Alston & Bird Consumer Finance Blog

Consumer Financial Protection Bureau (CFPB)

Trends in Enforcement and Recommendations on Protecting Financial Institutions

By , ,

In his 2022 speech “Reining in Repeat Offenders” at the Distinguished Lecture on Regulation at the University of Pennsylvania Law School, the director of the Consumer Financial Protection Bureau (CFPB) stated that “[a]chieving general deterrence is an important goal for the CFPB” and “the role of individual liability cannot be discounted.” To that end, the CFPB recently proposed an enforcement order registry that would, among other things, require certain larger participant nonbanks subject to the CFPB’s supervisory authority to designate a senior executive who is responsible for and knowledgeable of the nonbank’s efforts to comply with the orders identified in the registry to attest regarding compliance with covered orders and submit an annual written statement attesting to the steps taken to oversee the activities subject to the applicable order for the preceding calendar year and whether the executive knows of any violations of, or other instances of noncompliance with, the covered order.

It is not surprising that one of the major questions that has arisen about financial institution (FI) insurance coverage is the extent of coverage for regulatory enforcement actions. Other questions arise in interpreting the scope of FI insurance coverage for terms such as a pending and prior claim, the performance of professional services, invasion of privacy (and whether data breaches are covered), and fraud. These terms can be particularly important in the heavily regulated financial services industry. Accordingly, financial institutions need to understand FI coverage options and the negotiable terms.

Are regulatory enforcement actions included in coverage terms?

Responding to inquiries from agencies such as the CFPB, Securities Exchange Commission (SEC), Department of Justice, attorneys general, and federal and state banking agencies can be disruptive and expensive. As a threshold matter it is important to understand the extent of insurance coverage, including the kind of inquiry that is covered. The first step is to make sure you understand which regulators are covered when there is an inquiry or enforcement action. Ideally, financial institutions would have coverage for claims from any federal or state agency.

Is there coverage for costs incurred in responding to informal inquiries?

For example, there may be coverage for an informal document request and employee interview by a government agency. Many policies now offer some coverage of a formal government agency civil investigative demand (CID) or subpoena to a financial institution, and it is important to understand the specific scenarios in which such a CID or subpoena is covered.

When facing an ongoing government investigation, is it subject to the excess policy’s “pending and prior claim” exclusion? 

In a recent case, the policy language provided that the excess policy did not apply to “any amounts incurred by the Insureds on account of any claim or other matter based upon, arising out of or attributable to any demand, suit or other proceeding pending or order, decree, judgment or adjudication entered against any Insured on or prior to July 31, 2011.” The court ruled that the parties had agreed to exclude from the excess policy coverage any claim as defined in the language of the primary policy.

The court also ruled that an ongoing SEC investigation, even though it was not being covered by any insurance policy, was a claim as defined under the primary policy and thus was subject to the pending and prior claim exclusion of the excess policy. This case emphasizes the importance of understanding the definitions of a claim within the relevant policies.

What are some considerations for losses arising out of the performance of professional services? 

Many FI policies have exclusions for loss arising out of the performance of professional services, which distinguish claims covered by a company’s errors and omissions (E&O) insurance. It is important to understand the effect of these exclusions, which are illustrated in recent court decisions.

In one recent case, a court held that a bank’s policy’s professional services exclusion precluded coverage for all insureds, not just those delivering the services. The exclusion in the case provided that there was no liability for claims “made against any Insured alleging, arising out of, based upon, or attributable to the Organization’s or any Insured’s performance of or failure to perform professional services for others….” The court held that the phrase “any Insured” made the insurer’s obligations jointly held, which prohibited recovery from any insured.

However, the policy at issue in this case did not have a severability provision. The court’s opinion suggests that a professional services exclusion in a policy with a severability provision would preclude coverage only for those who actually performed the professional services.

Another consideration is the broad language that was used in the clause in this case—it uses words like “arising out of,” “based upon,” or “attributable to” the professional services provided. Companies should ensure that the clause serves its purpose and does not preclude too much coverage.

