Alston & Bird Consumer Finance Blog

Mortgage Loans

New York DFS to Impose Climate Change Safety and Soundness Expectations on Mortgage Lenders, Servicers, and other Regulated Organizations

What Happened?

On December 21, 2023, the New York Department of Financial Services (“NYDFS”) published an 18-page guidance document (the “Guidance”) on managing material, financial and operational risks due to climate change. The NYDFS issued the Guidance after considering feedback it received on proposed guidance it issued in December 2022 on the same topic. The Guidance applies to New York State regulated mortgage lenders and servicers, as well as New York State regulated banking organizations, licensed branches and agencies of foreign banking organizations (collectively, “Regulated Organizations”).

Why Is It Important?

The NYDFS has set forth its expectations, replete with examples, for Regulated Organizations to strategically manage climate change-related financial and operational risks and identify necessary actions proportionate to their size, business activities and risk profile.  Such expectations include:

  • Corporate Governance: An organization’s board of directors should establish a risk management framework, including its overall business strategy and risk appetite, which include climate related financial and operational risks, and holding management accountable for implementation. Such framework should be integrated within an organization’s three lines of defense – quality assurance, quality control and internal audit. Recognizing that low and moderate income (“LMI”) communities may be adversely impacted from climate change, the NYDFS expects an organization’s board of directors to direct management to “minimize and affirmatively mitigate disproportionate impacts” which could violate fair lending and other consumer finance laws. On that note, the NYDFS reminds organizations to consider opportunities to mitigate financial risk through financing or investment opportunities which enhance climate resiliency and are eligible for credit under the New York Community Reinvestment Act.
  • Internal Control and Risk Management: Regulated Organizations should also consider and incorporate climate related financial risks when identifying and mitigating all types of risks, including credit, liability, market, legal/compliance risk, and operational and strategic risk. The NYDFS defines financial risks from climate change to include physical risks from more intense weather events as well as transition risks, resulting from “economic and behavior changes driven by policy and regulation, new technology, consumer and investor preferences and changing liability risks.” The NYDFS recognizes that insurance is an important mitigant to climate change risk but cautions that the availability of such insurance in the future is not guaranteed.
  • Data Aggregation and Reporting: Regulated Organizations should establish systems to aggregate data and internally report its efforts to monitor climate related financial risk to facilitate board and senior management decision making. Such organizations also should consider developing and implementing climate scenario analyses.

What Do You Need to Do?

The NYDFS stresses that organizations should not let “uncertainty and data gaps justify inaction.” Although the NYDFS has not issued a timeline for implementation of the Guidance or begun incorporating such expectations into examinations (which will be coordinated with the prudential regulators to align with joint supervisory processes), now is the time to begin integrating climate-related financial and operational risks into your company’s organizational structure, business strategies and risk management operations.  This will help you prepare for when your organization is required to respond to the request for information which the NYDFS anticipates sending out later this year.  It is anticipated that the NYDFS will ask for information on the steps your organization has taken or will take within a specified period to manage financial and operational climate-related risks, including government structure, business strategy, risk management, operational resiliency measures, and metrics to measure risks.

Mortgage Industry Update: Washington DFI Holds First Mortgage Industry Webinar of 2024

A&B Abstract:

On January 24th, the Washington Department of Financial Institutions (the “DFI”) conducted its first Mortgage Industry Webinar of 2024 and provided updates in the areas of licensing, examination, and enforcement. Highlights from the Webinar are briefly summarized below.

Licensing Update

The DFI provided the following snapshot of licensing activity as of December 31, 2023:

  • Company licenses increased since the prior year.
  • Branch licenses decreased due to authorized remote work by mortgage loan originators (“MLO”).
  • MLO licenses decreased compared to previous years.
  • 70 % of MLOs submitted renewals, representing an increase of 10% from the prior year.
  • 30% of reinstatement/late renewals submitted so far this month.
  • The DFI approved 230 company applications, 950 branch applications and approximately 3,300 individual applications.

