Alston & Bird Consumer Finance Blog

Bank Regulatory

Appraisal Bias Settlement: Potential Roadmap

What Happened?

The lender and consumers reached a settlement in an appraisal bias case, Nathan Connolly and Shani Mott v. Shane Lanham, 20/20 Valuations, LLC, and loanDepot.com, LLC, filed in Maryland District Court, that gained the attention of the CFPB and DOJ. While some of the terms in the settlement are already industry standard, there appear to be some newer obligations that could be a template for other lenders to follow.

Why it Matters?

The settlement is important – both for what it does and what it doesn’t do. Unfortunately, the settlement does not address the question of whether a lender is responsible for the actions of an appraiser who is neither an employee nor an agent of the lender.

By way of background, in response to the Great Financial Crisis, the Dodd-Frank Act established new rules to ensure appraisal independence and address issues of inflated appraisals or overvaluation. More recently, however, partially due to changes in the market, consumers have lodged complaints of undervaluation, alleging that discrimination resulted in the appraisal coming in too low.

Given this increase in complaints and the Administration’s focus on racial equity, regulators have been grappling with how best to address and eliminate appraisal bias. Prior to the settlement, the CFPB and DOJ jointly made arguments in a statement of interest that would hold lenders liable for the actions of an appraiser who is neither an employee nor an agent of the lender.

In response, the MBA issued an amicus brief requesting that the Court recognize that there is no existing legal authority to hold a lender liable for the alleged actions of an independent appraiser. The resulting settlement is silent on this point.

The settlement does, however, impose several obligations on the lender and its and appraisal management companies (AMCs), providing insight into what the mortgage industry could do to combat appraisal bias.

In particular, the settlement requires mortgage loan applications be provided with information on how to raise concerns with a valuation sufficiently early in the valuation process so that issues or errors can be resolved before a final decision on the application is made, including:

  • The right to request a reconsideration of value (ROV) as soon as possible;
  • A description of the process to obtain an ROV (which may not create unreasonable barriers or discourage applicants from making ROV requests) and a description of the lender’s evaluation process;
  • If the ROV is denied or the value is unchanged, a written explanation of the lender’s evaluation of the submitted material;
  • The standards that trigger a second appraisal; and
  • The applicant’s right to file a complaint with the CFPB or HUD, as part of the ROV process.

Further, the settlement requires the lender to:

  • Conduct statistical analysis tracking appraisal outcomes by protected class and neighborhood demographics including whether the loan was denied, whether a second appraisal was ordered, and whether there was a change in the valuation as a result of the ROV process. Such analysis must track individual appraisers including appraisal outcomes, ROV requests, and bias complaints.
  • Not utilize appraisers who, according to the statistical analysis, received multiple complaints from minority applicants in minority neighborhoods alleging appraisal bias, or who have a pattern of undervaluing homes owned by minority applicants or homes in minority neighborhoods, or who have been found to have discriminated in an appraisal.
  • Clearly outline internal stakeholder roles and responsibilities for processing an ROV request.
  • Ensure that ROV requests of valuation bias or discrimination complaints across all relevant business channels are escalated to the appropriate channel for research or a response.
  • Adhere to ROV timelines for certain milestones.
  • Review appraiser response to ROV requests for completeness, accuracy, and indicia of bias and discrimination.
  • Establish standards for offering a second appraisal which at a minimum must include when the first appraisal has indicia of bias or discrimination is otherwise defective.
  • Ensure that the applicant’s interest rate will remain locked during the ROV process.
  • Ensure that ensure applicants are not charged for the cost of an ROV or second appraisal.
  • Include on its website educational information on how to understand an appraisal report and contact information for questions on the appraisal report.
  • Update its fair and responsible lending policy to explicitly prohibit discrimination in violation of state and federal fair lending laws on the basis of race, color, religion, sex, familial status, national origin, disability, marital status, or age.
  • Provide training annually and for new employees on discrimination in residential mortgage lending and appraisals, and on all policies related to the ROV process, appraisal reviews, and the use of value adjustments.
  • Not utilize appraisers who previously were found by a regulatory body or court of law to have discriminated in an appraisal.

