January 2023

After years of rulemaking efforts, the Consumer Financial Protection Bureau (CFPB) may issue a final rule later this month that would require lenders to collect and report data on small business loan applications, including applications from minority-owned and women-owned small businesses. According to the CFPB, when it is implemented, the rule will create the first

  • CFPB proposes rule requiring nonbanks to “register” with the CFPB if they include certain terms and conditions in their form contracts, including in their website terms of use
  • The registry would serve as a public database tracking firms that use form contracts to waive or limit certain consumer rights
  • The CFPB intends to

On Nov. 9, 2022, the New York Department of Financial Services (NYDFS) issued a proposed second amendment to its 2017 cybersecurity regulation for financial service companies.[1] In July 2022, NYDFS issued a draft version of the changes, but the current amendment has significant changes. Most of the proposed changes will take effect 180 days

On Nov. 9, 2022, the New York Department of Financial Services (NYDFS) issued a proposed second amendment to its 2017 cybersecurity regulation for financial service companies.[1] In July 2022, NYDFS issued a draft version of the changes, but the current amendment has significant changes. Most of the proposed changes will take effect 180 days

Go-To Guide:

  • The Safeguards Rule compliance deadline is delayed by six months
  • Eight subsections of the Safeguards Rule are affected by the delay
  • The new effective date for compliance is June 9, 2023
  • The FTC cited implementation challenges for small business as the reason for the delay.

On Nov. 15, 2022, the Federal Trade Commission