The Consumer Financial Protection Bureau (CFPB): The New Federal Landscape For Lenders and Servicers

by Buchalter

Buchalter Nemer Lender Alert – June 2014

Following the recession and financial crisis of the late 2000s, the “Bureau of Consumer Financial Protection”—commonly known as the Consumer Financial Protection Bureau (CFPB)—was created.[1] Aimed at promoting “fairness and transparency”[2] for a wide variety of consumer products,[3] the CFPB consolidated most consumer financial protections from seven federal agencies into one.[4] And the CFPB gave consumers unprecedented access to information[5] and a right to consistently-applied loss mitigation procedures.[6]

These CFPB changes far exceed those provided elsewhere and often conflict with other laws. While the CFPB recognizes such conflicts and potential preemption issues, there is currently little, if anything, being done to address them. Instead, the CFPB insists on a floor—not ceiling—upon which other regulators can build greater consumer protections.[7] Only when those protections directly conflict, as with federal bankruptcy law,[8] did the CFPB issue very narrow exemptions.[9]    

CFPB’s Scope And Interplay Among Regulators

The CFPB has primary enforcement authority over depository institutions (banks, thrifts and credit unions) with more than $10 billion in assets (including affiliates).[10] Even where other regulators maintain primary examination and enforcement authority over smaller entities,[11] CFPB rules are still binding and CFPB regulators can participate in such smaller investigations.[12]  Further, the CFPB has authority to supervise nonbanks, regardless of size, in certain specific markets like home mortgages (including originators, brokers, servicers, and providers of loan modifications or foreclosure relief services).[13]  And the CFPB may subject others to full CFPB supervision on grounds that they have engaged or are engaging in “conduct that poses risks to consumers.”[14] So, while CFPB primarily targets the very largest financial institutions, all must take careful note of its far-reaching impact.[15]    

CFPB Trends, Policies And Procedures

The CFPB has already received more than 309,700 consumer complaints.[16] The trend is strikingly upwards with an 80 percent increase between 2012 and 2013 and over 20,000 consumer complaints in February 2014 alone.[17]  Of the 163,700 consumer complaints submitted in 2013, 69 percent (or 113,200) were sent to companies for review and response (generally required within 15 days).[18] In 2013, the response rate was 93 percent.[19] While consumers get 30 days to review and dispute a company’s response, most do not.[20] In fact, only 21 percent of consumers disputed a company’s response in 2013.[21]  From there, the CFPB reviews and investigates consumer complaints and then analyzes and reports its findings.[22] These reports reveal major regulatory issues and common threads among consumer complaints, together with percentages, medians and types of monetary or nonmonetary relief provided.[23]

Recently, Meredith Fuchs, Associate Director and General Counsel for the CFPB, explained that the CFPB is not just regulating, but honoring and rewarding those who proactively implement consumer protection.[24]  Those who self-report and self-correct consistently fare much better than those who do not.[25]

Key RESPA Provisions

The CFPB made several key changes to the Real Estate Settlement Procedures Act (RESPA) (Regulation X) that generally applies to all residential mortgage servicers. Some of the highlights include detailed rules and procedures for:

  • Mortgage servicing transfers—requiring extremely prompt (usually within three days) servicing disclosure statements, timely notices to the consumer from the transferor and transferee and details on how to apply mortgage payments during the 60-day transfer period.[26]
  • Error resolution procedures and requests for information—requiring a prompt investigation and response to a consumer’s written notice of error or request for information within five to 30 days.[27]
  • Force-placed insurance—procedures before servicers can assess any premium charge or fee related to force-placed insurance and then for cancelling and refunding consumers for any overlapping coverage.[28]
  • General servicing policies, procedures, and requirements—requiring servicers to establish “reasonable” policies and procedures given the size, scope and nature of their operations in order to ensure servicers can properly: (1) provide accurate and timely disclosures, (2) investigate, respond to, and make corrections based on consumer complaints, (3) provide accurate and timely information and documents to consumers who request them, (4) provide owners or assignees of mortgage loans with accurate and current information and documents about the mortgage loans they own, (5) submit accurate and current documents and filings required for a foreclosure process, and (6) upon notification of the death of a borrower, promptly identify and facilitate communication with the successor in interest.[29]
  • Early intervention requirements—requiring servicers to timely contact (or make good faith efforts to contact) certain delinquent consumers about the availability of loss mitigation options.[30]
  • Continuity of contact—requiring procedures for servicers to have and maintain available personnel to respond to consumer inquiries and assist with loss mitigation options.[31]
  • Loss mitigation procedures—requiring consistently-applied loss mitigation options, detailed procedures for evaluating, denying and appealing loss mitigation applications, and certain restrictions on “dual-tracking” and foreclosure referrals and sales (including small servicers).[32]

