The last remaining provisions of the amendments to the New York Department of Financial Services’ (DFS) cybersecurity regulation called Part 500 came into effect Nov. 1, 2025.
Continue Reading NYDFS Final Cybersecurity Rules – MFA, Asset Inventory, and Third-Party Risk
On Oct. 29, 2025, the Consumer Financial Protection Bureau (CFPB) withdrew its proposed rule that would have required certain nonbank financial companies subject to its supervisory jurisdiction to submit annual reports about their use of terms and conditions that attempt to waive or limit consumer rights and protections.
Continue Reading CFPB Withdraws ‘Fine Print’ Rule
Earlier this year, the CFPB announced a significant shift in its supervisory and enforcement priorities, returning its focus to depository institutions, targeting clear consumer fraud, and prioritizing mortgages, data furnishing, and debt collection. As a result, the agency has reduced the number of exams it conducts and has launched comprehensive rulemakings to reassess its larger participant rules.
Continue Reading CFPB Proposes to Narrow Risk-Based Supervision
Open banking frameworks are transforming how consumer financial data is shared and utilized, thanks to collaboration among financial institutions, technology companies, and regulators. With the CFPB revisiting the 2024 Final Rule under the Dodd-Frank Act, stakeholders are weighing in on the future of consumer data access and financial innovation.
Continue Reading CFPB Reopens Its Open Banking Rule for Comment