Another issue involving professional services exclusions, particularly for banks, are fee cases. Overdraft fees, as well as a lot of other fees, including junk fees, have been a focus of regulators. One court has considered the question of insurance coverage for a bank’s obligation to repay overdraft fees. In this case, a bank customer filed suit against the bank, seeking relief from “unfair and unconscionable assessment and collection of excessive overdraft fees.” The bank filed suit against its insurer for refusing to pay defense costs in the lawsuit.

The policy at issue had a duty-to-defend clause covering claims “for a Wrongful Act committed by an Insured or any person for whose acts the Insured is legally liable while performing Professional Services, including failure to perform Professional Services.” However, the policy also had an exclusion “for Loss on account of any Claim … arising from … any fees or charges.” The court affirmed the denial of the companies’ entitlement to payment for defense costs, ruling that the fees exclusion absolved the carrier of an obligation to pay such costs. Cases like these reinforce the importance of understanding defense costs coverage for these kinds of overdraft fee cases.

How does an exclusion for invasion of privacy impact cyber breaches?

It is not uncommon for policies to have clauses that exclude claims based on invasion of privacy. Recent cases underscore the importance of understanding whether such clauses exclude coverage for claims in cyber breaches.

A court recently held that the Los Angeles Lakers were not entitled to insurance coverage for allegations that the team violated the Telephone Consumer Protection Act (TCPA). The court ruled that “because a [TCPA] claim is inherently an invasion of privacy claim, [the insurer] correctly concluded that the underlying [TCPA] claims fell under the Policy’s broad exclusionary clause.”

This decision could affect coverage of cyber-liability claims involving cybersecurity and data privacy, which are becoming increasingly common and which often touch on invasion of privacy issues. Companies should understand their exclusionary clauses on this score.

What is “final” for purposes of an insurance policy’s fraud exclusion?

Many FI insurance policies exclude coverage if the insured is found to have engaged in fraud. Often, the exclusion is only triggered after a “final” judicial determination that the excluded conduct has occurred. The issue of what a “final” determination is can affect the coverage for a claim.

Financial institutions should look for fraud exclusions in their FI policies to determine whether such exclusions refer to a “final, non-appealable adjudication” or a “final judgment.” In a New York state case, after a former CEO was sentenced for the commission of various fraud crimes, he filed an appeal of his convictions. While the appeal was still pending, however, his insurer asked to be relieved of its obligation to defend the plaintiff because the fraud exclusion in its policy was triggered upon a final judgment against its insured.

The former CEO filed suit against his insurer, but the appellate court affirmed the trial court’s ruling that the insurer was no longer obligated to pay his defense. The court held that the imposition of the criminal sentence was a “final judgment,” which appropriately triggered the fraud exclusion in the policy. The court explained that even if an appeal is successful, the finality of the sentence is not changed.

This case shows how important it is to understand the contours of a policy’s fraud exclusion.

Defense Costs: Duty to Defend v. Duty to Indemnify

Finally, a company needs to consider whether it wants to have primary control over the defense of a covered claim or wants the insurer to have primary control. An advantage of having the insurer control the defense—a “duty to defend” policy—is that the coverage requirements can be a bit more broad in many states. The main advantage of the company having primary control of the defense in a so-called “duty to indemnify” policy is that the company gets wider latitude in choosing lawyers that they trust and know to have the appropriate experience to handle the matter. Under either of these arrangements, the carrier would pay covered defense costs.

Conclusion

As trends in enforcement shift, it is increasingly important to understand liability coverage. Financial institutions should consider reaching out to experienced insurance brokers and attorneys to assist them in reviewing and analyzing the terms and features of their policies in the evolving enforcement climate.

CFPB Proposes Nonbank Registry to Focus on Compliance “Recidivism”

By , ,

A&B ABstract:

On December 12, 2022, the Consumer Financial Protection Bureau (CFPB) announced a proposed rule to require certain non-banks to register with the agency when they become subject to a public written order or judgment imposing obligations based on violations of certain consumer protection laws. The CFPB also proposes to maintain a public online registry of those nonbanks subject to agency or court orders, to “limit the harms from repeat offenders.” We provide below a description of the CFPB’s proposed rule, along with the potential implications for the financial services industry.

