In Largest Known Data Breach Conspiracy, Five Suspects Indicted in New Jersey

DrinkerBiddle

On July 25, 2013, the United States Attorney for the District of New Jersey announced indictments against five men alleging their participation in a global hacking and data breach scheme in which more than 160 million American and foreign credit card numbers were stolen from corporate victims, including retailers, financial institutions, payment processing firms, an airline, and NASDAQ.  The scheme is the largest of its kind ever prosecuted in the United States.

The Second Superseding Indictment alleges the defendants (four Russian nationals and one Ukrainian national) and other uncharged co-conspirators targeted corporate victims’ networks using “SQL [Structured Query Language] Injection Attacks,” meaning the hackers identified vulnerabilities in their victims’ databases and exploited those weaknesses to penetrate the networks.  Once the defendants had access to the networks, they used malware to create “back doors” to allow them continued access, and used their access to install “sniffers,” programs designed to identify, gather and steal data.

Once the defendants obtained the credit card information, they allegedly sold it to resellers all over the world, who in turn sold the information through online forums or directly to individuals and organizations.  The ultimate purchasers encoded the stolen information on blank cards and used those cards to make purchases or withdraw cash from ATMs.

The defendants allegedly used a number of methods to evade detection.  They used web-hosting services provided by one of the defendants, who unlike traditional internet service providers, did not keep records of users’ activities or share information with law enforcement.  The defendants also communicated through private and encrypted communication channels and tried to meet in person.  They also changed the settings on the victims’ networks in order to disable security mechanisms and used malware to circumvent security software.

Four of the defendants are charged with unauthorized access to computers (18 U.S.C. §§ 1030(a)(2)(C) and (c)(2)(B)(i)) and wire fraud (18 U.S.C. § 1343).  All of the defendants are charged with conspiracy to commit these crimes.

Two of the defendants have been arrested, with one in federal custody and the other awaiting an extradition hearing.  The other three defendants, two of whom have been charged in connection with hacking schemes, remain at large.

This conspiracy is noteworthy for its massive scale, and for the patience the hackers demonstrated in siphoning data from the networks.  The U.S. Attorney “conservatively” estimates more than 160 million credit card numbers were compromised in the attacks, and alleges that the hackers had access to many victims’ computer networks for more than a year.  Many prominent retailers were targets, including convenience store giant 7-Eleven, Inc.; multi-national French retailer Carrefour, S.A.; American department store chain JCPenney, Inc.; New England supermarket chain Hannaford Brothers Co.; and apparel retailer Wet Seal, Inc.  Payment processors were also heavily targeted, including one of the world’s largest credit card processing companies, Heartland Payment Systems, Inc., as well as European payment processor Commidea Ltd.; Euronet, Global Payment Systems and Ingenicard US, Inc. The hackers also targeted financial institutions such as Dexia Bank of Belgium, “Bank A” of the United Arab Emirates; the NASDAQ electronic securities exchange; and JetBlue Airways.  Damages are difficult to estimate with precision, but they total several hundred million dollars at least.  Just three of the corporate victims suffered losses totaling more than $300 million.

Article By:

of

Consumer Financial Services Basics 2013 – September 30 – October 01, 2013

The National Law Review is pleased to bring you information about the upcoming  Consumer Financial Services Basics 2013.

CFSB Sept 30 2013

When

September 30 – October 01, 2013

Where

  • University of Maryland
  • Francis King Carey School of Law
  • 500 W Baltimore St
  • Baltimore, MD 21201-1701
  • United States of America

Facing the most comprehensive revision of federal consumer financial services (CFS) law in 75 years, even experienced consumer finance lawyers might feel it is time to get back in the classroom. This live meeting is designed to expose practitioners to key areas of consumer financial services law, whether you need a primer or a refresher.

It is time to take a step back and think through some of these complex issues with a faculty that combines decades of practical experience with law school analysis. The classroom approach is used to review the background, assess the current policy factors, step into the shoes of regulators, and develop an approach that can be used to interpret and evaluate the scores of laws and regulations that affect your clients.

Federal Trade Commission (FTC) Settles with HTC America Over Charges it Failed to Secure Smartphone Software

RaymondBannerMED

Smartphone manufacturer HTC agreed in February to settle Federal Trade Commission (FTC) charges that the company failed to take reasonable steps to secure software it developed for its mobile devices including smartphones and tablet computers. In its complaint, the FTC charged HTC with violations of the Federal Trade Commission Act.  On July 2 the FTC approved a final order settling these charges.

trade FTC smartphone HTC

The FTC alleged HTC failed to employ reasonable security measures in its software which led to the potential exposure of consumer’s sensitive information. Specifically, the FTC alleged HTC failed to implement adequate privacy and security guidance or training for engineering staff, failed to follow well-known and commonly accepted secure programming practices which would have ensured that applications only had access to users’ information with their consent. Further, the FTC alleged the security flaws exposed consumers to malware which could steal their personal information stored on the device, the user’s geolocation information and the contents of the user’s text messages.

