On April 30, 2025, the Consumer Financial Protection Bureau (CFPB) announced that it “will not prioritize enforcement or supervision actions” related to obligations imposed by its Small Business Lending Rule (under Regulation B) against entities not covered by the Fifth Circuit Court of Appeals’ stay in Texas Bankers Association v. CFPB, No. 24-40705.
Continue Reading CFPB Will Not Enforce Small Business Lending Rule
On April 29, 2025, Michigan Attorney General Dana Nessel filed a lawsuit against Roku, Inc., alleging that the company collects and monetizes personal data from children without proper consent. The lawsuit claims that Roku’s practices violate the Children’s Online Privacy Protection Act (COPPA) and other privacy laws.
Continue Reading Michigan Attorney General Takes Action Against Roku, Alleging COPPA Violations
On April 16, 2025, eight state regulators announced the formation of a collaborative privacy enforcement and information sharing consortium. This coalition signals a more unified and robust approach to privacy enforcement.
Continue Reading State Attorneys General Form Bipartisan Privacy Enforcement Consortium
On April 16, 2025, the CFPB’s Chief Legal Officer, Mark R. Paoletta, issued a memorandum to CFPB staff that sets out the agency’s 2025 supervision and enforcement priorities.
Continue Reading CFPB Memo Details Less Oversight on Fintechs, Shift to State-Led Enforcement
On April 16, 2025, the CFPB’s Chief Legal Officer, Mark R. Paoletta, issued a memorandum to CFPB staff that sets out the agency’s 2025 supervision and enforcement priorities.
Continue Reading CFPB Memo Details Less Oversight on Fintechs, Shift to State-Led Enforcement
On March 27, 2025, the Federal Trade Commission (FTC) filed a lawsuit and proposed settlement order resolving claims against Cleo AI, a fintech that operates a personal finance mobile banking application through which it offers consumers instant or same-day cash advances.
Continue Reading FTC Alleges Fintech Cleo AI Deceived Consumers
On Nov. 6, 2024, the Federal Trade Commission (FTC) released an administrative complaint and accepted a proposed consent order resolving claims against GGL Projects, Inc., an AI-enabled customer review platform that does business as Sitejabber. The FTC alleges that Sitejabber provides its ecommerce clients with the ability to (a) collect ratings and reviews from consumers
On Nov. 6, 2024, the Federal Trade Commission (FTC) released an administrative complaint and accepted a proposed consent order resolving claims against GGL Projects, Inc., an AI-enabled customer review platform that does business as Sitejabber. The FTC alleges that Sitejabber provides its ecommerce clients with the ability to (a) collect ratings and reviews from consumers
On Nov. 18, 2024, the Federal Deposit Insurance Corporation (FDIC) announced a 45-day extension to the public comment period for its proposed rule making (Proposed Rule) that would establish new recordkeeping requirements and related compliance obligations for insured depository institutions that offer certain “custodial deposit accounts with transactional features.”
As we detailed in a prior
On Nov. 12, 2024, the Consumer Financial Protection Bureau (CFPB) released a report examining federal and state privacy protections for consumers’ financial data. In the report, the CFPB “critiques” the privacy protections available under the Gramm-Leach-Bliley Act (GLBA) and the Fair Credit Reporting Act (FCRA), asserting that the federal framework has “limitations.” The CFPB then