Background on Proposed Rule

Earlier this year, CFPB Director Rohit Chopra presented remarks at the University of Pennsylvania, where he asserted that “[c]orporate recidivism has become normalized and calculated as the cost of doing business; the result is a rinse-repeat cycle that dilutes legal standards and undermines the promise of the financial sector and the entire market system.” To address this problem, Director Chopra suggested establishing “dedicated units in our supervision and enforcement divisions to enhance the detection of repeat offenses and corporate recidivists and to better hold them accountable.” With respect to accountability for “serial offenders of federal law,” Director Chopra warned that the CFPB would be focusing on “remedies that are more structural in nature,” including “limits on the activities or functions” of the entity.

Subsequently, in November 2022, and leading up to the proposed rule, the CFPB announced, as part of its Supervisory Highlights, that it would be establishing a Repeat Offender Unit as part of its supervision program. The Repeat Offender Unit would be focused on: reviewing and monitoring the activities of “repeat offenders;” identifying the root cause of recurring violations; pursuing and recommending solutions and remedies that hold entities accountable for failing to consistently comply with Federal consumer financial law; and designing a model for order review and monitoring that reduces the occurrences of repeat offenders. The Bureau asserts that its authority for these efforts, along with any proposed rulemaking, is derived from the Consumer Financial Protection Act’s mandate that the Bureau “monitor for risks to consumers in the offering or provision of consumer financial products or services” and “gather information from time to time regarding the organization, business conduct, markets, and activities of covered persons and service providers.” See 12 U.S.C. § 5512(c)(1), (4).

Proposed Requirements

The CFPB’s proposed rule would require certain nonbanks covered person entities (with exclusions for insured depository institutions, insured credit unions, related persons, States, certain other entities, and natural persons) to register with the Bureau upon becoming subject to a public written order or judgment imposing obligations based on violations of certain consumer protections laws. Such entities would be required to register in a system established by the Bureau, provide basic identifying information about the company and the order (including a copy of the order), and periodically update the registry for accuracy and completeness. For purposes of the proposed rule, “covered person” would have the same meaning as in 12 U.S.C. § 5481(6). Further, “service providers” would be deemed covered persons to the extent that they engage in the offering or provision of their own consumer financial product or services or where they act as service providers to covered person affiliates.

In addition, certain larger participant nonbanks subject to the Bureau’s supervisory authority would be required to designate a senior executive, who is responsible for and knowledgeable of the nonbank’s efforts to comply with the orders identified in the registry, to attest regarding compliance with covered orders and submit an annual written statement attesting to the steps taken to oversee the activities subject to the applicable order for the preceding calendar year, and whether the executive knows of any violations of, or other instances of noncompliance with, the covered order.

Further, the CFPB is considering whether to release, via its publicly available website, the above registry information for non-banks.

Implications for Non-Banks

While the CFPB’s proposed enforcement order registry would provide greater transparency about a lender’s regulatory track record to the various federal and state regulators and the general public, it remains to be seen how the information maintained in this registry might be used against lenders. At a minimum, however, the proposed rule raises the following significant implications for non-banks:

  • Supervision and examination considerations. The CFPB intends to use the information in the registry to coordinate its “risk-based supervisory prioritization,” for those non-bank markets covered by the Bureau’s supervision and examination authority under CFPA section 1024(a). Thus, entities with a local, state, or federal prior enforcement order may be subject to more targeted supervision.
  • Investigation and enforcement presumptions. The CFPB intends to use the information in the registry in connection with its investigation and potential enforcement activities, which presents various risks, including:
    • Increased civil money penalties. Specifically, the CFPB believes that the information contained in the proposed registry can assist the agency in determining the civil penalties that may be assessed for a future violation of federal consumer financial law, given that federal law permits the CFPB to consider the entity’s “history of previous violations.” Indeed, it is possible that the CFPB may use evidence of prior enforcement against an entity, brought by itself or another agency, to establish that the entity acted knowingly or recklessly in violating federal consumer financial law, perhaps even where the prior enforcement order involved a different consumer-related issue.
    • Presumption of consumer harm. Further, the CFPB believes there is a “heightened likelihood” that entities that are subject to public orders relating to consumer financial products and services may pose risks to consumers in the markets for those products and services, since entities that have previously been subject to enforcement actions “present an increased risk of committing violations of laws.” Thus, there may be a presumption of consumer harm against an entity where a prior enforcement order exists. Yet this approach by the CFPB likely will overstate the actual harm to consumers, as most consent orders do not contain an admission by the entity of any liability or wrongdoing.
  • Increased reputational risk. Given that the CFPB maintains Memoranda of Understanding with federal parties (such as the Federal Trade Commission and the U.S. Department of Justice), as well as with at least 20 state attorneys general offices, it appears that the information reported to the registry already would be available to such agencies. However, the registry will permit all agencies, as well as the general public, a readily accessible, one-stop shop to an entity’s entire enforcement track record, which may present significant reputational risk to that entity, as well as a potentially increased risk of class action lawsuits and other consumer claims.
  • Facilitating of private enforcement. The CFPB believes that the proposed registry may “facilitate private enforcement of the Federal consumer financial laws by consumers, to the extent those laws provide private rights of action, where consumers have been harmed by a registered nonbank.” In other words, the “information that would be published under the proposal might be useful in helping consumers understand the identity of a company that has offered or provided a particular consumer financial product or service, and in determining whether to file suit or otherwise make choices regarding how to assert their legal rights.”

