May 14, 2014 Presented by Ken Shim

Background April CFPB issued Bulletin Federal Reserve, OCC and FDIC issued similar guidance on vendor management prior to CFPB

Bulletin Bulletin was issued to clearly communicate the Bureau’s expectations for financial institutions to oversee service providers Financial institutions will also be liable for the service providers’ non-compliance with Federal consumer financial laws

Guidance

Perform Due Diligence Review the service provider’s policies & procedures Determine the training level Do they have adequate internal controls? What is the scope of their monitoring?

Contract with Service Providers Contract should include clear expectations about compliance and the consequences for violating any compliance responsibilities

Conduct Ongoing Monitoring Financial institutions should establish sufficient ongoing monitoring and testing to independently assess the level of compliance by the service provider Should take prompt action to address any issues identified through monitoring, including terminating the relationship

Compliance Certification

Compliance Certifications Financial institutions are not relieved of their own oversight responsibility by using umbrella organizations or third party to vet of certify servicer providers

Compliance Certifications (cont.) Third party organizations that vet service providers for financial institutions may not suggest that CFPB endorses the organization or require that service providers be certified by the organization

Compliance Certifications (cont.) Financial institutions must make sure that fees paid by service providers to be on an approved list of servicer providers do not constitute illegal referral fees

Why now?

Bulletin is not new. Service provider oversight has been part of the examination scope since the start

Examination Examiners will evaluate the effectiveness of Compliance Management System (CMS) Board Oversight, Policies, Training, Complaint Process, and Monitoring (includes service provider oversight) Scope includes interviews, transaction testing (listening to sample calls), reviewing payment processes, disclosures, marketing

Are you subject to CFPB oversight?

CFPB Oversight Authority Banks over $10B Non-depository institutions (i.e. mortgage originators/ servicers, debt collectors, payday lenders, money transmitters, auto lenders) Any service provider that provides material services to a supervised institution

CFPB, a different Regulator

Enforcement Division

Why is service provider oversight important?

Enforcement Cases Cap One – $210 million BoA – $772 million Discover – $214 million Amex – $112 million

Press Release for CFPB Bulletin (April 3, 2012), available at: institutions-and-their-service-providers-accountable/ Regulatory Questions institutions-and-their-service-providers-accountable/