HTC is a manufacturer of smartphones but it also installs its own proprietary software on each device. It is this software that the FTC targeted. While HTC smartphones run Google’s Android operating system, the HTC software allegedly introduced significant vulnerabilities which circumvented some of Android’s security measures.

As part of the settlement consent order, HTC agreed to issue security patches to eliminate the vulnerabilities. HTC also agreed to establish a comprehensive security program to address the security risks identified by the FTC and to protect the security and confidentiality of consumer information stored on or transmitted through a HTC device. HTC further agreed to hire a third party to evaluate its data and privacy security program and to issue reports every two years for the consent order’s 20 year term. The implication of the FTC’s policy makes it clear that companies must affirmatively address both privacy and data security issues in their custom applications and software for consumer use.

Consumer Financial Services Basics 2013 – September 30 – October 01, 2013

The National Law Review is pleased to bring you information about the upcoming  Consumer Financial Services Basics 2013.

CFSB Sept 30 2013

When

September 30 – October 01, 2013

Where

  • University of Maryland
  • Francis King Carey School of Law
  • 500 W Baltimore St
  • Baltimore, MD 21201-1701
  • United States of America

Facing the most comprehensive revision of federal consumer financial services (CFS) law in 75 years, even experienced consumer finance lawyers might feel it is time to get back in the classroom. This live meeting is designed to expose practitioners to key areas of consumer financial services law, whether you need a primer or a refresher.

It is time to take a step back and think through some of these complex issues with a faculty that combines decades of practical experience with law school analysis. The classroom approach is used to review the background, assess the current policy factors, step into the shoes of regulators, and develop an approach that can be used to interpret and evaluate the scores of laws and regulations that affect your clients.

Consumer Financial Services Basics 2013 – September 30 – October 01, 2013

The National Law Review is pleased to bring you information about the upcoming  Consumer Financial Services Basics 2013.

CFSB Sept 30 2013

When

September 30 – October 01, 2013

Where

  • University of Maryland
  • Francis King Carey School of Law
  • 500 W Baltimore St
  • Baltimore, MD 21201-1701
  • United States of America

Facing the most comprehensive revision of federal consumer financial services (CFS) law in 75 years, even experienced consumer finance lawyers might feel it is time to get back in the classroom. This live meeting is designed to expose practitioners to key areas of consumer financial services law, whether you need a primer or a refresher.

It is time to take a step back and think through some of these complex issues with a faculty that combines decades of practical experience with law school analysis. The classroom approach is used to review the background, assess the current policy factors, step into the shoes of regulators, and develop an approach that can be used to interpret and evaluate the scores of laws and regulations that affect your clients.

Recent Consumer Financial Protection Bureau (CFPB) Developments

Rules Creating Exemptions to the ATR Rule Finalized

The Consumer Financial Protection Bureau (CFPB) recently finalized rules that modified and created specific exemptions to the CFPB’s Ability-to-Repay Rule. The rules have three main effects.

  1. They exempt certain community development lenders and nonprofits—specifically those that lend only to low- and moderate-income consumers, and make 200 or fewer such loans per year—from the ATR Rule.
  2. They facilitate lending by community banks and credit unions that have less than $2 billion in assets, and make 500 or fewer first lien mortgages per year.
  3. They no longer require that compensation paid by a broker or lender to a loan originator counts towards the Dodd-Frank points and fees limits.

These changes to the ATR Rule will take effect on January 10, 2014.

Effective Date of Prohibitions on Financing Credit Insurance Premiums Delayed

The CFPB has delayed the effective date of a regulation prohibiting creditors from financing credit insurance premiums secured by a dwelling. The regulation, previously effective June 1, 2013, has been delayed until January 10, 2014. The CFPB wanted to clarify how the rule applied to transactions other than those where a lump-sum premium was added to the loan amount at closing.

CFBP Seeking Comments on Possible Revisions to the Civil Penalty Rule

The CFPB is seeking comments on possible revisions to the Consumer Financial Civil Penalty Fund Rule. The CFBP uses this fund, established by the Dodd-Frank Act, to deposit civil penalties obtained in judicial or administrative actions under federal consumer financial laws. The fund can be used to pay victims of violations of federal consumer financial laws, or, if victims cannot be found, to educate consumers and provide financial literacy programs. The rule articulates the CFPB’s interpretations of what kind of victim payments are appropriate and how to otherwise allocate the funds. Comments are due on July 8, 2013.