Takeaway:

Given the significant implications raised by the CFPB’s proposed rule, non-bank financial institutions should consider submitting comments, which are due 60 days after publication in the Federal Register. In particular, the CFPB seeks comment on “its preliminary conclusion that collecting and registering public agency and court orders imposing obligations based upon violations of consumer law would assist with monitoring for risks to consumers in the offering or provision of consumer financial products and services.” The CFPB also seeks comment on “whether the types of orders described in the proposal, and the types of information that would be collected about those orders and covered nonbanks under the proposal, would provide useful information to the Bureau,” as well as “any other risks that might be identified through collecting the information described in the proposal.” Finally, the Bureau seeks comment on whether it should consider collecting any other information in order to identify risks to consumers associated with orders.

38 Attorneys General Ask SCOTUS to Determine the CFPB’s Fate

By , ,

A&B Abstract:

In November, the Consumer Financial Protection Bureau (“CFPB”) filed a petition for a writ of certiorari in connection with the Fifth Circuit’s recent decision in Community Financial, which held that the CFPB’s funding structure violated the Constitution’s Appropriations Clause. (For a full discussion of the Community Financial decision, click here; for a full discussion of the CFPB’s petition, click here.).

One month later, thirty-eight state attorneys general have joined one of two separate amicus briefs asking the nation’s highest court to weigh in. While both amicus briefs support granting the CFPB’s petition, the similarities end there.

The Amicus Briefs

The first brief, filed by a coalition of twenty-two Democratic attorneys general, argues that the Fifth Circuit’s Community Financial decision created “confusion and regulatory chaos” by “stepp[ing] in to create a conflict between [Congress and the Executive branch] that did not otherwise exist.” Focusing principally on the Fifth Circuit’s decision to vacate the challenged CFPB rule it its entirety, these amici argue that Supreme Court precedent specifically rejects that challenged agency action must be completely undone just because the agency operated with a constitutional defect at the time of the action. Emphasizing the threat that Community Financial poses to many of the CFPB’s actions taken over the last decade, these amici suggest that a “‘judge made remedy’ that aligns with traditional remedial principles would address the specific constitutional defects in the CFPB’s funding” in a more tailored way. They ask that the Supreme Court “grant certiorari and confirm that the absence of valid appropriations does not make void a prior unfunded action.” These attorneys general represent the states of New York, California, Colorado, Connecticut, Delaware, Hawai’i, Illinois, Maine, Maryland, Massachusetts, Michigan, Minnesota, Nevada, New Jersey, New Mexico, North Carolina, Oregon, Pennsylvania, Rhode Island, Washington, Wisconsin, and the District of Columbia.

The second amicus brief, filed by sixteen Republican attorneys general, takes a very different approach. To start, these amici contend that the Court should grant the petition for review not because Community Financial was wrongly decided but because the Fifth Circuit’s ruling should apply nationwide. Referring to the CFPB as a “failed experiment,” these amici stress that the Appropriations Clause “serves a critically necessary purpose by giving States insight into agency action” that must be recognized. And because, in their view, the CFPB has “not convincingly explain[ed]” how the CFPB could act without appropriations, these amici conclude that the Fifth Circuit correctly elected to vacate the CFPB’s action altogether. Applauding the Fifth Circuit’s opinion as “right in every regard,” these amici request that the Court grant certiorari and confirm the Fifth Circuit’s reasoning. These attorneys general represent the states of West Virginia, Alabama, Arkansas, Indiana, Kansas, Kentucky, Louisiana, Mississippi, Montana, Nebraska, Oklahoma, South Carolina, South Dakota, Texas, Utah, and Virginia.