Finally, the settlement requires that AMCs and appraisers doing business with the lender contractually agree to:

  • Represent that appraisers will receive fair lending training; and
  • Certify that appraisers have not been subject to any adverse finding related to appraisal bias or discrimination, or list or describe any findings.

What to do now?

Lenders should carefully review the settlement and compare it to existing policies and procedures. While the settlement is only binding on the parties to the agreement, others should take interest. Historically, lenders conduct fair lending statistical testing for underwriting, pricing, and redlining risk. It might be time to consider adding appraisal risk.

CFPB Touts 2023 Greatest Hits and Casts a Line for Enforcement Hires

What Happened?

Earlier this week, the Consumer Financial Protection Bureau (“CFPB” or “Bureau”) released a blog post touting its 2023 successes in safeguarding “household financial stability” through the levying of fines and filing of lawsuits. The Bureau highlighted seven enforcement cases:

  • Protecting Servicemembers from Illegal High-Interest Loans and False Advertising: In February 2023, the CFPB ordered an auto title loan lender and several affiliated entities to pay a total of $15 million in penalties and consumer redress to resolve allegations that the entities violated the Military Lending Act. That same month, the CFPB permanently banned a California-based mortgage lender from the mortgage lending industry and imposed a $1 million penalty on the lender for repeatedly violating a 2015 consent order by, among other things, allegedly continuing to send advertisements to military families that led recipients to believe the company was affiliated with the U.S. government.
  • Taking Action for Illegally Charging Junk Fees, Withholding Credit Card Rewards, and Operating Fake Bank Accounts: In July 2023, the CFPB ordered a national bank to pay a more than $190 million in penalties and consumer redress to resolve allegations that the bank double dipped on insufficient funds fees imposed on customers, withheld reward bonuses promised to credit card customers, and misappropriated sensitive personal information to open accounts without customer knowledge or authorization. The Office of the Comptroller of the Currency (“OCC”) also found that the bank’s double-dipping on insufficient funds fees was illegal and ordered the bank to pay $60 million in penalties.
  • Intentional Illegal Discrimination Against Armenian Americans: In November 2023, the CFPB ordered a national bank to pay $25.9 million in fines and consumer redress for allegedly “intentionally and illegally discriminating against credit card applicants the bank identified as Armenian American.” 
  • Taking Action to Stop Loan Churning: In August 2023, the CFPB sued a high-cost installment loan lender and several of its wholly owned, state-licensed subsidiaries, for allegedly violating the Consumer Financial Protection Act by “illegally churning loans to harvest hundreds of millions in loan costs and fees.”
  • Illegal Rental Background Check and Credit Reporting Practices: In October 2023, the CFPB and the Federal Trade Commission (“FTC”) sued a rental screening subsidiary of a national consumer credit reporting agency for allegedly violating the Fair Credit Reporting Act by failing to take steps to ensure the rental background checks that landlords use to decide who gets housing were accurate and withholding from renters the names of third parties that were providing the inaccurate information. The resulting court order required the company to pay $15 million in penalties and make significant improvements to how it reports evictions. Separately, the CFPB ordered the national consumer reporting agency to pay $8 million in consumer redress and penalties for failing to timely place or remove security freezes and locks on consumer credit reports and for falsely telling certain consumers that their requests were processed.
  • Stopping unlawful junk advance fees for credit repair services: In August 2023, the CFPB entered into a settlement with a credit repair service conglomerate that imposed a $2.7 billion judgment and banned the companies from telemarketing credit repair services for 10 years.

The CFPB touted that in 2023 it secured over $3.5 billion in total fines and compensation from financial services “lawbreakers” in 2023.  The CFPB largely attributed these cases to the creation of a “team of technologists” working on emerging technologies to “enforce the law when emerging technologies harm consumers.”