White Paper Concerning Overdraft Practice Concerns Published

The CFPB published a white paper concerning overdraft practice concerns and institutional practices. The paper finds that a large portion of consumer checking account revenue continues to come from overdraft fees. Furthermore, those consumers who choose, let alone use, overdraft coverage have higher costs and a higher chance of having their checking accounts involuntary closed. No action, other than further research, is currently planned.

CFPB Launches New Mortgage Rule Implementation Page

The new mortgage rule implementation page is part of an effort to help lenders comply with the Dodd-Frank Act reforms and CFPB rules. Debtors and potential debtors can find potentially useful information, including quick reference charts, video guides, manuals, etc.—related to the new 2013 mortgage rules. While the CFPB’s intention for the site is to help understand the rules, the materials are not a substitute for the rules themselves.

Ryan C. Fairchild, summer law clerk at Poyner Spruill, co-authored this article.

Article By:

 of

The Consumer Financial Protection Bureau, Week in Review: June 10 – June 14, 2013

GT Law

CFPB Launches Regulatory Implementation Page

In an effort to streamline resources and better assist financial institutions implementing the many new rules and policies promulgated by the CFPB, the CFPB announced the launch of its “Regulatory Implementation” webpage, available here. The page is a one-stop shop for financial institutions looking for assistance in understanding some of the more salient differences and requirements of the rules. In addition to a number of quick-reference guides, the page also contains compliance guides for the following rules: (i) Ability to Repay/Qualified Mortgage; (ii) 2013 HOEPA Rule; (iii) Loan Originator Compensation; (iv) ECOA Valuations; (v) TILA HPML Appraisals; (vi) Escrows; and (vii) TILA and RESPA Servicing.

CFPB Examines Impact of Overdraft Practices on Consumers

On June 11, 2013, the CFPB released its “CFPB Study of Overdraft Programs” (the Report), which is available here. The Report was based upon (i) responses the CFPB received to a request for information published in the Federal Register in February 2012, and (ii) aggregate, institution-level information data and random samples of consumer checking accounts. Through the inquiry, the CFPB determined that overdraft programs are costly to consumers, provide substantial sources of checking account revenue for financial institutions, and vary widely across financial institutions.

The Report noted that overdraft practices employed by financial institutions are frequently very complex. Not only do the fees charged for overdraft protection vary, but many other differences exist throughout the industry, including: the number of times a consumer can be charged; whether there are caps on such charges; the amount of such caps; the scope of overdraft protection; and even the order in which transactions are posted. Each of these factors can play a significant role in determining the fees consumers will face. Accordingly, the CFPB’s report raises concerns about consumers’ ability to understand, navigate and anticipate fees.

In light of the Report’s findings, the CFPB has announced its intention to engage in further review of account-level data to better understand how differences in practices affect consumers.

CFPB Proposes New Redress System for Victims of Unlawful Activities

Under Section 1055(a) of the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, the CFPB may obtain various types of monetary relief, such as restitution, refunds and damages, in both judicial and administrative proceedings. The CFPB collectively refers to such relief as “redress”, and can be required to receive such redress from a defendant and then distribute it to victims of unlawful activities. In order to better assist this process, which is known as “Bureau-Administered Redress,” the CFPB is proposing a new system of records that will enable the CFPB to manage distributions to consumers.

Specifically, the new system will enable the CFPB to: (i) track the collection, allocation and distribution of funds in the Civil Penalty Fund and redress monies; (ii) identify and locate victims who may receive such payments; (iii) determine the amounts that the CFPB will distribute to such victims; (iv) maintain associated account and financial information; and (v) develop reports to applicable tax officials regarding such payments.

The proposal, which is available here, states that any comments on the proposed system must be received no later than July 11, 2013. The new system will become effective on July 22, 2013, unless comments are received that result in a contrary determination.

CFPB Releases New Training Module to Combat Financial Exploitation of Older Americans

On June 12, 2013, the CFPB along with the Federal Deposit Insurance Corporation (FDIC), released a tool called “Money Smart for Older Adults.” The purpose of the module is to assist older adults (age 62 and older), as well as their caregivers, in avoiding and preventing financial exploitation. In addition, it provides information to educate consumers about planning for a secure financial future and making informed financial decisions.

The module, which consists of a scripted instructor guide, a participant/resource guide and Power Point slides, has been designed to be presented and administered by financial institution representatives, adult protective services agencies, senior advocacy organizations, law enforcement, and similar organizations and agencies.  The module is available, free of charge, on the FDIC website. Click here to view.

CFPB Assistant Director Tells Nonbanks to Quickly Implement Compliance Management Systems

During the American Bankers Association’s Regulatory Compliance Conference on June 12, 2013, Peggy Twohig, the CFPB’s Assistant Director for Supervision Policy, urged nonbank entities to implement compliance management systems without delay. She specifically pointed to many payday lenders, consumer reporting agencies, mortgage lenders and servicers, student lenders and debt collectors that have yet to implement these compliance management systems.

