March 4, 2022, the Utah legislature joined several other states in passing a consumer privacy law, the Utah Consumer Privacy Act (“Act”). Once signed by the governor, as is expected, the Act will become effective December 31, 2023. The Act creates a right for consumers to access and delete personal data maintained by certain businesses and to opt out of the collection and use of personal data for certain purposes. The Act also requires businesses that control and process consumer’s personal data to provide information regarding how a consumer’s data is used and to accept and comply with a...

The California Department of Financial Protection and Innovation 2021 Annual Report for licensees under the California Financing Law (CFL) is due March 15, 2022. Every CFL licensee as of December 31, 2021 must file the report, even if no business was conducted under the license in 2021. Failure to file the report may result in revocation of the CFL license and monetary penalties. Licensees must submit the form online at https://docqnet.dfpi.ca.gov. Please contact us with any questions. Michael Tomkies and Mercedes Ramsey

The FTC proposes to settle the charges against Dun &Bradstreet (D&B) for failing to fix small business credit reporting errors and deceiving small businesses regarding the benefit of D&B’s CreditBuilder product. In the Matter of Dun & Bradstreet, Inc., FTC Complaint File No. 172-3196, 2022 WL 190742. D&B stated that it has fully cooperated with the FTC and is committed to “operating with integrity, transparency, and in compliance with the laws that apply to our business.” The FTC initially alleged that D&B failed to fix small business and consumer credit reporting...

Elevate, a fintech, entered into a settlement with the District of Columbia to resolve a suit brought by the District of Columbia in regard to the fintech’s activities related to two bank loan programs facilitated and advertised by the fintech. The banks were not parties to the suit or the settlement. The case and settlement follow a pattern of state regulator’s bypassing the banks and bringing actions against service providers and fintechs. Under the settlement the fintech agreed not to (i) provide or advertise loans or lines of credit to District of Columbia consumers at an interest rate...

Following its ruling upholding the OCC’s Madden-fix rule, the District Court for the Northern District of California has likewise ruled in favor of the Federal Deposit Insurance Corporation’s (“FDIC”) cross-motion for summary judgment, upholding the FDIC’s parallel Madden-fix rule. See Order Resolving Cross-Motions for Summary Judgment, California v. Federal Deposit Insurance Corporation, No. 20-cv-05860-JSW (N.D. Cal. filed Feb. 8, 2022); see also our ALERT of Feb. 10, 2022. In 2020, seven states and the District of Columbia (“Plaintiffs”) sued the FDIC challenging the validity of the...

The U.S. Department of Veterans Affairs (“VA”) has published a final rule amending the VA’s procedures for reporting debt to consumer reporting agencies. Under the final rule, the VA will only report a delinquent debt owed to the VA if it meets three criteria: (i) the VA has exhausted all available collection efforts, including enforced collection; (ii) the debt is not owed by an individual who is determined by VA to be catastrophically disabled or has reported to VA a gross household income below the threshold for cost-free health care; and (iii) the outstanding debt is over $25. Through...

In 2019, Maine passed two laws amending the Main Fair Credit Reporting Act to regulate the reporting of overdue medical debt and debt resulting from economic abuse. Under those laws, credit bureaus cannot report medical debt until it is 180 days overdue, must report medical debt as ordinary consumer credit if the patient is making regular payments, and must remove medical debt from credit reports upon reasonable evidence the debt is fully paid. Credit bureaus must also reinvestigate debts if consumers provide documentation they incurred the debt because of economic abuse, i.e., domestic...

The District Court for the Northern District of California has ruled in favor of the Office of the Comptroller of the Currency’s (“OCC”) cross-motion for summary judgment, upholding the OCC’s “Maddenfix” rule and the so-called “valid-when-made” principle. See Order Resolving Cross-Motions for Summary Judgment, California v. Office of the Comptroller of the Currency, No. 20-cv-05200-JSW (N.D. Cal. filed 02/08/22). In 2020, California, Illinois and New York (“Plaintiffs”) sued the OCC challenging the validity of the OCC’s final rule titled Permissible Interest on Loans That Are Sold, Assigned...

The CFPB has announced that it will begin seeking public comments regarding “back-end fees” to help inform its future agenda. This initiative is part of the CFPB’s recently announced examination of credit card rates and fees with an eye toward ensuring “robust and fair competition” in the credit card market. See our ALERT of Jan. 25, 2022. The CFPB is targeting the so-called “fee economy” that “conceals the true price of products (including credit cards) from the competitive process,” citing internal research that found that credit card companies charged over $14 billion in late fees and...