Transcript Document
Bulletin 2012-03 Service Providers Presented by Ken Shim May 14, 2014 Background • April 2012 - CFPB issued Bulletin 2012-03 • Federal Reserve, OCC and FDIC issued similar guidance on vendor management prior to CFPB Bulletin 2012-03 • Bulletin was issued to clearly communicate the Bureau’s expectations for financial institutions to oversee service providers • Financial institutions will also be liable for the service providers’ non-compliance with Federal consumer financial laws Guidance Perform Due Diligence • Review the service provider’s policies & procedures • Determine the training level • Do they have adequate internal controls? • What is the scope of their monitoring? Contract with Service Providers • Contract should include clear expectations about compliance and the consequences for violating any compliance responsibilities Conduct Ongoing Monitoring • Financial institutions should establish sufficient ongoing monitoring and testing to independently assess the level of compliance by the service provider • Should take prompt action to address any issues identified through monitoring, including terminating the relationship Compliance Certification Compliance Certifications • Financial institutions are not relieved of their own oversight responsibility by using umbrella organizations or third party to vet of certify servicer providers Compliance Certifications (cont.) • Third party organizations that vet service providers for financial institutions may not suggest that CFPB endorses the organization or require that service providers be certified by the organization Compliance Certifications (cont.) • Financial institutions must make sure that fees paid by service providers to be on an approved list of servicer providers do not constitute illegal referral fees Why now? • Bulletin 2012-03 is not new. Service provider oversight has been part of the examination scope since the start Examination • Examiners will evaluate the effectiveness of Compliance Management System (CMS) • Board Oversight, Policies, Training, Complaint Process, and Monitoring (includes service provider oversight) • Scope includes interviews, transaction testing (listening to sample calls), reviewing payment processes, disclosures, marketing Are you subject to CFPB oversight? CFPB Oversight Authority • Banks over $10B • Non-depository institutions (i.e. mortgage originators/ servicers, debt collectors, payday lenders, money transmitters, auto lenders) • Any service provider that provides material services to a supervised institution CFPB, a different Regulator Enforcement Division Why is service provider oversight important? Enforcement Cases • Cap One – $210 million • BoA – $772 million • Discover – $214 million • Amex – $112 million Press Release for CFPB Bulletin 2012-03 (April 3, 2012), available at: http://www.consumerfinance.gov/newsroom/consumer-financial-protection-bureau-to-hold-financialinstitutions-and-their-service-providers-accountable/ Regulatory Questions [email protected]