Article By:

of

New Data Breach Class Action has Two Million Plaintiffs

RaymondBannerMED

Cyber breaches resulting in the release of personal identifiable information (PII) are increasingly common and now we are starting to see class action lawsuits filed as a result. In what will likely be the beginning of a wave of lawsuits filed as a result of cyber breaches, Schnucks Markets, operator of 100 supermarkets across the Midwest, recently removed a class action lawsuit filed against it to federal court stemming from a data breach that occurred in March in which 2.4 million credit card numbers were stolen.

The Class action complaint alleges Schnucks failed to properly and adequately safeguard its customer’s personal and financial data. In addition to common law negligence and disclosure, the plaintiffs allege a violation of the Illinois Personal Information Protection Act which requires a data collector of personal information to notify individuals in the most expedient manner possible and without unreasonable delay. The complaint alleges Schnucks waited over two weeks to notify its customers and then did so only through a press release as opposed to providing actual notice to individual consumers. Apparently Schnucks struggled to find the source of the breach and this delay may have continued to expose the PII of people who shopped at its stores.

cybercrime graphicSchnuck’s notice of removal to federal court states the grounds for removal include a class size of more than 100 people and damages at issue are greater than $5 million. Schnucks also explains that the data breach was the result of criminals hacking into its electronic payment systems at 23 stores. Further, during the relevant period, 1.6 million credit or debit card transactions took place at these stores. Schnucks calculates that 500,000 unique credit or debit cards were involved thus the putative class has at least 500,000 members.

Damages alleged by the plaintiffs include having their credit card data compromised, incurring numerous hours cancelling their compromised cards, activating replacement cards and re-establishing automatic withdrawal payment authorizations as well as other economic and non-economic harm. Given that data breaches are becoming increasingly common it is likely that there will be more lawsuits filed similar to Schnucks in the near future. Legal counsel experienced in cyber risk and insurance can assist retailers and insurance companies with handling such problems as they arise.

FTC v. Actavis, Inc.: Supreme Court Rules That Reverse Patent Settlements May Violate Antitrust Laws

Womble Carlyle

On April 29, 2013, the Supreme Court declined to review a decision that had created uncertainty as to when a manufacturer’s customer loyalty program may violate antitrust laws. Most circuits considering the issue have found that companies can use loyalty programs or long-term agreements, as long as the rebates do not price the product below cost. The Third Circuit, however, found that a manufacturer’s customer loyalty program amounted to an unlawful “de facto exclusive dealing contract,” despite the above-cost price of the product. The Supreme Court’s decision to allow the Third Circuit opinion to stand raises many questions as to when manufacturers may use incentive programs and which legal standard will be used to analyze these agreements. Regardless of where a company is located, if the company’s products are sold within the Third Circuit (Pennsylvania, New Jersey, Delaware and the U.S. Virgin Islands), then that company may be impacted by this decision.

The case of ZF Meritor, LLC v. Eaton Corp., 696 F.3d 254 (3d Cir. 2012) cert. denied, ___ U.S. __, 2013 WL 673880 (U.S. Apr. 29, 2013), involved two manufacturers of heavy-duty truck transmissions. The defendant, a leading supplier of these transmissions in North America, signed long-term agreements with its customers. Those agreements provided incentives to its customers, offering rebates to those who purchased a specified percentage of their parts from the defendant manufacturer. The plaintiff, a competitor in the heavy-duty transmission market, brought suit, claiming that the defendant’s long-term agreements constituted illegal exclusive dealing contracts. After trial, a jury found that the agreements stifled competition and violated antitrust laws. The defendant sought to overturn the jury verdict, arguing that its agreements were lawful, because it priced its transmissions above cost. The U.S. District Court for the District of Delaware upheld the jury verdict, however, finding that there was sufficient evidence to conclude that defendant’s conduct unlawfully foreclosed competition. Defendant appealed to the Third Circuit.

On appeal, the defendant urged the Third Circuit to follow the First, Second, Sixth, Eighth, and Ninth Circuits, which apply a “price-cost test” when analyzing long-term agreements which offer above-cost rebates. Under the “price-cost test,” a company is not engaging in anticompetitive conduct if it prices its products above cost. Instead, the Third Circuit applied the “rule of reason” test and found that the customer loyalty program constituted a “de facto exclusive dealing arrangement.” Under the rule of reason, “exclusive dealing arrangements can exclude equally efficient (or potentially equally efficient) rivals, and thereby harm competition, irrespective of below-cost pricing.” Therefore, the Third Circuit upheld the District Court jury verdict, stating that defendant’s  “conduct unlawfully foreclosed a substantial share of the HD transmission market, which would otherwise have been available for rivals.” The defendant then appealed to the Supreme Court, which declined to hear the case, allowing the Third Circuit’s decision to stand.