Takeaways

The Fifth Circuit’s decision in Community Financial posed an existential threat to the CFPB. Now, leaders across the nation have asked the Supreme Court to take a side. If the Court accepts this invitation, its ultimate ruling will have important implications on the future of the CFPB.

 

Assumptions on the Rise: Are You Ready for Mortgage Assumptions?

By , ,

A&B ABstract:

Mortgage assumptions – where a buyer assumes the existing mortgage loan of a seller – have fluctuated in popularity since the 1980s. However, inflation and the high interest rate environment, coupled with an observable shift to a buyer’s market, are raising the prospect that assumable mortgages – especially those with historically low interest rates – are likely to become a selling point for potential sellers. Statements by the real estate broker industry, U.S. Department of Housing and Urban Development (HUD), and former Ginnie Mae officials, to name a few, corroborate this hunch. Ultimately, given these rumblings, it appears that lenders, and more so mortgage servicers, will need to prepare for a potential increase in mortgage assumption volume. Below are several key considerations with respect to mortgage assumptions.

Servicer Capabilities

Servicers generally will need to diligently evaluate the assuming buyer’s creditworthiness. In certain cases, servicers may need to offer and service home equity lines of credit (HELOCs) and second liens to support the cost difference between the amount of the loan to be assumed and the cost of the property. Further, as servicers will likely have to evaluate the assuming consumer’s credit eligibility in connection with the processing of most mortgage assumptions, such activities may give rise to additional state mortgage lender and/or loan originator licensing obligations. While the federal SAFE Mortgage Licensing Act and its implementing Regulation G and H generally do not consider mortgage loan origination activity to encompass a servicer’s activities in connection with the processing of a loan modification, when the borrower is reasonably likely to default, there is no such exemption for mortgage assumptions. Moreover, states that license mortgage loan origination activities may vary as to whether a license is required to process an assumption.

 Investor Restrictions

Even if a buyer is deemed creditworthy to assume the seller’s mortgage payments, the agency or investor backing the seller’s mortgage loan must approve the assumption. Most government-backed mortgage loans, such as those guaranteed or insured by the Federal Housing Administration (FHA), U.S. Department of Veteran Affairs (VA), and U.S. Department of Agriculture (USDA) are assumable, provided specific requirements are met.  On the other hand, conventional mortgages (i.e., loans meeting the requirements for purchase by Fannie Mae and Freddie Mac (the “GSEs”)) may be more difficult to assume.

It is important to note that the requirements for processing and/or approving an assumption vary from agency to agency and among the GSEs. By way of example:

  • FHA loans are assumable if the buyer meets certain credit requirements, according to FHA guidelines. Buyers who assume FHA mortgages pay off the remaining balance at the current rate, and the lender releases the seller from the loan.
  • VA mortgage assumption guidelines are similar to FHA, with some notable differences. The VA or the VA-approved lender must evaluate the creditworthiness of the buyer, who generally must also pay a VA funding fee of 0.5% of the loan balance as of the transfer date. Unlike new loans, buyers can’t finance the funding fee when assuming a loan, it must be paid in cash at the time of transfer. Moreover, the only way the seller can have their VA entitlement restored would be to have the home assumed by a fellow eligible active-duty service member, reservist, veteran, or eligible surviving spouse.
  • USDA permits loan assumptions but operates differently from FHA-insured or VA-guaranteed loans. For example, according to USDA guidelines, when most buyers assume a USDA loan, the lender will generally issue new terms, which may include a new rate.
  • Fannie Mae and Freddie Mac may permit an assumption under certain circumstances. For example, Fannie Mae may permit the assumption of certain first-lien adjustable-rate mortgage (ARMs) loans that have not been converted to a fixed-rate-mortgage loan.

