Publications
CFPB Targets Online Payment Platform in First Enforcement Action on Cybersecurity
April 12, 2016
The Consumer Financial Protection Bureau broke new ground with its recent Consent Order against Dwolla Inc., an online payment platform, for deceiving consumers about its information security practices. The Consent Order alleges that Dwolla made public statements regarding the efficacy of its data security system and failed to fulfill those promises. The enforcement action is especially striking because the CFPB imposed a $100,000 civil monetary penalty on Dwolla despite the lack of any evidence that the payment processor experienced a data breach or any kind of cybersecurity incident, and also because the CFPB imposed significant — and expensive — new compliance obligations beyond what other federal regulators have demanded in similar situations. In this article, partners Donald J. Mosher, former SRZ attorney Michael L. Yaeger, associates Melissa G.R. Goldstein and former SRZ attorneys Lisa A. Prager and Kimberly G. Monty discuss the implications of the CFPB’s Consent Order.
Click here to read the article on the Payments Journal website.
Related Insights
Alerts
On April 24, 2024, the Internal Revenue Service (“IRS”) released final regulations (TD 9992) (“Final Regulations”) addressing the determination of whether a real estate investment trust (“REIT”) is “domestically controlled.” The Final Regulations finalize proposed regulations (REG-100442-22) (“Proposed Regulations”) under Section 897 of the Internal Revenue Code published on Dec. 29, 2022.[1]
Alerts
On March 1, 2024, New York Governor Kathy Hochul signed into law an amended version of the New York LLC Transparency Act (“NYLTA”),[1] requiring certain limited liability companies (“LLCs”) formed or authorized to do business in New York (each, a “NY Reporting Company”) to file a beneficial ownership information (“BOI”) report with the NY Department of State (“NY DOS”). Each NY Reporting Company will be required to disclose on its BOI report identifying information pertaining to each individual who directly or indirectly exercises substantial control or owns or controls 25 percent or more of the ownership interests of a NY Reporting Company (each, a “Beneficial Owner”) and the individuals involved in the NY Reporting Company’s formation or registration to do business in New York (each, an “Applicant”). Information reported to NY DOS will be maintained in a private database not accessible to the public. The NYLTA goes into effect on Jan. 1, 2026 and requires the NY DOS to promulgate regulations implementing the legislation.
Alerts
On April 24, 2024, the Internal Revenue Service (“IRS”) released final regulations (TD 9992) (“Final Regulations”) addressing the determination of whether a real estate investment trust (“REIT”) is “domestically controlled.” The Final Regulations finalize proposed regulations (REG-100442-22) (“Proposed Regulations”) under Section 897 of the Internal Revenue Code published on Dec. 29, 2022.[1]
Alerts
On March 1, 2024, New York Governor Kathy Hochul signed into law an amended version of the New York LLC Transparency Act (“NYLTA”),[1] requiring certain limited liability companies (“LLCs”) formed or authorized to do business in New York (each, a “NY Reporting Company”) to file a beneficial ownership information (“BOI”) report with the NY Department of State (“NY DOS”). Each NY Reporting Company will be required to disclose on its BOI report identifying information pertaining to each individual who directly or indirectly exercises substantial control or owns or controls 25 percent or more of the ownership interests of a NY Reporting Company (each, a “Beneficial Owner”) and the individuals involved in the NY Reporting Company’s formation or registration to do business in New York (each, an “Applicant”). Information reported to NY DOS will be maintained in a private database not accessible to the public. The NYLTA goes into effect on Jan. 1, 2026 and requires the NY DOS to promulgate regulations implementing the legislation.