Skip to main content

Consumer Financial Protection Bureau

Jump To:

Open Recommendations (16 total)

Consumer Privacy: Better Disclosures Needed on Information Sharing by Banks and Credit Unions

Show
1 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of CFPB, in consultation with the other federal financial regulators, should update the model privacy form and, in doing so, consider whether it is feasible to include more comprehensive information about third parties with whom financial institutions share consumer personal information. (Recommendation 1)
Open
CFPB said it is committed to ensuring that financial institutions' disclosures to consumers accomplish their consumer protection and transparency goals and that it will consider GAO's recommendation but has not yet taken any action on it. In May 2021, CFPB noted that any changes to the model privacy form would likely require a joint rulemaking with other agencies including FTC, SEC, and CFTC and such a rulemaking is not currently on its rulemaking agenda. In October 2022, CFPB initiated a rulemaking on personal financial data rights and comments closed in December 2023. While not directly related to the model privacy form, this rulemaking could impact how financial institutions provide information to consumers on data shared with third parties. As of March 2024, CFPB has not taken any actions to change the model privacy form. We will continue to monitor CFPB's rulemaking efforts related to consumer privacy.

Fair Lending: CFPB Needs to Assess the Impact of Recent Changes to Its Fair Lending Activities

Show
1 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of CFPB should collect and analyze information on the outcomes of its 2018–2019 fair lending reorganization and use that assessment to address any challenges or unintended consequences resulting from the change. (Recommendation 1)
Open
CFPB agreed with this recommendation and has stated its commitment to assessing the effects of the 2019 reorganization. In December 2021, CFPB said it was assessing the impacts of the reorganization and would address challenges or unintended consequences that resulted from that change. In June 2023, a CPFB official said that CFPB was continuing work on this assessment. This recommendation remains open pending further progress from CFPB toward completing this assessment.

Financial Technology: Products Have Benefits and Risks to Underserved Consumers, and Regulatory Clarity Is Needed

Show
1 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of the Consumer Financial Protection Bureau should issue clarification on the application of the Truth in Lending Act's definition of "credit" for earned wage access products not covered by its November 2020 advisory opinion. (Recommendation 1)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Blockchain in Finance: Legislative and Regulatory Actions Are Needed to Ensure Comprehensive Oversight of Crypto Assets

Show
1 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of the Consumer Financial Protection Bureau should jointly establish or adapt an existing formal coordination mechanism with CFTC, FDIC, the Federal Reserve, NCUA, OCC, and SEC for collectively identifying risks posed by blockchain-related products and services and formulating a timely regulatory response. To facilitate these objectives, this mechanism could include formal planning documents that establish the frequency of meetings and processes for identifying risks and responding to them within agreed-upon time frames. (Recommendation 1)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Private Student Loans: Clarification from CFPB Could Help Ensure More Consistent Opportunities and Treatment for Borrowers

Show
1 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of CFPB should provide written clarification to nonbank private student loan lenders on their authorities under the Fair Credit Reporting Act to offer private student loan rehabilitation programs that include removing information from credit reports. (Recommendation 1)
Open
As of June 2023, CFBP does not plan to act on this recommendation because the law does not require nonbank private student loan lenders to seek CFPB's approval of student loan rehabilitation programs. CFPB stated that if a financial institution chooses to offer a private student loan rehabilitation program it would be protected under the Fair Credit Reporting Act. Since issuance of our report in May 2019, CFPB was involved in a process led by the Consumer Data Industry Association (CDIA) to revise credit reporting guidelines which included new standards for how lenders should report information on rehabilitated private student loans to credit reporting agencies. In June 2023, some nonbank private student loan lenders told us that, with the development of the new credit reporting guidance, they were comfortable they had authority to offer rehabilitation programs. However, clarification from CFPB could still help resolve any remaining uncertainties among nonbank private student loan lenders.

Financial Technology: Agencies Can Better Support Workforce Expertise and Measure the Performance of Innovation Offices

Show
1 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of the Consumer Financial Protection Bureau should fully incorporate leading workforce planning practices in the primary offices involved in policymaking and oversight related to financial technology by conducting strategic workforce planning that addresses financial technology; collecting staff skillset data and determining the critical financial technology skills the agency needs; developing targeted strategies to address financial technology-related skills gaps; and measuring the effectiveness of its financial technology-related training in addressing skill needs. (Recommendation 1)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Consumer Data Protection: Actions Needed to Strengthen Oversight of Consumer Reporting Agencies

Show
1 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of CFPB should assess whether its process for prioritizing CRA examinations sufficiently incorporates the data security risks CRAs pose to consumers, and take any needed steps identified by the assessment to more sufficiently incorporate these risks. (Recommendation 2)
Open
In July 2020, CFPB staff noted that they were assessing whether, and if so, how and when, to incorporate data security risks into their supervisory prioritization. As part of that evaluation, CFPB is assessing whether those processes should incorporate data security risks CRAs pose to consumers in light of the agency's statutory authorities, supervisory responsibilities, and resources. We have requested additional information from CFPB on their response to this recommendation, but as of September 2023, the agency has not provided us any new information. GAO will continue monitoring CFPB's assessment of prioritization of CRA data security risks.

Financial Technology: Agencies Can Better Support Workforce Expertise and Measure the Performance of Innovation Offices

Show
2 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of the Consumer Financial Protection Bureau should develop performance goals and measures for CFPB's Office of Competition and Innovation that cover key aspects of the office's activities, such as outreach to industry participants, and that are clear, targeted, and measureable. (Recommendation 2)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Consumer Financial Protection Bureau The Director of the Consumer Financial Protection Bureau should develop performance measures that are specific to its strategic objectives related to supervisory technologies. (Recommendation 3)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Financial Technology: Agencies Should Provide Clarification on Lenders' Use of Alternative Data [Reissued with revisions on Mar. 12, 2019.]

Show
1 Open Recommendations
Agency Affected Recommendation Status Sort descending
Consumer Financial Protection Bureau The Director of the Bureau of Consumer Financial Protection should, in coordination with the federal banking regulators and with input from relevant stakeholders, communicate in writing to fintech lenders on the appropriate use of alternative data in the underwriting process, including issues to consider when selecting types of alternative data to use. (Recommendation 1)
Open
In December 2019, the Board of Governors of the Federal Reserve System, the Consumer Financial Protection Bureau, the Federal Deposit Insurance Corporation, the National Credit Union Administration, and the Office of the Comptroller of the Currency (the agencies) issued an interagency statement on the use of alternative data in credit underwriting. The statement broadly highlights some potential benefits and risks of using alternative data and encourages firms to responsibly use alternative data. However, the statement does not provide firms or banks with specific direction on the appropriate use of alternative data. In March 2021, the federal banking regulators and the Consumer Financial Protection Bureau (CFPB) issued a request for information (RFI) on Financial Institutions' Use of Artificial Intelligence, including Machine Learning, and in July 2021, the banking regulators issued proposed third party risk management guidance for comment, both of which discuss alternative data. In June 2023, the banking regulators issued final interagency guidance on third party risk management, but the guidance does not address specific topics, such as alternative data, or specific types of third-party relationships, such as relationships with fintech companies. Further, the banking regulators and CFPB have not issued any documentation related to the RFI as of April 9, 2024. To fully implement this recommendation, CFPB needs to provide, in coordination with the federal banking regulators, finalized written communication that gives banks that engage in third party relationships with fintech lenders specific direction on the appropriate use of alternative data in the underwriting process. Without such direction, banks partnering with financial technology lenders may not effectively manage associated risks, including compliance with fair lending and other consumer protection laws.