Examination Update

The DFI also provided an overview of the following common violations found during examinations conducted of MLOs, mortgage brokers, residential mortgage loan servicers, and consumer loan licensees:

  • Failure to maintain records for 3 years.
  • Failure to date mortgage loan applications and/or complete required information.
  • Failure to maintain supervisory plans.
  • Failure to submit accurate mortgage call reports (“MCRs”) by certain mortgage brokers.
  • Failure to complete all required information on license applications.
  • Failure to report accurate information to the credit bureaus.
  • Failure to conspicuously disclose fees.
  • Failure to report mortgage loan payoffs by certain mortgage loan servicers.

Additionally, in response to an inquiry regarding the rating system used by the DFI in conducting examinations, the DFI explained that it uses a rating scale of 1 to 5, where 1 would be the best rating, and 5 would be the worst rating.

Enforcement Update

The DFI also provided an overview of complaints investigated by its Enforcement Unit during the last quarter of 2023 and identified certain common violations under Washington’s Mortgage Broker Practices Act (“MBPA”) and the Consumer Loan Act (“CLA”).

Specifically, the DFI indicated that it saw an increase in:

  • Instances where address locations of branches or companies were found to be changed and contact information changed without corresponding updates in the NMLS.
  • Complaints alleging unlicensed activity by loan modification companies.
  • Complaints alleging advertising violations, such as providing misleading information about interest rates by indicating that a loan is “interest free” without proper disclosure.

Further, with respect to unlicensed MLO activity, the DFI indicated that it examines the actual activity performed by the individual in question, and if the individual’s activity meets the definition of an MLO, then that individual has engaged in mortgage loan activity and must be licensed as an MLO.

Finally, the DFI indicated that its Enforcement Unit closed more than 950 complaints that resulted in (1) $80,000 in restitution granted to impacted consumers, (2) the postponement or halting of at least 10 or more foreclosures, and (3) the granting of several loan modifications.

Takeaway

Licensees under the MBPA or CLA are encouraged to review the issues identified by the DFI against their policies, procedures, and practices to ensure compliance with the requirements under the MBPA and/or CLA.

Mortgage Servicers: VA Issues Guidance Regarding Noncompliance in Processing VA Assumptions

A&B Abstract:

On December 20, 2023, the Department of Veterans Affairs (VA) issued Circular 26-23-27 (the “Circular”) to remind holders and servicers of VA-guaranteed loans about their obligation to process assumptions and how the VA will address non-compliance with its assumption requirements. The Circular became effective immediately upon issuance.

The Circular

Holders and servicers of VA-guaranteed loans are responsible for ensuring compliance with VA’s requirements, including those regarding the processing of loan assumptions. Indeed, in May 2023, the VA issued guidance clarifying its assumption procedures and emphasizing that assumptions are a fundamental feature of a VA-guaranteed loan and are to be processed in accordance with VA requirements. Notably, failure to comply with the VA’s requirements constitutes a defense against the VA’s obligation to pay a guaranty claim on the affected loan(s).

In the Circular, the VA notes that “certain holders have questioned whether they are required to process an assumption that meets VA’s requirements and can instead deny approval due to holder-imposed criteria (overlays) or other reasons. Examples include, but are not limited to, cases where:

  • a holder refuses to accept an assumption package;
  • a servicer with automatic authority accepts an assumption package but does not make a decision within 45 days;
  • a holder without automatic authority accepts an assumption package but does not forward to VA within 35 days;
  • a holder denies an assumptor’s application due to a holder overlay; and
  • a holder denies an assumptor’s application, VA approves the assumption on appeal, and the holder refuses to complete the assumption due to a holder overlay or other reason.”

The Circular warns holders and servicers that willful refusal to process an assumption package in accordance with VA statutes and associated regulations negatively affects Veterans’ ability to use their earned VA-guaranteed home loan benefits, including selling their home through an assumption, and that such a willful failure to comply constitutes a defense against VA’s liability on the guaranty.

