On January 19, 2021, the Consumer Financial Protection Bureau (CFPB or Bureau) published a special edition of its Supervisory Highlights focused on its COVID-19 Prioritized Assessments. As Cadwalader previously wrote, the CFPB announced in July 2020 that it had sent targeted information requests to supervised financial institutions regarding the consumer risks posed by the pandemic, including how institutions were implementing the special borrower protections under the Coronavirus Aid, Relief, and Economic Security (CARES) Act. Among its many features, the CARES Act provides relief to consumer and small business borrowers, such as the temporary small business lending program known as the Paycheck Protection Program (PPP), forbearance programs for federally backed mortgages and student loans, and amendment of certain provisions of the Fair Credit Reporting Act (FCRA) to address reporting of delinquent or defaulted loans. Financial institutions also offered voluntary programs to borrowers who were experiencing financial hardship due to the pandemic. The CFPB’s Prioritized Assessments involved higher-level inquiries than typical examinations and covered the period from May 2020 through September 2020.
Last week’s Supervisory Highlights shares the CFPB’s key findings stemming from these reviews, which are summarized in more detail below. As the Supervisory Highlights makes clear, financial institutions face legal and operational risk not only from the potential wave of defaulted consumer loans, but also from the implementation of programs intended to prevent or mitigate those defaults. While the Prioritized Assessments themselves “were not designed to identify violations of Federal consumer financial law,”1 financial institutions today face a reinvigorated CFPB under the Biden administration. That means, going forward, we anticipate that the CFPB will employ the full measure of its supervisory and enforcement authorities to investigate potential legal violations and corresponding consumer harm stemming from the pandemic. For example, the CFPB notes that it “will be following up on risks identified while conducting [the Prioritized Assessments] in the normal course of the Bureau’s supervisory work.”2
For financial institutions, the Supervisory Highlights provides a road map for the types of issues the CFPB is likely to consider problematic. Thus, we believe it is imperative that financial institutions use this time to critically assess their implementation of the CARES Act, as well as any other voluntary consumer loan loss mitigation programs, in light of the CFPB’s findings, with an emphasis on improving policies, procedures, and training around these programs, as well as self-identifying and self-remediating any potential legal violations. Specifically, we recommend that financial institutions:
With respect to the CFPB’s specific findings in the Supervisory Highlights, we summarize below the agency’s observations with regard to mortgage servicing, auto loan servicing, student loan servicing, credit card account management, consumer reporting-furnishing, deposits, and small business lending.
A. Mortgage Loan Servicing
The CFPB highlighted on the operational challenges faced by mortgage services in implementing the CARES Act forbearance program, which allows consumers with federally backed mortgages to request forbearance for up to 180 days, which can be extended to 360 days upon request. The Bureau found that mortgage servicers:
B. Auto Loan Servicing
Although not required by the CARES Act, the CFPB reported that in response to the pandemic, many auto loan servicers expanded existing payment assistance programs to help borrowers who were having trouble making payments. Specifically, many market participants waived late fees, permitted non-delinquent as well as delinquent borrower enrollments, and provided longer payment deferrals. According to the CFPB, loan deferments were generally offered on a case-by-case basis with most borrowers receiving a payment deferment of three or more months (with subsequent extension of their loan terms by an equivalent period); interest generally continued to accrue during the period of deferment. Auto loan servicers also generally ceased repossession efforts, though more so due to state-specific stay-at-home orders.
The CFPB observed a number of risks to consumer harm presented by auto loan servicers’ pandemic response efforts, including:
C. Student Loan Servicing
The CARES Act provides significant relief to certain student loan borrowers. The law set interest rates for federal loans owned by the U.S. Department of Education to zero and suspended monthly payments for most of these loans. But not all student loans are held or issued by the Department of Education. Private lenders or holders of student loans also implemented payment relief measures, mainly relying on provisions in the original note, such as natural disaster or economic hardship forbearances. Others created pandemic-specific relief options. Such provisions, however, do not provide the same level of relief as the CARES Act provides to borrowers with direct or Education Department-held federal loans.