Due-on-Sale Clauses

Many conventional mortgages today contain “due-on-sale” clauses that authorize a lender, at its option, to declare due and payable sums secured by the lender’s security interest if all or any part of the property, or an interest therein, securing the loan is sold or transferred without the lender’s prior written consent. However, the Garn-St. Germain Depository Institutions Act prohibits a lender from exercising its option pursuant to a due-on-sale clause in connection with certain exempt transfers or dispositions, including, among others: (1) a transfer by devise, descent, or operation of law on the death of a joint tenant or tenant by the entirety; (2) a transfer to a relative resulting from the death of a borrower; (3) a transfer where the spouse or children of the borrower become an owner of the property; and (4) a transfer resulting from a decree of a dissolution of marriage, legal separation agreement, or from an incidental property settlement agreement, by which the spouse of the borrower becomes an owner of the property. 12 U.S.C. § 1701j–3(d).

Fees

Whether an assumption fee can be charged, and the amount of such fee, will depend on many factors including application of the Garn-St. Germain Act, the CFPB mortgage servicing rules, investor and agency guidelines, and state laws. Further, the Fair Debt Collection Practices Act (FDCPA) may impact whether a servicer may assess and collect an assumption fee. While most states neither expressly permit nor prohibit assumption fees, several other states, such as Idaho and Michigan, explicitly recognize and permit assumption fees in limited cases (e.g., only where the fee is included in the purchase contract or other agreement). Other states may regulate the amount of an assumption fee. For example, Colorado law limits assumption fees to one-half of 1% of the outstanding principal mortgage amount.

General Federal Consumer Financial Compliance

Assumption transactions also raise compliance considerations under federal consumer financial laws. Under TILA and Regulation Z, an assumption occurs if the transaction meets the following elements: (1) includes the creditor’s express acceptance of the new consumer as a primary obligor; (2) includes the creditor’s express acceptance in a written agreement; and (3) is a “residential mortgage transaction” as to the new consumer. 12 C.F.R. § 1026.20(b). A “residential mortgage transaction” is a transaction: (a) in which a security interest is created or retained in the new consumer’s principal dwelling; and (b) which finances the acquisition or initial construction of the new consumer’s principal dwelling. 12 C.F.R. 1026.2(a)(24). If the transaction is an assumption under Regulation Z (12 C.F.R. § 1026.20(b)), then, as noted by the CFPB in its TILA-RESPA Factsheet, creditors must provide a Loan Estimate and Closing Disclosure, unless the transaction is otherwise exempt. Moreover, the assumption transaction may also trigger requirements under Regulation Z’s loan originator compensation and ability-to-repay rules.

With respect to RESPA and Regulation X, however, assumptions are exempt unless the mortgage instruments require lender approval for the assumption and the lender approves the assumption. Specifically, Regulation X expressly exempts from its coverage any “assumption in which the lender does not have the right expressly to approve a subsequent person as the borrower on an existing federally related mortgage loan.” 12 C.F.R. § 1024.5(b)(5). By way of example, the Fannie/Freddie Uniform Security Instrument provides that:

Subject to the provisions of Section 18, any Successor in Interest of Borrower who assumes Borrower’s obligations under this Security Instrument in writing, and is approved by Lender, shall obtain all of Borrower’s rights and obligations under this Security Instrument.  Borrower shall not be released from Borrower’s obligations and liability under this Security Instrument unless Lender agrees to such release in writing.  The covenants and agreements of this Security Instrument shall bind (except as provided in Section 20) and benefit successors of Lender.

Finally, with respect to the CFPB’s Mortgage Servicing Rules, if a successor in interest assumes a mortgage loan obligation under state law or is otherwise liable on the mortgage loan obligation, the protections that the consumer enjoys under Regulation X go beyond the protections that apply to a confirmed successor in interest. 12 C.F.R. § 1024.30(d).

Takeaway

The processing of mortgage assumptions involves many of the same regulatory considerations as originating a new loan. However, because of varying requirements under agency and investor guidelines, there are several unique aspects to processing assumptions, which may pose challenges for servicers that do not regularly engage in mortgage origination. The economic climate appears to be ripe for an uptick in mortgage loan assumption activity. Accordingly, servicers should ensure their compliance management systems are prepared to manage the associated compliance risks.