VA Procedures for Noncompliance

The Circular sets forth the following procedures that the VA will follow to address noncompliance with its loan assumption requirements. If VA determines that a holder failed to process an assumption package in accordance with VA requirements, the VA will notify the holder of the failure to comply and direct the holder to timely remediate the failure. If, after 7 calendar days, VA is not satisfied that the holder is taking appropriate steps to process the assumption, or VA determines at any time that the servicer’s inaction may result in irreparable harm to the Veteran, the VA will take the following steps:

  • Insert a notation in the loan file that VA has asserted a defense against liability and will not pay any guaranty claim for the loan.
  • Notify the Government National Mortgage Association (“Ginnie Mae”) that VA has asserted a defense against liability and, as such, the guaranty payable on the loan has been effectively reduced to $0. Note that reducing the guaranty payable on the loan to $0 may render the loan defective and subject to cure, substitution, and/or buyout under Ginnie Mae guidelines.
  • If, after taking the steps described above, VA receives sufficient notice and evidence that the servicer completed the assumption, VA will remove the notation in the loan file and notify Ginnie Mae that VA has readjusted the guaranty payable on the loan back to the original amount.

Repeated Noncompliance

In addition, the Circular notes that repeated failure to process assumptions for VA-guaranteed loans may subject holders to additional measures such as:

  • additional examination and audit;
  • referral to VA’s Office of Inspector General for further investigation;
  • various penalties associated with false claims, program fraud civil liability, and other legal or administrative sanctions;
  • action pursuant to 38 U.S.C. § 3704(d), including VA’s refusal either temporarily or permanently to guarantee any loans made by such holder or barring such holder from servicing or acquiring guaranteed loans; and
  • notification to the public that VA has found the holder responsible for repeated, willful noncompliance with VA’s statutes and regulations.

Takeaway

Given that the VA is telegraphing its focus on ensuring compliance with the VA’s loan assumption requirements, now is a good time for holders and servicers to ensure that their compliance management systems are robust enough to ensure compliance with the VA’s loan assumption requirements.

Complying with the “Consider” Requirement Under the Revised Qualified Mortgage Rules

A&B Abstract:

Purchasers of residential mortgage loans who are conducting audits of residential mortgages that they buy in the secondary market are struggling to determine what documentation satisfies the “consider” requirement of the revised qualified mortgage (QM) standards that became mandatory on October 1, 2022. In fact, originators of residential mortgage loans are not in agreement regarding what particular written policies and procedures they must promulgate and maintain and the documentation that they should include in the loan files. We set forth what we believe are the policies and procedures and the documentation that creditors must maintain and provide to their counterparties to comply with the consider requirement.

The Revised QM Rules

As a threshold matter, on December 10, 2020, Kathy Kraninger, who was the director of the Consumer Financial Protection Bureau (CFPB), issued the revised QM rules that replaced Appendix Q and the strict 43% debt-to-income ratio (DTI) underwriting threshold with a priced-based QM loan definition. The revised QM rules also terminated the QM Patch, under which certain loans eligible for purchase by Fannie Mae and Freddie Mac do not have to be underwritten to Appendix Q or satisfy the capped 43% DTI requirement. Compliance with the new rules became mandatory on October 1, 2022.

Under the revised rules, for first-lien transactions, a loan receives a conclusive presumption that the consumer had the ability to repay (and hence receives the safe harbor presumption of QM compliance) if the annual percentage rate does not exceed the average prime offer rate (APOR) for a comparable transaction by 1.5 percentage points or more as of the date the interest rate is set. A first-lien loan receives a “rebuttable presumption” that the consumer had the ability to repay if the APR exceeds the APOR for a comparable transaction by 1.5 percentage points or more but by less than 2.25 percentage points. The revised QM rules provide for higher thresholds for loans with smaller loan amounts, for subordinate-lien transactions, and for certain manufactured housing loans.

To qualify for QM status, the loan must continue to meet the statutory requirements regarding the 3% points and fees limits, and it must not contain negative amortization, a balloon payment (except in the existing limited circumstances), or a term exceeding 30 years.