Key TILA Provisions

Similarly, the CFPB made significant changes to the Truth in Lending Act (TILA) (Regulation Z) that generally affects not only servicers, but also any owner or assignee of residential mortgage loans. Only one must comply, but all are held liable if none complies.[33]  Some of the key provisions include:

  • Disclosure requirements regarding post-closing events—requiring detailed procedures and disclosures on certain adjustable rate mortgages (ARMs).[34]
  • Prohibited acts or practices and requirements for credit secured by a dwelling—requiring servicers to promptly credit periodic payments (usually as of the date of receipt), promptly provide (within seven business days) accurate payoff statements upon written request and establishing detailed partial payment application guidelines.[35]
  • Periodic statements for residential mortgage loans—requiring detailed periodic statements on closed-end consumer transactions secured by a dwelling.[36]

CFPB’s Limited Bankruptcy Exemptions

Following an outcry among bankruptcy trustees and others, the CFPB issued certain bankruptcy exemptions affecting key RESPA and TILA provisions.[37] Specifically, these exemptions stay the effective date for the early intervention (RESPA) and periodic statement (TILA) requirements discussed above. These exemptions, however, are narrowly construed and apply only while the borrower is in bankruptcy.[38]

Meanwhile, bankruptcy courts often impose harsh penalties on those who improvidently communicate with debtors in bankruptcy without sufficiently tailoring such communications based on both content and circumstances. As a result, lenders and servicers should consult experienced bankruptcy counsel to comply with CFPB regulations without violating the automatic stay or discharge injunction, which may lead to significant punitive damages or sanctions. Such communications are often tailored specifically for which, if any, federal laws may apply.  Simply stated, there is no one-size-fits-all answer.


The CFPB is here to stay.[39] So, depository institutions and others must proactively and consistently apply consumer protections to avoid unnecessary and costly investigations and remedial measures. In doing so, however, due consideration must be afforded federal bankruptcy law that may prohibit these very same communications and actions. For many, the initial goal will be to avoid potential gaps in federal law that may expose them to significant liability. While time will tell just how many of these conflicts get challenged and ultimately resolved, those who proactively address such issues will continue to fare much better than those who merely wait, watch and hope to avoid scrutiny. Needless to say, the federal consumer landscape has dramatically changed. Lenders and servicers once content with proficiency in bankruptcy must now address a new crossroads of unprecedented consumer rights, information and remedies created by the CFPB.     

[1] Created by the Dodd-Frank Wall Street Reform and Consumer Financial Protection Act of 2010, Pub. L. No. 111-203, tit. X (“Title X”), § 1011(a), codified at 12 U.S.C. § 5491(a).

[2] See Title X § 1021(a), 12 U.S.C. § 5511(a).  Per the U.S. Treasury Department, the CFPB “promote[s] fairness and transparency for mortgages, credit cards, and other customer and financial products and services.”  See, e.g., “Consumer Financial Protection Bureau Website Launched and Open for Suggestions,” (Feb. 7, 2011). 

[3] Currently, products regulated by the CFPB include (with dates the products were added):  credit cards (July 21, 2011); mortgages (December 1, 2011); bank accounts and services, private student loans, and consumer loans (March 1, 2012); credit reporting (October 22, 2012); money transfers (April 4, 2013); debt collection (July 10, 2013); and payday loans (November 6, 2013).   Recent CFPB releases suggest prepaid cards will be added soon.