HELOCs On the Rise: Is Your Servicing CMS Ready?

By ,

A&B ABstract:

The Consumer Financial Protection Bureau (“CFPB” or “Bureau”) has moved to clarify its regulatory authority at a time when the economic climate is ripe for a resurgence in HELOC lending. In an amicus brief filed by the CFPB on November 30, 2022 (the “Amicus Brief”), the Bureau acknowledged that its Mortgage Servicing Rules, which, in 2013, amended Regulation X, RESPA’s implementing regulation, and Regulation Z, TILA’s implementing regulation, do not apply to home equity lines of credit (“HELOCs”).  This is consistent with the Bureau’s guidance in the preamble to the CFPB Mortgage Servicing Rules under RESPA, wherein the Bureau recognized that HELOCs have a different risk profile, and are serviced differently, than first-lien mortgage loans, and that many of the rules under Regulation X would be “irrelevant to HELOCs” and “would substantially overlap” with the longstanding protections under TILA and Regulation Z that apply to HELOCs.

During this past refinance boom, consumers refinanced mortgage loans at record rates. Moreover, according to a recent report by the Federal Reserve, consumers are sitting on nearly 30 trillion dollars in home equity.  HELOCs allow consumers the opportunity to extract equity from their homes without losing the low interest rate on their first-lien loan. Generally, a HELOC is a revolving line of credit that is secured by a subordinate mortgage on the borrower’s residence that typically has a draw period of 5 or 10 years.  At the end of the draw period, the outstanding loan payment converts to a repayment period of 5 to 25 years with interest and principal payments required that fully amortize the balance.

Issues to Consider in Servicing HELOCs

Servicing HELOCs raise unique issues given the open-end nature of the loan, the typical second lien position, and the different regulatory requirements.  HELOC servicers will need to ensure their compliance management systems (“CMS”) are robust enough to account for a potential uptick in HELOC lending. Among many other issues, servicers will want to ensure their operations comply with several regulatory requirements, including:

Offsets: In the Amicus Brief, the CFPB argues that HELOCs accessible by a credit card are subject to the provisions of TILA and Regulation Z that prohibit card issuers from using deposit account funds to offset indebtedness arising out of a credit card transaction.

Disclosures: Long before the CFPB Mortgage Servicing Rules, TILA and Regulation Z contained disclosures applicable to HELOCs. As a result, the provisions of the CFPB Mortgage Servicing Rules under Regulation Z governing periodic billing statements, adjustable-rate mortgage (ARM) interest rate adjustment notices, and payment crediting provisions do not apply to HELOCs as these provisions are specifically limited to closed-end consumer credit transactions. However, the payoff statement requirements under Regulation Z are applicable both to HELOCs and closed-end consumer credit transactions secured by a dwelling. In addition to certain account-opening disclosures, a HELOC creditor (or its servicer) must make certain subsequent disclosures to the borrower, either annually (e.g., an annual statement) or upon the occurrence of a specific trigger event, such as the addition of a credit access device, a change in terms or change in billing cycle, or a notice to restrict credit. It is also worth noting that Regulation Z’s mortgage transfer notice (commonly referred to as the Section 404 notice) applicable when a loan is transferred, sold or assigned to a third party, applies to HELOCs. In contrast, RESPA’s servicing transfer notice does not apply to HELOCs.

Periodic Statements: TILA and Regulation Z contain a different set of periodic statement requirements, predating the CFPB Mortgage Servicing Rules, which are applicable to HELOCs. Under TILA, a servicer must comply with the open-end periodic statement requirements. That is true even if the HELOC has an open-end draw period followed by a closed-end repayment period, during which no further draws are permitted. Such statements can be complex given that principal repayment and interest accrual vary based on draws; there will be a conversion to scheduled amortization after the draw period ends; and balloon payments may be required at maturity, resulting in the need for servicing system adjustments.

Billing Error Resolution: Instead of having to comply with the Regulation X requirements for notices of error, HELOCs are subject to Regulation Z’s billing error resolution requirements.

Crediting of Payments: A creditor may credit a payment to the consumer’s account, including a HELOC, as of the date of receipt, except when a delay in crediting does not result in a finance or other charge, or except as otherwise provided in 12 C.F.R. § 1026.10(a).