Consider and Verify Consumer Income and Assets

In lieu of underwriting to Appendix Q, the revised rule requires that the creditor consider the consumer’s current or reasonably expected income or assets other than the value of the dwelling (including any real property attached to the dwelling) that secures the loan, debt obligations, alimony, child support, and DTI ratio or residual income. The final rule also requires the creditor to verify the consumer’s current or reasonably expected income or assets other than the value of the dwelling (including any real property attached to the dwelling) that secures the loan and the consumer’s current debt obligations, alimony, and child support.

In particular, to comply with the consider requirement under the rule, the CFPB provides creditors the option to consider either the consumer’s monthly residual income or DTI. The CFPB imposes no bright-line DTI limits or residual income thresholds. As part of the consider requirement, a creditor must maintain policies and procedures for how it takes into account the underwriting factors enumerated above and retain documentation showing how it took these factors into account in its ability-to-repay determination.

The CFPB indicates that this documentation may include, for example, “an underwriter worksheet or a final automated underwriting system certification, in combination with the creditor’s applicable underwriting standards and any applicable exceptions described in its policies and procedures, that shows how these required factors were taken into account in the creditor’s ability-to-repay determination.”

CFPB Staff Commentary

Paragraph 43(e)(2)(v)(A) of the CFPB Staff Commentary to Regulation Z requires creditors to comply with the consider requirement of the new QM rule by doing the following:

a creditor must take into account current or reasonably expected income or assets other than the value of the dwelling (including any real property attached to the dwelling) that secures the loan, debt obligations, alimony, child support, and monthly debt-to-income ratio or residual income in its ability-to-repay determination. A creditor must maintain written policies and procedures for how it takes into account, pursuant to its underwriting standards, income or assets, debt obligations, alimony, child support, and monthly debt-to-income ratio or residual income in its ability-to-repay determination. A creditor must also retain documentation showing how it took into account income or assets, debt obligations, alimony, child support, and monthly debt-to-income ratio or residual income in its ability-to-repay determination, including how it applied its policies and procedures, in order to meet this requirement to consider and thereby meet the requirements for a qualified mortgage under § 1026.43(e)(2). This documentation may include, for example, an underwriter worksheet or a final automated underwriting system certification, in combination with the creditor’s applicable underwriting standards and any applicable exceptions described in its policies and procedures, that show how these required factors were taken into account in the creditor’s ability-to-repay determination [emphasis added].

The Secondary Market’s Review of Creditors’ Policies and Procedures and File Documentation

The revised rules suggest that, at a minimum, to ensure that the creditor has satisfied the “consider” requirement, a creditor must promulgate and maintain policies and procedures for how it takes into account the underwriting factors enumerated above as well as retain documentation showing how it took these factors into account in its ability-to-repay determination. Ideally, the creditor should make these written policies and procedures available to the creditor’s secondary market counterparties.

Further, and more importantly, the revised rules indicate that the individual loan files should contain a worksheet, Automated Underwriting Systems (AUS) certification, or some other written evidence documenting how the enumerated factors were taken into account in meeting the enhanced ability-to-repay standards. The underwriters should document their use of applicable exceptions to the creditor’s general policies and procedures in underwriting the loan.

Notwithstanding the foregoing, it is our understanding that compliance with these requirements has been uneven in the industry and that certain creditors have not promulgated the requisite written policies and procedures related to the consideration of income, assets, and debt. In addition, documentation (i.e., worksheets and AUS certifications) of these factors in individual loan files has been haphazard and inconsistent.

In March 2023, the Structured Finance Association convened an ATR/QM Scope of Review Task Force, comprising rating agencies, diligence firms, issuers, and law firms, to develop uniform best practice testing standards for performing due diligence on QM loans. Discussion topics included the documentation of the consider requirement of the revised QM rules.

In its early meetings, the participants in the task force confirmed that creditors have not uniformly developed written policies and procedures documenting the consider requirement. Participants have focused more on the creditor’s actual documentation of income, assets, and debt in individual loan files they believe would demonstrate substantive compliance with the underwriting requirements of the revised rules.

