On Oct. 29, 2025, the Consumer Financial Protection Bureau (CFPB) withdrew its proposed rule that would have required certain nonbank financial companies subject to its supervisory jurisdiction to submit annual reports about their use of terms and conditions that attempt to waive or limit consumer rights and protections.
On July 8, 2025, the U.S. Court of Appeals for the Eighth Circuit vacated the Federal Trade Commission’s “Click-to-Cancel” Rule, which was intended to govern negative-option offers.
Negative-option offers are widely used. They include all offers in which the seller interprets a consumer’s silence or failure to take affirmative action as acceptance or continuing acceptance
On May 9, 2025, the Federal Trade Commission (FTC) voted to extend the compliance deadline for the Negative Option Rule by 60 days. The Rule, sometimes called the “Click-to-Cancel Rule,” will now be effective July 14, 2025.
In a statement regarding the extension, the FTC explained that, in its view, companies need additional
The Federal Trade Commission’s Rule on Unfair or Deceptive Fees, sometimes called the “Junk Fees Rule,” took effect on May 12, 2025. In advance of that effective date, the FTC published Frequently Asked Questions (FAQs) to provide guidance to consumers and businesses regarding the Rule.
Continue Reading FTC Issues FAQs on ‘Junk Fees’ Rule
On April 30, 2025, the Consumer Financial Protection Bureau (CFPB) announced that it “will not prioritize enforcement or supervision actions” related to obligations imposed by its Small Business Lending Rule (under Regulation B) against entities not covered by the Fifth Circuit Court of Appeals’ stay in Texas Bankers Association v. CFPB, No. 24-40705.
Continue Reading CFPB Will Not Enforce Small Business Lending Rule
On April 29, 2025, Michigan Attorney General Dana Nessel filed a lawsuit against Roku, Inc., alleging that the company collects and monetizes personal data from children without proper consent. The lawsuit claims that Roku’s practices violate the Children’s Online Privacy Protection Act (COPPA) and other privacy laws.
In its complaint
On April 29, 2025, Michigan Attorney General Dana Nessel filed a lawsuit against Roku, Inc., alleging that the company collects and monetizes personal data from children without proper consent. The lawsuit claims that Roku’s practices violate the Children’s Online Privacy Protection Act (COPPA) and other privacy laws.
Continue Reading Michigan Attorney General Takes Action Against Roku, Alleging COPPA Violations
On April 16, 2025, eight state regulators announced the formation of a collaborative privacy enforcement and information sharing consortium. This coalition signals a more unified and robust approach to privacy enforcement.
Continue Reading State Attorneys General Form Bipartisan Privacy Enforcement Consortium
On April 16, 2025, the CFPB’s Chief Legal Officer, Mark R. Paoletta, issued a memorandum to CFPB staff that sets out the agency’s 2025 supervision and enforcement priorities.
Continue Reading CFPB Memo Details Less Oversight on Fintechs, Shift to State-Led Enforcement
On April 16, 2025, the CFPB’s Chief Legal Officer, Mark R. Paoletta, issued a memorandum to CFPB staff that sets out the agency’s 2025 supervision and enforcement priorities.
Continue Reading CFPB Memo Details Less Oversight on Fintechs, Shift to State-Led Enforcement