[4] These seven federal agencies are:  (1) Federal Reserve, (2) Federal Deposit Insurance Corporation (FDIC), (3) Federal Trade Commission (FTC), (4) Department of Housing and Urban Development (HUD), (5) National Credit Union Administration (NCUA), (6) Office of the Comptroller of the Currency (OCC) and (7) Office of Thrift Supervision (OTS). 

[5] See, e.g., 12 CFR §§ 1024.36, 1024.38, 1024.40. 1026.20 and 1026.41.

[6] See, e.g., 12 CFR § 1024.41.

[7] See, e.g., Title X § 1041(a)(2), 12 U.S.C. § 5551(a)(2).

[8] See Title 11 of the United States Code.

[9] See, e.g., 12 CFR §§ 1024.39(d) and 1026.41(e)(5), discussed infra.

[10] See Title X § 1025(a), 12 U.S.C. § 5515(a).

[11]The “prudential regulators”—OCC, FDIC, Federal Reserve and NCUA—retain primary examination and enforcement authority over depository institutions with total assets of $10 billion or less (including affiliates).  Title X §§ 1026-1027, 12 U.S.C. §§ 5516-5517.  Other limitations on CFPB authority are given in Title X §§1028-1029, 12 U.S.C. §§ 5518-5519. 

[12] The CFPB may join banking regulators on a “sampling basis” and provide input on the scope and conduct of their examinations and reports.  See, e.g., Title X §§ 1026(a), (c), 12 U.S.C. §§ 5516(a), (c).  Notably, CFPB supervision is driven by product type, not business type, with a focus entirely on consumer protection.

[13] See, e.g., Title X at Subtitles F and H; see also 12 CFR § 1026.36.

[14] See, e.g., 12 CFR § 1091.

[15] Per Title X § 1042(a), 12 USC § 5552(a), even state regulators can bring Dodd-Frank actions in federal court.  And many state regulators do so: (1) for greater remedies (additional claims with larger civil penalties); (2) to overcome potential preemption challenges by suing in federal court on federal claims; and (3) to attract the CFPB to join such actions (with its much greater abilities to gather and analyze consumer information).

[16] CFPB’s “Consumer Response Annual Report (January 1 – December 31, 2013),” March 2014, p. 6.

[17] Id. at 6-7.

[18] Id. at 11 (fn. 9), 12 and 32.

[19] Id., at 33, fn. 17.

[20] Id., at 37.

[21] Id.  For mortgages specifically, the dispute rate was slightly higher at 23 percent.

[22] Id., at 11 and 38.

[23] Id. at 33 and 35.  See also Supervisory Highlights and Compliance Bulletins on CFPB’s website (

[24] Remarks given April 28, 2014 at the University of Chicago.

[25] Compare, e.g., Ocwen Financial Corporation and subsidiaries (consent order to provide $2 billion in principal reductions to “underwater borrowers” and refund $125 million to the nearly 185,000 borrowers who already lost their homes to foreclosure) with 1st Alliance Lending, LLC (ordered to pay an $83,000 penalty for illegally splitting real estate settlement fees, as mitigated because lender “self-reported these violations to the [CFPB], admitted liability, and provided information related to the conduct of other actors that has facilitated other enforcement investigations”).  Information on these (and other) cases is available in the “Newsroom” on CFPB’s website.

[26] See 12 CFR § 1024.33.

[27] See 12 CFR §§ 1024.35 and 1024.36.

[28] See 12 CFR § 1024.37.

[29] See 12 CFR § 1024.38.

[30] See 12 CFR § 1024.39.

[31] See 12 CFR § 1024.40.  Other laws (like California’s Homeowners Bill of Rights) require more, including a “single point of contact.” 

[32] See 12 CFR § 1024.41. “Dual tracking” refers to pursuing both loan modifications and foreclosures simultaneously.

[33] See, e.g., 12 CFR § 1026.31(e).

[34] See 12 CFR § 1026.20.

