What The Board Needs to Know COMPLIANCE HOT TOPICS

IN THE LAST FEW YEARS COMPLIANCE HAS FELT LIKE THIS

STILL A LOT TO DO

 New RESPA Disclosures  New Credit Card Disclosures, Processing Rules and Fee Restrictions  Shorter Allowable Hold Periods on Deposits  New Overdraft Opt-in, Disclosures and Restrictions  Overhaul of Open-end Credit Reg Z Disclosures  New Uniform Privacy Disclosures IMPLEMENTED DURING 2010

 New Risk-Based Pricing Notices  New Closed-End Mortgage Reg Z Disclosures  New Mortgage Loan Officer Compensation Rules  SAFE Act Registration  Financial Literacy Requirements (Federal Credit Unions) IMPLEMENTED DURING 2011

 Changes to Online Banking Authentication Systems  Consumer Financial Protection Bureau COMING UP SOON

BOARD RESPONSIBILITY FOR COMPLIANCE

 Ensure Board Support  Appoint a Compliance Officer (and staff if necessary)  Provide Appropriate Resources  Approve Policy and Programs  Review Status Reports  Support Risk Based Compliance Management BOARD RESPONSIBILITIES

 CARD Act  Overdraft Protection Opt-in  Reg Z Open-End Disclosures  Mortgage Disclosures  Loan Officer Compensation  SAFE Act Registration  Financial Literacy Training  Vendor Due Diligence  Flood Insurance  Bank Secrecy Act  Online Banking Authentication Systems  Consumer Financial Protection Bureau KEY CURRENT ISSUES

Rule of Thumb: Anytime a regulation makes it into mainstream news media, it’s a big deal. CARD ACT

 Prohibitions on raising interest rates on existing balances (except for variable rate cards and some penalty rates)  Elimination of a floor on variable rate cards  New periodic statement disclosures  Payment due dates on the same day every month  Opt-in for over-the-limit fees  New rules for card issuance to members under 21  Card agreements posted on the credit union’s website  Six month rate increase reviews  Fee restrictions CARD ACT

Fee Income: An endangered species OVERDRAF T OPT-IN

 Applies to one-time debit card and ATM transactions only  Member must opt-in for service  Regulatory mandated disclosure  Credit Union confirmation required  No discrimination against members who do not opt-in OVERDRAFT OPT-IN

A major overhaul.... REG Z OPEN- END LOAN DISCLOSURES

 New disclosures for applications and solicitations (applies to credit cards only)  New account opening disclosures  New periodic statement disclosures  New change-in-terms notifications  New underwriting and procedural changes for credit unions that offer Multi-feature Open-ended Lending (MFOEL) REG Z OPEN-END LOAN DISCLOSURES

More important than ever.... MORTGAGE DISCLOSURES

 RESPA:  New standardized Good Faith Estimate  Changes to HUD-1 Settlement Statement  Comparison of fees disclosed on both documents  Limitation on the amount fees can change from application to closing  Regulation Z TIL Statement Changes:  New payment disclosures  Statement that the borrower may not be able to refinance MORTGAGE DISCLOSURES

The end of yield-spread premiums. LOAN OFFICER COMP- ENSATION

 Applies to compensation related to the origination of mortgage loans.  Prohibits any loan originator or mortgage broker compensation based on the terms or conditions of the transaction other than the amount of credit extended.  Prohibits payment of compensation by any other party if the consumer is directly compensating the loan originator.  Prohibits loan originators from steering applicants to loan products based on the fact that the loan officer will receive greater compensation for the loan. LOAN OFFICER COMPENSATION

You can’t make mortgage loans without it... SAFE ACT REGISTRATION

 All Mortgage Loan Originators (MLOs) should have been registered by July 29,  After the registration deadline MLOs cannot originate mortgage loans without their identification number.  The Board must approve a written SAFE Act Policy.  All newly hired MLOs must be registered before acting as an MLO. SAFE ACT REGISTRATION

Requirement for Federal Credit Unions Only. FINANCIAL LITERACY TRAINING

 Directors must have the following financial skills:  Working familiarity with basic finance and accounting practices  Ability to read and understand the credit union’s balance sheet and income statement  Ability to ask substantive questions of management and auditors  Level of financial knowledge should be consistent with the size and complexity of the credit union.  Directors appointed prior to January 27, 2011 should have acquired necessary skills by July 27,  Directors appointed after January 27, 2011 will need to acquire necessary skills within six months of their appointment. FINANCIAL LITERACY TRAINING

Do you really know your vendors? VENDOR DUE DILIGENCE

 Third party arrangements should be evaluated for possible risks and managed in a manner commensurate with the credit union’s size, complexity and risk profile.  Credit Union management should complete the following tasks:  Risk Assessment and Planning  Due Diligence  Risk Measurement, Monitoring and Controls  A plan should be in place to evaluate all new vendors, monitor existing relationships and manage risk. VENDOR DUE DILIGENCE

You never think about it until it’s too late. FLOOD INSURANCE

 Large fines are possible  Credit Unions must do the following:  Determine the flood zone of all real property securing a loan each time the credit union makes, increases, extends or renews a loan  Notify property owners in flood zones of insurance requirements within a reasonable time (10 days) prior to consummation  Ensure adequate flood insurance is in place prior to consummation  Track insurance coverage through the life of the loan  Force place insurance when necessary FLOOD INSURANCE

An oldie, but a goodie.... BANK SECRECY ACT

 Independent testing of BSA compliance.  A specifically designated person or persons responsible for managing BSA compliance (BSA compliance officer).  Training for appropriate personnel.  A system of internal controls to ensure ongoing compliance. BSA PROGRAM REQUIREMENTS

Approve the BSA Program annually Appoint a BSA Officer Review the BSA Risk Assessment as applicable Review periodic BSA program updates Ensure BSA officer has adequate staffing and resources Review reports of filed Suspicious Activity Reports Champion policy and procedure BSA BOARD RESPONSIBILITIES

Changing requirements for a changing world. ONLINE BANKING AUTHENTI- CATION

 Changes should be completed by January 1,  Required by the supplement to the FFIEC’s “Authentication in an Internet Banking Environment.”  Examiner expectations include:  Risk Assessments (updated at least every 12 months or as membership, products, services, or on-line threats change)  Increased authentication for higher risk transactions (member initiated ACH withdrawals, business accounts)  Implementation of layered security for online banking  Re-evaluation of authentication techniques (username/password/cookie and simple challenge questions will no longer be considered adequate)  Member Awareness and Education Program  Assistance and cooperation from your online banking provider is critical. Status updates should be provided to the board. UPDATED ONLINE BANKING AUTHENTICATION SYSTEMS

Still a lot of unknowns... CFPB

 Direct examination authority only for financial institutions with $10 billion or more in assets.  The Bureau has rulemaking authority for many consumer protection regulations.  The Bureau can go on joint examinations with the NCUA if there is practice the NCUA is concerned about.  Even beneficial changes mean more work for credit unions:  New forms  New procedures  New training CONSUMER FINANCIAL PROTECTION BUREAU

Heather Line Compliance Specialist Utah Credit Union Association THANK YOU