Why is this Important?

The CFPB filed 29 enforcement actions in 2023 but selected the seven highlighted above, possibly signaling that junk fees, fair lending, servicemember protections, and credit reporting, among others, remain on the Bureau’s radar. We do not expect the CFPB to issue any sort of accounting covering enforcement cases which it dropped in 2023.

Interestingly, the CFPB also used this post to recruit new “cross-disciplinary” employees (both attorneys and non-attorneys) for its Office of Enforcement and reiterated that the Bureau is “significantly expanding [its] enforcement capacity in 2024 to build on [its] achievements so far.” The roles are located in the Bureau’s Washington, D.C. headquarters and its regional offices in Atlanta, Chicago, New York and San Francisco.  The last of the associated employment information virtual sessions occurred on January 30, 2024.  Strangely, the CFPB only released this blog post the day before the last of these three sessions and it is not known how that late notice may impact application numbers.

What Do You Need to Do?

Given that the CFPB is telegraphing those issues that are top of mind for the Bureau as well as its emphasis on ramping up enforcement in 2024, now is a good time for companies to review their compliance management programs and make any necessary enhancements to policies, procedures, processes, and systems to ensure compliance with all applicable consumer financial laws and regulations. In particular, institutions should revisit their compliance monitoring programs to determine whether any updates are needed to minimize enforcement risk.

New York DFS to Impose Climate Change Safety and Soundness Expectations on Mortgage Lenders, Servicers, and other Regulated Organizations

What Happened?

On December 21, 2023, the New York Department of Financial Services (“NYDFS”) published an 18-page guidance document (the “Guidance”) on managing material, financial and operational risks due to climate change. The NYDFS issued the Guidance after considering feedback it received on proposed guidance it issued in December 2022 on the same topic. The Guidance applies to New York State regulated mortgage lenders and servicers, as well as New York State regulated banking organizations, licensed branches and agencies of foreign banking organizations (collectively, “Regulated Organizations”).

Why Is It Important?

The NYDFS has set forth its expectations, replete with examples, for Regulated Organizations to strategically manage climate change-related financial and operational risks and identify necessary actions proportionate to their size, business activities and risk profile.  Such expectations include:

  • Corporate Governance: An organization’s board of directors should establish a risk management framework, including its overall business strategy and risk appetite, which include climate related financial and operational risks, and holding management accountable for implementation. Such framework should be integrated within an organization’s three lines of defense – quality assurance, quality control and internal audit. Recognizing that low and moderate income (“LMI”) communities may be adversely impacted from climate change, the NYDFS expects an organization’s board of directors to direct management to “minimize and affirmatively mitigate disproportionate impacts” which could violate fair lending and other consumer finance laws. On that note, the NYDFS reminds organizations to consider opportunities to mitigate financial risk through financing or investment opportunities which enhance climate resiliency and are eligible for credit under the New York Community Reinvestment Act.
  • Internal Control and Risk Management: Regulated Organizations should also consider and incorporate climate related financial risks when identifying and mitigating all types of risks, including credit, liability, market, legal/compliance risk, and operational and strategic risk. The NYDFS defines financial risks from climate change to include physical risks from more intense weather events as well as transition risks, resulting from “economic and behavior changes driven by policy and regulation, new technology, consumer and investor preferences and changing liability risks.” The NYDFS recognizes that insurance is an important mitigant to climate change risk but cautions that the availability of such insurance in the future is not guaranteed.
  • Data Aggregation and Reporting: Regulated Organizations should establish systems to aggregate data and internally report its efforts to monitor climate related financial risk to facilitate board and senior management decision making. Such organizations also should consider developing and implementing climate scenario analyses.

What Do You Need to Do?