In refusing to consider the Third Circuit’s decision, the Supreme Court has failed to resolve a conflict in the circuits as to how long-term agreements containing rebates or other incentives will be analyzed by the courts. This conflict removes the predictability of a single “price-cost” standard applied across all circuits and creates uncertainty for manufacturers who wish to offer loyalty programs to their customers. In the future, manufacturers hoping to offer such programs may want to ensure that their agreements can withstand both the price-cost test and rule of reason analysis.

Financial Services Legislative and Regulatory Update – Week of June 10, 2013

Mintz Logo

Leading the Past Week

And the beat goes on… Another week with the White House dealing with another issue, this time news that the national security apparatus is collecting and combing through telephone record metadata.  The widespread revelation about a data mining program that would make any hedge fund quant jealous drowned out more positive news of the week, including that the U.S. recovery continues its sluggish, yet positive pace with 175,000 jobs added in May.

And in an interesting comparison, as noted by the extraordinary team at Davis Polk, while the agencies were silent during the Month of May, and did not announce any new implementations of the Dodd-Frank Act, last week, three major implications of the implementation were announced.  First, the SEC publicly released its much anticipated and long awaited money market mutual fund rules.  Second, the Fed announced an almost equally anticipate interim final “push out” rule that provided significant relief to foreign-based banks with operations in the United States.  Finally, the FSOC made its first round of non-bank systemically important financial institutions (“SIFIs”) designations.

Legislative Branch

Senate

As Administration Announces New Iran Sanctions, Senate Banking Members Skeptical of their Effectiveness

On June 4th, the Senate Banking Committee held a hearing to review sanctions against Iran. Witnesses and lawmakers were split regarding the efficacy of the sanctions, some arguing that their effectiveness has been proved by Iran’s continued inability to fund nuclear enrichment and other arguing that the sanctions have not had the desired result of fundamentally changing the governance of the country. Specifically, Ranking Member Mike Crapo (R-ID) and Senators Bob Corker (R-TN), Bob Menendez (D-NJ), and Chuck Schumer (D-NY) all expressed concerns that the sanctions have not measurably changed Iran’s behavior. Witnesses included: David Cohen, Under Secretary for Terrorism and Financial Intelligence for the Treasury; Wendy Sherman, Under Secretary for Political Affairs with the Department of State; and Eric Hirschhorn, Under Secretary for Industry and Security with the Department of Commerce. The hearing comes as the Administration announced a new set of sanctions against the country. An Executive Order released June 3rd takes aim at Iran’s currency and auto sector in addition to expanding sanctions against private business supporting the government of Iran.

Senate Finance Committee Releases Income and Business Entities Tax Reform Working Paper

On June 6th, the Senate Finance Committee released the latest in a series of options papers outlining tax reform options for individual and business income taxes and payroll taxes. The proposal outlines three options for tackling the integration of individual and corporate taxes, such as making the corporate tax a withholding tax on dividends and adjusting capital gains taxes for businesses to match the individual Code. In addition, the paper discusses ways in which to reach a long-term solution for taxing derivatives.

Senate Banking Approves Nomination to Ex-Im Bank

On June 6th, the Senate Banking Committee voted 20 to 2 in favor of Fred Hochberg to continue to head the Export-Import Bank. Senator Tom Coburn (R-OK) and Senator Patrick Toomey (R-PA) both voted against the nomination. Hochberg’s nomination now moves to the full Senate where, though he is expected to be confirmed, he must be approved before July 20th or else the bank would lose its quorum for voting on items.  During the same executive session, the Committee approved by voice vote the National Association of Registered Agents and Brokers Reform Act of 2013 (S. 534) which would make it easier for insurance agents to sell state-regulated insurance in multiple states.

Senator Brown Calls on CFPB to Target Debt Collectors

On June 4th, Senator Sherrod Brown (D-OH) wrote to the CFPB, urging the Bureau to enact rules to curb customer abuses by debt collectors. In a statement accompanying the letter, Brown, Chairman of the Senate Banking Subcommittee on Financial Institutions and Consumer Protection, said he intends to hold a hearing in the next month which will shine a light on bad practices and consumer abuses in the industry. The Dodd-Frank Act gives the CFPB authority to enforce and enact rules under the Fair Debt Collection Practices Act (FDCPA). Brown’s letter urged Director Cordray to pursue debt collectors as soon as possible, as the Bureau would lose its oversight authority in this space should Cordray’s nomination expire and a director not be in place.

Senate Banking Committee To Consider Flood Insurance As Soon As July

In remarks made on June 6th, Chairman of the Banking Committee Tim Johnson (D-SD) said the panel will hold hearings as soon as July to consider national flood insurance affordability. The announcement comes as a number of lawmakers express concerns that rate increases in the 2012 reauthorization are not affordable.