[35] See 12 CFR § 1026.36(c).

[36] See 12 CFR § 1026.41.

[37] See CFPB’s “Amendments to the 2013 Mortgage Rules Under the Real Estate Settlement Procedures Act (Regulation X) and the Truth in Lending Act (Regulation Z),” October 15, 2013.

[38] See 12 CFR §§ 1024.39(d) and 1026.41(e)(5) (both limited by “while” the consumer/borrower is a debtor in bankruptcy).

[39] Early challenges to the constitutionality of the CFPB have been rejected.  See, e.g., Morgan Drexen, Inc. v. Consumer Fin. Prot. Bureau, 2013 U.S. Dist. LEXIS 149387 (C.D. Cal. 01/10/14).


DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Buchalter | Attorney Advertising

Written by:


Buchalter on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
Privacy Policy (Updated: October 8, 2015):

JD Supra provides users with access to its legal industry publishing services (the "Service") through its website (the "Website") as well as through other sources. Our policies with regard to data collection and use of personal information of users of the Service, regardless of the manner in which users access the Service, and visitors to the Website are set forth in this statement ("Policy"). By using the Service, you signify your acceptance of this Policy.

Information Collection and Use by JD Supra

JD Supra collects users' names, companies, titles, e-mail address and industry. JD Supra also tracks the pages that users visit, logs IP addresses and aggregates non-personally identifiable user data and browser type. This data is gathered using cookies and other technologies.

The information and data collected is used to authenticate users and to send notifications relating to the Service, including email alerts to which users have subscribed; to manage the Service and Website, to improve the Service and to customize the user's experience. This information is also provided to the authors of the content to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

JD Supra does not sell, rent or otherwise provide your details to third parties, other than to the authors of the content on JD Supra.

If you prefer not to enable cookies, you may change your browser settings to disable cookies; however, please note that rejecting cookies while visiting the Website may result in certain parts of the Website not operating correctly or as efficiently as if cookies were allowed.

Email Choice/Opt-out

Users who opt in to receive emails may choose to no longer receive e-mail updates and newsletters by selecting the "opt-out of future email" option in the email they receive from JD Supra or in their JD Supra account management screen.


JD Supra takes reasonable precautions to insure that user information is kept private. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. However, please note that no method of transmitting or storing data is completely secure and we cannot guarantee the security of user information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us at In the unlikely event that we believe that the security of your user information in our possession or control may have been compromised, we may seek to notify you of that development and, if so, will endeavor to do so as promptly as practicable under the circumstances.

Sharing and Disclosure of Information JD Supra Collects

Except as otherwise described in this privacy statement, JD Supra will not disclose personal information to any third party unless we believe that disclosure is necessary to: (1) comply with applicable laws; (2) respond to governmental inquiries or requests; (3) comply with valid legal process; (4) protect the rights, privacy, safety or property of JD Supra, users of the Service, Website visitors or the public; (5) permit us to pursue available remedies or limit the damages that we may sustain; and (6) enforce our Terms & Conditions of Use.

In the event there is a change in the corporate structure of JD Supra such as, but not limited to, merger, consolidation, sale, liquidation or transfer of substantial assets, JD Supra may, in its sole discretion, transfer, sell or assign information collected on and through the Service to one or more affiliated or unaffiliated third parties.

Links to Other Websites

This Website and the Service may contain links to other websites. The operator of such other websites may collect information about you, including through cookies or other technologies. If you are using the Service through the Website and link to another site, you will leave the Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We shall have no responsibility or liability for your visitation to, and the data collection and use practices of, such other sites. This Policy applies solely to the information collected in connection with your use of this Website and does not apply to any practices conducted offline or in connection with any other websites.

Changes in Our Privacy Policy

We reserve the right to change this Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our privacy policy will become effective upon posting of the revised policy on the Website. By continuing to use the Service or Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or part, please do not continue using the Service or the Website.

Contacting JD Supra

If you have any questions about this privacy statement, the practices of this site, your dealings with this Web site, or if you would like to change any of the information you have provided to us, please contact us at:

- hide
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.