The NYDFS stresses that organizations should not let “uncertainty and data gaps justify inaction.” Although the NYDFS has not issued a timeline for implementation of the Guidance or begun incorporating such expectations into examinations (which will be coordinated with the prudential regulators to align with joint supervisory processes), now is the time to begin integrating climate-related financial and operational risks into your company’s organizational structure, business strategies and risk management operations.  This will help you prepare for when your organization is required to respond to the request for information which the NYDFS anticipates sending out later this year.  It is anticipated that the NYDFS will ask for information on the steps your organization has taken or will take within a specified period to manage financial and operational climate-related risks, including government structure, business strategy, risk management, operational resiliency measures, and metrics to measure risks.

OCC Issues Guidance on “Buy Now, Pay Later” Lending

A&B Abstract:

On December 6, 2023, the Office of the Comptroller of the Currency (OCC) issued a bulletin aimed at providing guidance to national banks and federal savings associations (“Financial Institutions”) involved in “buy now, pay later” (BNPL) lending. The advisory emphasizes the need for these Financial Institutions to carefully manage risks associated with BNPL, focusing on aspects such as underwriting, repayment terms, pricing, and safeguards to protect customers. Additionally, the OCC stresses the importance of clear and prominent marketing materials and disclosures.

The Bulletin

While BNPL products may vary, the bulletin focuses on BNPL loans which involve four or fewer installments without finance charges, and that are commonly offered at the point of sale. Such BNPL products are distinguished from more traditional installment loans with payment terms greater than four installments or that charge interest or carry other finance charges. These loans have become increasingly popular, especially among younger individuals and those with limited credit history.

The OCC identifies various risks related to BNPL loans for both lenders and consumers, including credit, compliance, operational, strategic, and reputational risks. Specific concerns include potential borrower overextension, limited applicant credit history, unclear disclosure language, challenges with merchandise returns and merchant disputes, operational and compliance risks related to third-party relationships, and increased operational risk due to the highly automated nature of BNPL lending.

Further details on risks include the potential for elevated first payment default risk, additional fees for borrowers due to overextension, and the possibility that credit reporting agencies may lack visibility into BNPL activity.

The OCC’s guidance advises Financial Institutions engaged in BNPL lending to establish robust risk management systems, including prudent lending policies for risk identification, measurement, monitoring, and control. Regarding credit risk, the bulletin emphasizes the importance of sound charge-off practices, allowances for credit losses, and timely reporting of comprehensive information to credit bureaus under the Fair Credit Reporting Act.

The guidance also provides recommendations for operational risk management. It encourages Financial Institutions to assess and mitigate fraud risks, subject BNPL lending process models to sound model risk management and integrate BNPL lending into broader compliance management systems. Additionally, it highlights the need for Financial Institutions engaging third parties in BNPL lending to incorporate such relationships into their third-party risk management protocols.

Takeaway:

Given the OCC’s focus on the risks associated with BNPL products, now is a good time for Financial Institutions engaged in BNPL Lending to ensure that their compliance management programs are robust enough to ensure compliance with the OCC’s guidance.

CFPB’s Message to Mortgage Servicers: Make Sure You Comply with RESPA’s Force-Placed Insurance Requirements

A&B Abstract:

In Case You Missed It:  At the recent Federal Housing Finance Agency’s Symposium on Property Insurance, CFPB Director Rohit Chopra spoke about force-placed insurance and conveyed the following message: “The CFPB will be carefully monitoring mortgage market participants, especially mortgage servicers to ensure they are meeting all of their obligations to consumers under the law.”

The CFPB’s servicing rules set forth in RESPA’s Regulation X specifically regulate force-placed insurance. For purposes of those requirements, the term “force-placed insurance” means hazard insurance obtained by a servicer on behalf of the owner or assignee of a mortgage loan that insures the property securing such loan. In turn, “hazard insurance” means insurance on the property securing a residential mortgage loan that protects the property against loss caused by fire, wind, flood, earthquake, falling objects, freezing, and other similar hazards for which the owner or assignee of such loan requires assistance. However, force-placed insurance excludes, for example, hazard insurance required by the Flood Disaster Protection Act of 1973, or hazard insurance obtained by a borrower but renewed by a company in accordance with normal escrow procedures.