At this early juncture (compliance with the revised rule became mandatory in October 2022), it may be premature for secondary market purchasers of residential mortgage loans to cite their sellers or servicers for substantive noncompliance with the revised QM rules if these entities have not developed robust written policies and procedures that show how they consider income, assets, and debt.

It may be more fruitful for the secondary market to focus on the actual file documentation itself and determine whether the creditors have satisfied the consider requirement by properly underwriting the loans in accordance with the requisite elements and documenting the file with the appropriate worksheets and other written evidence.

The creditor’s failure to maintain the general policies and procedures does not necessarily render the subject loans non-QM if the loan files are adequately underwritten and amply documented. Compliance with the new QM rules and the documentation of the consider requirement is still at a rudimentary stage, and the secondary market will have to periodically revisit the way it audits mortgage loans.

Correspondent Lending on the Rise: Increasing Gains Point to Increasing Risk

A&B Abstract:

According to a recent edition of Inside Mortgage Finance, correspondent lending is the only lending channel that posted gains in Q3 2023. While it is always nice to see gains, it should also serve as a reminder to take a fresh look at your risk management program to ensure it is calibrated to address the unique risks of correspondent lending.

To level set, we define a correspondent lender as one who performs the activities necessary to originate a mortgage loan, i.e., takes and processes applications, provides required disclosures, and often, but not always, underwrites loans and makes the final credit decision. The correspondent lender closes loans in its name, funds the loans (often through a warehouse line of credit), and sells them to an investor by prior agreement.

The risk that correspondent misconduct poses to an investor falls broadly into three categories:  legal risk, reputational risk, and credit risk. Legal risk refers to the risk that the investor will be subject to legal claims based on the misconduct of the correspondent, or that the correspondent misconduct somehow will impair the investor’s rights under the loan agreements. Reputational risk refers to the risk of damage to the company’s reputation among investors, regulators, the public at large, counterparties, etc. Credit risk refers to the risk that correspondents will fail to conform to the investor’s underwriting guidelines or credit standards. We include fraud within this category.

In this post, we provide, in our assessment, an overview of the types of claims that pose the greatest legal risks, as well as best practices to mitigate such risks.

Theories of Liability on Assignees

The following laws and/or legal theories, in our assessment, pose the greatest risk of either vicarious liability or economic risk to assignees for the misconduct of correspondents:

  • Holder in Due Course:  Under the Uniform Commercial Code, if an assignee or “holder” of a mortgage loan rises to the level of a Holder in Due Course, it can enforce the borrower’s obligations notwithstanding certain defenses to repayment or claims in recoupment that the borrower may have against the original payee. If Holder in Due Course status is never attained or is lost, the purchaser of a mortgage loan will be subject to certain defenses to payment and claims in recoupment that the mortgagor may have against the original payee.
  • Truth-in-Lending Act (TILA): An assignee may be exposed to civil liability for a TILA violation that is apparent on the face of the disclosure statement.  In addition, for certain violations of TILA, a consumer may have an extended right to rescind a loan for up to three years from consummation. The consumer may exercise this right against an assignee. Moreover, amendments to TILA pursuant to the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”) expand the liability of assignees in connection with certain TILA violations, including violations relating to the TILA-RESPA Integrated Disclosure or TILA’s ability to repay, loan originator compensation, and anti-steering provisions.
  • Home Ownership and Equity Protection Act (“HOEPA”) / Section 32 “High Cost” Loans: Subject to certain exceptions, an assignee of a HOEPA loan is subject to all claims and defenses with respect to the mortgage that the consumer could assert against the original creditor.
  • Equal Credit Opportunity Act (“ECOA”): ECOA’s broad definition of “creditor” may place liability on assignees for the statute’s anti-discrimination and disclosure requirements where the assignee “regularly participates” in the credit decision.
  • State and Local Anti-Predatory Lending Laws: A number of states have passed anti-predatory lending laws that contain assignee liability provisions similar to those found in HOEPA with triggers that may differ from HOEPA. An assignee of a loan covered by such a state law will be subject to certain claims and defenses with respect to the mortgage that the consumer could assert against the original creditor.
  • Aiding and Abetting: Under the common law theory of aiding and abetting, loan purchasers and other parties can be held responsible for the acts of the lender that originated the loan, particularly if they (i) knew that the originating lender was engaged in “predatory” practices, and (ii) gave substantial assistance or encouragement to the originating lender. The Dodd-Frank Act also imposes aiding and abetting liability.
  • State and Federal Defenses to Foreclosure: Certain state laws expressly provide that a violation of the law may be asserted by a borrower as a defense against foreclosure, either as a bar to foreclosure or as a claim for recoupment or setoff. In addition, courts may invoke UDAP or UDAAP statutes or equitable remedies to prevent an originator or assignee from foreclosing on a loan that the court views as abusive or unfair.  Finally, as noted above, violations of TILA’s ability to repay, loan originator compensation, and anti-steering provisions may also be raised defensively to delay or prevent foreclosure.
  • State Licensing and Usury Laws: Certain state laws provide for the impairment of the mortgage loan if the originating lender was not properly licensed or the loan exceeded state usury limits.
  • Challenges to Ownership: Plaintiffs are increasingly raising concerns about investors’ or servicers’ authority to foreclose when the investor cannot produce original loan documents or otherwise verify ownership of the loan, although this risk is lessened when an investor acquires the loan directly from the original creditor.