One challenge faced by servicers of privately held student loans was confusion on the part of borrowers who mistakenly believed that their loans qualified for relief under the CARES Act.
The Prioritized Assessments revealed several issues in student loan servicers’ implementation of the CARES Act and overall pandemic relief efforts, including:
D. Credit Card Account Management
Credit card issuers also provided some degree of pandemic-related payment relief with the most common relief permitting skipping of a payment or deferring payments for one to six months. Most issuers did not waive interest accrual during these periods of deferment. The CFPB noted a number of operational challenges faced by credit card issuers during this period including failing to obtain necessary consumer consents for electronic disclosures, meeting regulatory requirements to address consumer disputes, and adjusting monitoring and testing schedules for credit card operations.
E. Consumer Reporting and Furnishing
The CFPB found that consumer reporting companies and furnishers of consumer information faced challenges in implementing the CARES Act’s amendment to section 623(a)(1) of the FCRA. Specifically, for credit obligations or accounts that were current before the furnisher provided an accommodation with respect to one or more payments on a credit obligation, the furnisher must continue to report that obligation or account as current during the period of accommodation. If, on the other hand, the credit obligation or account was delinquent before the accommodation, then the furnisher cannot advance the delinquent status during the accommodation.5
Consumer reporting companies and furnishers reported staffing challenges that affected their ability to resolve disputes within the time periods required by statute or regulation and some furnishers reported needing to make changes in procedures due to the new accommodation provisions. The CFPB found the risks of consumer harm included inaccurate reporting of accommodations and other information by furnishers and the failure to timely resolve disputes by credit reporting companies.
Direct deposit was the primary method by which direct monetary payments authorized by the CARES Act—Economic Impact Payments (EIPs)—were delivered to many consumers and remained the most common means by which unemployment benefits, which were increased by the CARES Act, reached beneficiaries.
The CFPB identified multiple issues in depository institutions’ response to the pandemic that elevated risk to consumers:
G. Small Business Lending
The Prioritized Assessments included reviewing fair lending risks associated with institutions’ participation in the Paycheck Protection Program, including compliance with Equal Credit Opportunity Act (ECOA) and its implementing regulation, Regulation B. As part of implementing the PPP, multiple lenders adopted policies that limited small business participation in the PPP beyond the requirements of the CARES Act and the rules and regulations of the Small Business Administration, namely to small businesses that already had an existing relationship with the institution. According to the CFPB, these “existing customer overlays” could take two forms: 1) limiting participation to small businesses with pre-existing relationships or particular pre-existing relationships; or 2) requiring the small business to become a customer of the institution by opening a business account and only then becoming eligible to apply for a PPP loan.
Institutions offered a wide range of business justifications for applying such an overlay, including Know Your Customer and other due diligence legal requirements, as well as operational reasons related to processing as many applications as possible as quickly as possible. The Bureau, however, found that such policies—while facially neutral—could run the risk of violating ECOA and Regulation B. The CFPB made clear, though, that it had not made a determination one way or another whether any specific overlay complied with ECOA or Regulation B.
1 Consumer Financial Protection Bureau, Supervisory Highlights COVID-19 Prioritized Assessments Special Edition, Issue 23 (Winter 2021) at 3 [hereinafter Supervisory Highlights].
3 See, e.g., CFPB, Office of Innovation, Synchrony Bank Approval Order (Dec. 30, 2020), available at https://files.consumerfinance.gov/f/documents/cfpb_synchrony_approval-order_2020-12.pdf; No-Action Letter from Edward Blatnik, Acting Ass’t Dir. for the CFPB Office of Innovation, to Alison Nicholl, Gen. Counsel, Upstart Network, Inc., Nov. 30, 2020, available at https://files.consumerfinance.gov/f/documents/cfpb_upstart-network-inc_no-action-letter_2020-11.pdf.
4 Supervisory Highlights at 4.
5 See CFPB, Consumer Reporting FAQs Related to the CARES Act and COVID-19 Pandemic (June 16, 2020), available at https://files.consumerfinance.gov/f/documents/cfpb_fcra_consumer-reporting-faqs-covid-19_2020-06.pdf.
6 Supervisory Highlights at 22.