Given the Bureau’s announcement, now is a good time to confirm that your company has adequate controls in place to ensure compliance with all of the technical requirements of RESPA’s force-placed insurance provisions.  Set forth below are some of the many questions to consider:

Escrowed Borrowers:

  • When a borrower maintains an escrow account and is more than 30 days past due, does the company ensure that force-placed insurance is only purchased if the company is unable to disburse funds from the borrower’s escrow account?
    • A company will be considered “unable to disburse funds” when the company has a reasonable basis to believe that (i) the borrower’s hazard insurance has been canceled (or was not renewed) for reasons other than nonpayment of premium charges; or (ii) the borrower’s property is vacant.
    • However, a company will not be “unable to disburse funds” only because the escrow account does not contain sufficient funds to pay the hazards insurance charges.

Required Notices:

  • Does the company ensure that the initial, reminder, and renewal notices required for force-placed insurance strictly conform to the timing, content, format, and delivery requirements of Regulation X?

Charges and Fees:

  • Does the company ensure that no premium charge or fee related to force-placed insurance will be assessed to the borrower unless the company has met the waiting periods following the initial and reminder notices to the borrower that the borrower has failed to comply with the mortgage loan contract’s requirements to maintain hazard insurance, and sufficient time has elapsed?
  • Are the company’s fees and charges bona fide and reasonable? Fees and charges should:
    • Be for services actually performed;
    • Bear a reasonable relationship to the cost of providing the service(s); and
    • Not be prohibited by applicable law.
  • Does the company have an adequate basis to assess any premium charge or fee related to force-placed insurance, meaning that the company has a reasonable basis to believe that the borrower has failed to comply with the mortgage loan contract’s requirement to maintain hazard insurance because the borrower’s coverage is expiring, has expired or is insufficient?
  • Does the company have appropriate controls in place to ensure that the company will not assess any premium charge or fee related to force-place insurance to the borrower if the company receives evidence that the borrower has maintained continuous hazard insurance coverage that complies with the fee requirements of the loan contract prior to the expiration of the waiting periods (at least 45 days have elapsed since the company delivered the initial notice and at least 15 days have elapsed since the company delivered the reminder notice)?
  • Will the company accept any of the following as evidence of continuous hazard insurance coverage:
    • A copy of the borrower’s hazard insurance policy declarations page;
    • The borrower’s insurance certificate;
    • The borrower’s insurance policy; or
    • Another similar form of written confirmation?
  • Does the company recognize that the borrower will be considered to have maintained continuous coverage despite a late payment when applicable law or the borrower’s policy contemplates a grace period for the payment of the hazard insurance premium and a premium payment is made within that period and accepted by the insurance company with no lapse in coverage?
  • Within 15 days of receiving evidence (from any source) demonstrating that the borrower has maintained hazard insurance coverage that complies with the hazard insurance requirements in the loan contract, does the company:
    • Cancel any force-placed insurance that the company has purchased to insure the borrower’s property; and
    • Refund to the borrower all force-placed insurance premium charges and related fees paid by such borrower for any period of overlapping insurance coverage and remove from the borrower’s account all force-placed insurance charges and related fees that the company assessed to the borrower for such period?

And let’s not forget that companies must continue to comply with the above requirements if the company is a debt collector under the Fair Debt Collection Practices Act (“FDCPA”) with respect to a borrower and that borrower has exercised a “cease communication” right under the FDCPA.  Of course, failure to comply with the Regulation X requirements could also result in violations of UDAAP and FDCPA provisions.

Takeaway:

Given that the CFPB is telegraphing its upcoming review of servicers’ force-placed insurance practices, now is a good time for companies to ensure that their compliance management programs are robust enough to ensure compliance with all the technical requirements of RESPA’s force-placed insurance requirements. Alston & Bird’s Consumer Financial Services team is happy to assist with such a review.