Senate Banking Subcommittee Looks into the State of the Middle Class

On June 6th, the Senate Banking Subcommittee on Economic Policy held a hearing titled “The State of the American Dream: Economic Policy and the Future of the Middle Class.” It was Senator Jeff Merkley’s first hearing as Chair of the Subcommittee, he said he wanted to feature witnesses whose voices were not normally heard in committee hearings and public policy debates. The witnesses included: Ms. Diedre Melson; Mr. John Cox; and Ms. Pamela Thatcher, who were subjects of the documentary movie American Winter; Dr. Atif Mian, Professor of Economics and Public Policy at Princeton University; Ms. Amy Traub, Senior Policy Analyst for Demos; Mr. Nick Hanauer with Second Avenue Partners; and Mr. Steve Hill, Executive Director of Nevada Governor’s Office of Economic Development.

House of Representatives

House to Consider Multiple Financial Services Bills Next Week

Next week the House is set to consider and vote on four separate bills dealing with the Financial Industry.  Three of the these bills, The Business Risk Mitigation and Price Stabilization Act (H.R. 634), The Reverse Mortgage Stabilization Act (H.R. 2167), the Swap Data Repository and Clearing House Indemnification Correction Act (H.R. 742) will be brought up on the suspension calendar, which is generally used for non-controversial measures.  The other bill, the Swap Jurisdiction Certainty Act (H.R. 1256) will be brought forward under a rule, which may allow for amendments to the bill that directs the SEC and CFTC to issue joint rules on swaps and security-based international swaps.  All are expected to pass the House.

Financial Services Subcommittee Examines Role of Proxy Advisory Firms

On June 5th, the House Financial Services Subcommittee on Capital Markets and Government Sponsored Enterprises met to examine the growing reliance on proxy advisory firms in proxy solicitations and corporate governance. Specifically, the Subcommittee sought to investigate the effect proxy advisory firms have on corporate governance standards, the market power of these firms, potential conflicts of interest, and SEC proposals seeking to modernize corporate governance standards. During the hearing Subcommittee Chairman Scott Garrett (R-NJ) voiced concern that institutions are overly reliant on proxy advisory firms in determining how to cast shareholder votes and questioned whether conflicts of interest and voting recommendations based on one-size-fits all policies affect shareholder value.

Witnesses at the hearing included: former SEC Chairman Harvey Pitt,  Timothy Bartl, President of the Center on Executive Compensation, Niels Holch, Executive Director of Shareholder Communications Coalition, Michael McCauley, Senior Offices for Investment Programs and Governance of the Florida State Board of Administration, Jeffrey Morgan, President and CEO of the National Investor Relations Institute, Darla Stuckey, Senior Vice President of the Society of Corporate Secretaries & Governance Professionals, and Lynn Turner, Managing Director of LitiNomics. The hearing comes as SEC Commission Daniel Gallagher recognized that lawmakers and regulators need to re-examine the role of advisory firms in the corporate governance matters as “no one should be able to outsource their fiduciary duties.”

Lawmakers Introduce Legislation Targeting Foreign Cyber Criminals

On June 6th, House Intelligence Committee Chairman Mike Rogers (R-MI) along with Representative Tim Ryan (D-OH) and Senator Ron Johnson (D-WI) introduced legislation that would impose visa and financial penalties on foreign cyber criminals who target American businesses. Specifically, the measure would deny foreign agents engaged in cybercrime from apply for visas or, if they reside in the U.S., would revoke visas and freeze financial assets. The bill also calls for the Department of Justice to bring more economic espionage criminal cases against offending foreign actors.

Online Gambling Legislation Introduced

On June 6th, Representative Peter King (R-NY) introduced legislation to create broad federal Internet gambling regulations and allow all online gambling with the exception of betting on sports and where Indian tribes opt not to participate. The legislation would also establish an office of Internet gaming housed within the Treasury. Following a 2011 ruling by the Justice Department that the 1961 Wire Act does not ban online gambling, several states, including Delaware, New Jersey, and Nevada, have moved forward with creating intra-state online gaming operations.  The movement at the state level has taken some of the momentum out of federal legalization efforts.

Executive Branch

Treasury

FSOC Selects First Group of Non-Banks to be SIFIs

On June 3rd, the Financial Stability Oversight Council (FSOC) voted on the preliminary list of systemically important financial institutions (SIFIs) which will be subject to additional regulation by the Fed. This additional regulation will include new stress tests to monitor stability, additional capital requirements, and the need to create living wills in the event of resolution. While the Council did not release the names or the number of non-banks that have been selected, several firms have announced that they have received notice from the FSOC regarding their designation, including GE Capital, Prudential Financial, and AIG. Now that designations have been made, companies selected will have 30 days to request a hearing to contest the designation. While Secretary Jack Lew called the designations an “important step forward,” Chairman of the House Financial Services Committee Jeb Hensarling criticized the move, saying perpetuating non-banks as “too big to fail” will only put taxpayers on the hook for another bailout.