The list above reflects the laws and legal theories that are most commonly used to impose liability on assignees and/or that we believe will be of increasing prominence going forward. There are other federal and state laws that might also expose assignees to liability, either expressly or by implication. There are also claims against an assignee based on the assignee’s own misconduct in connection with the origination of the loan. An example of a direct claim against an assignee related to loan origination would be a claim under fair lending laws that the underwriting criteria that the assignee established and provided to its correspondents violated fair lending laws. Of course, there are plenty of other risks that the assignee may need to manage, such as the risk of loss from fraud perpetrated against the assignee by borrowers or correspondents; the risk of correspondents’ non-compliance with the investor’s underwriting criteria; or the risk of liability from servicing violations.

Best Practices to Mitigate Correspondent Lending Risk

A financial institution should consider adopting the following best practices to mitigate against the legal, reputational, and credit risks presented by correspondent lending relationships, to the extent the institution has not done so already:

  • Ensure that its compliance management system reflects the legal and regulatory requirements relevant to correspondent lending activity and the risks presented by correspondent lending relationships, that the company has in place monitoring, testing, and audit processes commensurate with such risks, and that the company’s compliance training includes material relevant to the management of correspondent lending relationships and their associated risks.
  • Prepare written policies and procedures that explain comprehensively the steps the company takes to minimize the risk that it will be subjected to liability for violations by correspondents.
  • Conduct due diligence reviews to ensure that correspondents are properly licensed, particularly in those states in which the failure to be licensed could impair the enforceability of the loan.
  • Conduct company-level due diligence reviews of correspondents to assess whether the correspondent is willing and able to comply with applicable laws and avoid engaging in practices that might be considered predatory. This might involve reviewing the company’s policies and procedures, examination reports prepared by regulators (to the extent that such reports are not confidential), repurchase demands made against the correspondent, internal quality control reports, complaints received from consumers and regulators, and information about litigation in which the company is involved.
  • Interview correspondents regarding their policies and procedures designed to prevent predatory sales tactics and other predatory lending practices.
  • Question correspondents regarding the measures they use to oversee and monitor the brokers with whom they do business.
  • Perform loan-level reviews to ensure that loans (1) do not exceed HOEPA and state/local high cost loan law thresholds, (2) exceed state usury limits (particularly in states in which the failure to comply can impair the enforceability of the loan), (3) either are not covered by state or local anti-predatory lending laws or comply with the applicable restrictions under those laws, (4) comply with state usury restrictions, and (5) do not contain other illegal terms or predatory features.

Takeaway

With correspondent lending volume on the rise, now is a good time to review and possibly refresh your risk management approach to ensure it is commensurate with the risks presented by correspondent lending relationships.