In a shot across the bow to the digital payments industry, the U.S. Consumer Financial Protection Bureau (the Bureau) has issued a proposed rule to expand its oversight authority to nonbank providers of consumer payment apps. These apps include digital wallets, funds transfer services, and P2P apps—for both U.S. dollar payments and, surprisingly, also bitcoin and other crypto-asset payments.
Under the proposed rule, if finalized, the Bureau would exercise the full plate of supervisory authority over “larger participants” in this market. On top of its existing rule-writing and enforcement powers, the Bureau would exercise examination powers under the Consumer Financial Protection Act (CFPA) over these larger participants, such as conducting on-site examinations, imposing reporting requirements, and conducting periodic monitoring.
These supervisory activities would impose new costs on nonbank providers. The more significant impact to the digital payments industry, however, is the broad line of sight that the Bureau would gain into the activities of leading market participants. Areas of potential scrutiny where the Bureau has strongly signaled interest include the novel ways consumer financial data and behavior data are used together in “super apps” and in embedding payments within a social media feed. This proposed rule comes hot on the heels of the Bureau’s proposed rule to accelerate open banking, as the Bureau is laying the groundwork for a greater role at the intersection of digital payments and data.
Background
The proposed rule homes in on the “general-use” digital consumer payment apps market, in recognition of its tremendous growth in recent years.1 However, the Bureau’s examination authority under the proposed rule would apply to only a subset of nonbank providers in this market—those that are deemed “larger participants.”
The CFPA grants the Bureau broad discretion to choose criteria for assessing whether a nonbank provider is a “larger participant.” Under its proposed criteria, a nonbank provider would be a “larger participant” if it satisfies the following two prongs:
- Payment transaction volume prong: The nonbank provider and its affiliates, in aggregate, have an annual “consumer payment transaction” volume of at least five million transactions, and
- Entity size prong: The nonbank entity would not be a small business concern as defined by the Small Business Administration size standards for its primary industry (the likely classification would be “Financial Transactions Processing, Reserve, and Clearinghouse Activities”).
A key metric in determining whether a nonbank provider would be covered as a “larger participant,” therefore, is the volume of “consumer payment transactions” that it facilitates. To fall within that definition, a transaction must be primarily for personal, family, or household purposes; purely commercial or business-to-business payments would be outside the definition.
The following table summarizes additional nuance from the proposed rule on the definition of “consumer payment transactions.”
Under the proposed rule, the Bureau would examine for compliance with federal consumer financial protection laws, such as the CFPA’s prohibition against unfair, deceptive, and abusive acts and practices, the privacy provisions of the Gramm-Leach-Bliley Act and its implementing Regulation P, and the Electronic Fund Transfer Act and its implementing Regulation E. Under the proposed rule, the Bureau would notify a nonbank provider when it intends to undertake supervisory activity, and the provider would then have an opportunity to claim that it is not a "larger participant."
The Bureau’s examination authority would co-exist with state oversight of money transmission. While holding a state license would not shield a money transmitter that also meets the “larger participant” criteria from Bureau oversight, the proposed rule notes that the Bureau’s prioritization of supervisory activity among nonbank providers would take into account, among other factors, the extent of relevant state oversight and that the Bureau would coordinate with appropriate State regulatory authorities in examining larger participants.
The Bureau is inviting public comment on the proposed rule until January 2024.
[1] The Bureau characterizes “general use” by the absence of significant limitations. For example, a digital app whose payment functionality is used solely to purchase or lease a specific type of services, goods, or property (such as transportation, lodging, food, an automobile, real property, or a consumer financial products and service) would not have “general use.” Similarly, a digital app that helps consumers split a bill for a specific type of goods or services (such as a restaurant) would not have “general use” for purposes of the rule.