Federal Reserve

Fed Approves Final Rule Clarifying Treatment of Foreign Banks Under Push-Out Rule

On June 5th, the Fed approved an interim final rule clarifying the treatment of uninsured U.S. branches of foreign banks under the Dodd-Frank Act swaps push-out measure. Dodd-Frank calls for banks to separate certain swap trading activities from divisions that are backed by federal deposit insurance or which have access to the Fed discount window. Under the clarification, the Fed states uninsured U.S. branches of foreign banks will be treated as insured depository institutions and that entities covered by the rule, including U.S. branches of foreign banks, can apply for a transition period of up to 24 months to comply with the push out provisions. The interim final rule also states that state member banks and uninsured state branches of foreign banks may apply for the transition period. The Institute of International Bankers, which represents international banks operating in the U.S., praised the Fed for offering clarity on a “widely acknowledged drafting error in the original legislation.”

Fed Vice Chairman Appears to Support Stronger Capital Rules for Large Banks

Speaking in Shanghai last week, Fed Vice Chairman Janet Yellen said that it may be necessary for regulators to impose capital requirements even higher than those set forth in the Basel III agreement. Agreeing with Fed Governors Daniel Tarullo and Jeremy Stein, Yellen said “fully offsetting any remaining “too big to fail” subsidies and forcing full internalization of the social costs of a SIFI failure may require either a steeper capital surcharge curve or some other mechanism for requiring that additional capital be held by firms that potentially pose the greatest risks to financial stability.” To that end, Yellen noted that the Fed and FDIC are “considering the merits” of requiring systemically significant firms to hold minimum levels of long-term unsecured debt to absorb losses and support orderly liquidation. Yellen who, is seen by many as the frontrunner for Fed Chairman following Bernanke’s term, is starting to generate a lot more attention as we come closer to the end of Bernanke’s reign.  However, she is not the only member of the Fed espousing this policy.  In a speech later in the week, Philadelphia Fed President Charles Plosser echoed Yellen’s sentiments, saying Dodd-Frank and other efforts to end “too big to fail” may not be “sufficient.” Plosser argued that current capital requirements should be made more stringent but also simpler by relying on a leverage ratio rather than the current practice of risk weighting.

SEC

SEC Proposes Long-Anticipated Money Market Mutual Fund Overhaul

On June 5th, the SEC released a proposal which would change the way the $2.6 trillion money market mutual fund industry is regulated. After months of internal disagreement within the SEC, the Commission voted unanimously to propose the plan. The goal of the proposal is to avoid future runs on the market, like that which occurred during the financial crisis, in tandem with ensuring that the industry still function as a viable investment vehicle. The Commission’s proposal sets out two alternative options for reform which could be enacted alone or in combination. The first would require institutional prime money market funds to operate with a floating net asset value (NAV). Notably, retail and government funds would still be allowed to operate with a fixed-NAV. The second alternative would require nongovernment funds whose liquid assets fell below 15 percent of total assets to impose a 2 percent liquidity fee on all redemptions. If this were to occur, a money market fund’s board would be permitted to suspend redemptions for up to 30 days. The proposal also calls for prompt public disclosure if a fund dips below the 15 percent weekly liquid asset threshold.

Coalition of Investment and Consumer Interests Call for Strong Uniform Fiduciary Standard

In a letter sent to the SEC on June 4th, a coalition of investment and consumer groups called on the Commission to enact a uniform fiduciary standard that would require broker-dealers and investment advisers to act in consumers’ best interest. The letter, signed by organizations such as AARP, the Consumer Federation of America, and the Investment Adviser Association, is in response to an SEC request for information (RFI) requesting input on regarding the possible extension of a fiduciary duty to broker-dealers. The groups assert that, the fiduciary standard set forth in the RFI is weak compared to current law and “seems to contemplate little more than the existing suitability standard supplemented by some conflict of interest disclosures.”

District Court Hears Challenge to SEC Critical Minerals Rule

On June 7th, the Court of Appeals for the D.C. Circuit heard a challenge brought on behalf of the American Petroleum Institute, the Chamber of Commerce, and others to the SEC’s critical minerals rule which requires companies to disclose payments made to foreign governments. Industry argues that the rule is overly burdensome and could result in proprietary information being shared with competitors. However, supporters of the rule, including Oxfam America, assert that the measure will increase transparency and help combat human rights abuses.

