Photo of Tessa Cierny

Tessa Cierny advises companies on financial technology and data privacy issues. She has experience counseling companies on state and federal regulatory compliance, including existing and emerging privacy laws, such as the E.U.’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as well as financial and banking regulations, such as the CFPB’s Section 1071 Small Business Lending Rule (Regulation B). In addition, she assists clients in defending business disputes and data breach litigation.

Prior to joining Greenberg Traurig, she served as global records manager for WestRock, where she developed and implemented email and data retention policies for global data privacy regulation compliance. In this role, she also advised on data privacy concerns related to data retention, data loss prevention, and data governance.

California’s DFPI reached a $1 million settlement with Yotta Technologies over alleged false FDIC insurance representations connected to the Synapse bankruptcy, signaling heightened state scrutiny of fintech-bank partnerships and banking-as-a-service models.

Continue Reading California DFPI Announces $1M Settlement with Yotta for ‘FDIC Insurance’ Misrepresentations

On May 1, 2026, the CFPB finalized a revised Section 1071 rule under ECOA, narrowing covered institutions, products, and required data points from the 2023 Rule, with a single compliance date of Jan. 1, 2028. Financial institutions may wish to begin assessing coverage status and compliance readiness.

Continue Reading CFPB Final Rule Narrows Small Business Lending Data Collection Requirements

On May 12, 2026, Gov. Gavin Newsom announced the appointment of Rohit Chopra, former director of the Consumer Financial Protection Bureau and former commissioner of the Federal Trade Commission, to lead California’s newly created Business and Consumer Services Agency (BCSA). If confirmed by the California Senate, Chopra will serve as the first secretary of the

On May 4, 2026, the Federal Trade Commission announced a stipulated final order resolving its enforcement action against data broker Kochava Inc. and its subsidiary Collective Data Solutions (CDS). The order bans them from selling or sharing sensitive precise location data without affirmative express consumer consent. Kochava and CDS provide a range of digital analytics

Companies making U.S.-origin claims – explicit or implied – may see increased scrutiny from the FTC and other federal agencies, as well as potentially significant monetary consequences for noncompliance.
Continue Reading FTC Announces ‘Made in the USA’ Enforcement Sweep 1 Month after Trump Administration Issues Related Executive Order

On Jan. 5, 2026, New York City Mayor Zohran Mamdani signed Executive Order (EO) No. 10, directing the NYC Department of Consumer and Worker Protection (DCWP) to enforce existing consumer protection laws against negative option offers. On March 25, 2026, the DCWP issued a Notice of Public Hearing and Opportunity to Comment on proposed

On March 13, 2026, President Trump signed an Executive Order aimed at strengthening federal enforcement against false or misleading “Made in America” claims. The Executive Order directs the Federal Trade Commission (FTC) and other federal agencies to take coordinated action to ensure accuracy in country‑of‑origin labeling and to protect both consumers and legitimate U.S. manufacturers.

On Oct. 29, 2025, the Consumer Financial Protection Bureau (CFPB) withdrew its proposed rule that would have required certain nonbank financial companies subject to its supervisory jurisdiction to submit annual reports about their use of terms and conditions that attempt to waive or limit consumer rights and protections.

Continue Reading CFPB Withdraws ‘Fine Print’ Rule