Restrictions on Servicing Fees: Regulation Z restricts certain new servicing fees that may be imposed, where such fees are not provided for in the contract, because the credit may not, by contract or otherwise, change any term except as provided in 12 C.F.R § 1026.40.  With the CFPB’s increased focus on fees, this provision may be an area of focus for the Bureau and state regulators.

Restriction on Changing the APR: The creditor may not, by contract or otherwise, change the APR of a HELOC unless such change is based on an index that is not under the creditor’s control and such index is available to the general public.  However, this requirement does not prohibit rate changes which are specifically set forth in the agreement, such as stepped-rate plans or preferred-rate provisions.

Terminating, Suspending or Reducing a Line of Credit: TILA and Regulation Z restrict the ability of the creditor to prohibit additional extensions of credit or reduce the credit limit applicable to an agreement under those circumstances set forth in 12 C.F.R § 1026.40.  Similarly, TILA and Regulation Z impose restrictions on when the creditor may terminate and accelerate the loan balance.

Rescission: Similar to closed-end loans, the consumer will have a right of rescission on a HELOC; however, the right extends beyond just the initial account opening. During the servicing of a HELOC, the consumer has a right of rescission whenever (i) credit is extended under the plan, or (ii) the credit limit is increased. But there is no right of rescission when credit extensions are made in accordance with the existing credit limit under the plan. If rescission applies, the notice and procedural requirements set forth in TILA and Regulation Z must be followed.

Default: Loss mitigation and default recovery actions may be limited by the firstien loan. That’s because default or acceleration of the first-lien loan immediately triggers loss mitigation and default recovery to protect the second-lien loan.  The protection of the second-lien loan may involve advancing monthly payments on the first-lien loan.  Foreclosure pursued against the first-lien loan will trigger second lien to participate and monitor for protection and recovery. Even though not applicable to HELOCs, some servicers may consider complying with loss mitigation provisions as guidelines or best practices.

ECOA and FCRA: Terminating, suspending, or reducing the credit limit on a HELOC based on declining property values could raise redlining risk, which is a form of illegal disparate treatment in which a lender provides unequal access to credit or unequal terms of credit because of a prohibited characteristic of the residents of the area in which the credit seeker resides or will reside or in which the residential property to be mortgaged is located. Thus, lenders and servicers should have policies and procedures in place to ensure that actions to reduce, terminate or suspend HELOCs are carried out in a non-discriminatory manner.  Relatedly, the CFPB’s authority under the Dodd-Frank Act to prohibit unfair, deceptive or abusive acts or practices will similarly prohibit certain conduct in connection with the servicing of HELOCs that the CFPB may consider to be harmful to consumers.  It is also important to remember that ECOA requires that a creditor notify an applicant of action taken within 30 days after taking adverse action on an existing account, where the adverse action includes a termination of an account, an unfavorable change in the terms of an account, or a refusal to increase the amount of credit available to an applicant who has made an application for an increase.  Similar to ECOA, FCRA also requires the servicer to provide the consumer with an adverse action notice in certain circumstances.

State Law Considerations: And let’s not forget state law issues. While most of the CFPB’s Mortgage Servicing Rules do not apply to HELOCs, many state provisions may cover HELOCs.  As most HELOCs are subordinate-lien loans, second lien licensing law obligations arise. Also, sourcing, processing and funding draw requests could implicate loan originator and/or money transmitter licensing obligations. Also, at least one state prohibits a licensee from servicing a usurious loan.  For HELOCs, the issue is not only the initial rate but also the adjusted rate (assuming it is an ARM).  There may also be state-specific disclosure obligations, as well as restrictions on product terms (such as balloon payments or lien releases), fees, or credit line access devices, to name a few.

Takeaway

The servicing of HELOCs involve many of the same aspects as servicing first-lien residential mortgage loans.  However, because of the open-end credit line features and the typical second-lien position, there are several unique aspects to servicing HELOCs.  And, because there are no industry standard HELOC agreements, the terms of the HELOC (e.g., the length of draw and amortization periods, interest-only payment features, balloon, credit access, etc.) can vary greatly.  The economic climate is poised for a resurgence in home equity lending.  Now is the time to ensure your CMS is up to the task.