FDIC

FDIC Approves Non-Bank Resolution Final Rule

On June 4th, the FDIC approved a final rule establishing the criteria which will be used to determine which non-bank financial firms will be required to comply with the FDIC’s authority to liquidate large failing companies. The rule, which lays out factors used to determine if a company is “predominately engaged in financial activity,” requires companies where at least 85 percent of revenues are classified as financial in nature by the Bank Holding Company Act to comply. The FDIC’s rule closely resembles a final proposal by the Fed which established criteria for non-banks to be flagged for additional supervision under Dodd-Frank.

CFPB

CFPB Finalizes Ability-to-Repay Rule Amendments

On May 29th, the CFPB finalized rules designed to increase access to credit through exemptions and modifications to the Bureau’s ability-to-repay rule. The ability-to-repay rule, which was finalized in January 2013, requires that new mortgages comply with basic consumer protection requirements that are meant to ensure consumers do not take out loans they cannot pay back through Qualified Mortgages (QMs). In response to public and Congressional concerns about the scope of the rule, the Bureau’s finalized rules exempt certain nonprofit creditors and community-based lenders who service low- and moderate-income borrowers, facilitate lending by small creditors, banks and credit unions with less than $2 billion in assets and which make 500 or fewer mortgages loans per year, and establish how to calculate loan origination compensation. In announcing the amendments, the CFPB also delayed the effective date of provisions prohibiting creditors from financing certain credit insurance premiums in connection with certain mortgage loans. Currently, the effective date is January 10, 2014; however, the Bureau plans to solicit comment on an appropriate effective date for proposed credit insurance clarifications.

Bureau Issues Mortgage Rule Exam Guidelines

On June 4th, the CFPB issued an update to its exam procedures based on the new Truth in Lending Act (TILA) and the Equal Credit Opportunity Act (ECOA) mortgage regulations finalized in January. The guidance addresses questions about how mortgage companies will be examined such as for: setting qualification and screening standards for loan originators; prohibiting steering incentives; prohibiting “dual compensation,” protecting borrowers of higher-priced loans; prohibiting the waiver of consumer rights; prohibiting mandatory arbitration; requiring lenders to provide appraisal reports and valuations; and prohibiting single premium credit insurance.

CFPB Announced Further Study on Pre-Dispute Arbitration in Financial Products

In a notice and request for comment published on June 7th, the CFPB announced it will conduct phone surveys of credit card holders as part of its study of mandatory pre-dispute arbitration agreements. While Dodd-Frank gave the CFPB authority to ban the use of arbitration in mortgages, Section 1028(a) of the Dodd-Frank Act requires the Bureau to conduct a study before taking additional action to limit arbitration in other financial products. According to the notice, the survey will investigate “the extent of consumer awareness of dispute resolution provisions in their agreements with credit card providers” and consumers’ assessments of these tools.

International

IMF Working Paper Calls for Taxes on Large Banks to Level Playing Field, End “Too Big to Fail”

In a working paper published at the end of May, the International Monetary Fund (IMF), suggesting that large banks in advanced economies have more incentive to take risks due to cheaper funding sources, proposed taxing large banks to “extract their unfair competitive advantage.” The authors of the paper argue that such as tax would level the playing field from the perspective of competitive policy and reduce excess incentives of banks to grow, reducing the problem of “too big to fail” and increasing financial stability. Specifically, the paper found that the implicit guarantee that “too big to fail” banks will be bailed out in the event of failure or crisis can lead to a funding advantage of up to 0.8 percent a year. In related news, On June 5th, Representative Michael Capuano (D-MA) introduced legislation (H.R. 2266) which would require certain systemically important institutions to account for the financial benefit they receive as a result of the expectations on the part of shareholders, creditors, and counterparties that the government will bail them out in the event of failure.

Upcoming Hearings

On Wednesday, June 12th at 10am, in 1100 Longworth, the Trade Subcommittee of House Ways and Means Committee will hold a hearing titled “U.S.-Brazil Trade and Investment Relationship: Opportunities and Challenges.”

On Wednesday, June 12th at 10am, in 2128 Rayburn, the House Financial Services Committee will hold a hearing titled “Beyond GSEs: Examples of Successful Housing Finance Models without Explicit Government Guarantees.”

On Wednesday, June 12th at 2pm, in 2128 Rayburn, the Capital Markets and Government Sponsored Enterprises Subcommittee of House Financial Services Committee will hold a hearing on proposals intended to support capital formation.

On Thursday, June 13th at 10am, in 538 Dirksen, the Senate Banking, Housing, and Urban Affairs Committee will hold a hearing titled “Lessons Learned From the Financial Crisis Regarding Community Banks.”

On Thursday, June 13th at 10am, in 2128 Rayburn, the Monetary Policy and Trade Subcommittee of House Financial Services Committee will hold a hearing on changes to the Export-Import Bank.

On Thursday, June 13th at 1pm, in 2128 Rayburn, the Housing and Insurance Subcommittee of House Financial Services Committee will hold a hearing on international insurance issues.