Scherzer Blog

FINRA is spot-checking social media communications

In posting a Targeted Examination Letter (often referred as a sweep letter) on its website earlier this month, FINRA invoked Rule 2210(c)(6), which states that each FINRA firm’s written (including electronic) communications are subject to a periodic spot-check procedure.

FINRA’s sweep letter seeks, among other things, an explanation of how the firm is using social media at the corporate level in conducting its business; the identity of all individuals who post and/or update content; how the firm’s registered representatives and associated persons generally use social media to conduct the firm’s business; written supervisory procedures concerning the production, approval and distribution of social media communications; the measures to monitor compliance with the firm’s social media policies; and a tabular list of the firm’s top 20 producing registered representatives (based on commissioned sales) who used social media for business purposes to interact with retail investors.

June 27th, 2013|Legislation|

Virginia takes workers’ privacy to a new level

Starting July 1, 2013, new Virginia Code §40.1-28.7:4 provides that “employers shall not, unless a listed exemption applies, be required to release, communicate, or distribute to a third-party, any current or former employee’s personal identifying information.”

In this context, “personal identifying information” is defined as a “home telephone number, mobile telephone number, e-mail address, shift times, or work schedule.” Exceptions permitting the disclosure of such information include requirements of federal laws that supersede state statutes, court orders, judicial warrants or a subpoena in a civil or criminal case. Although there is no penalty, the statute establishes a public policy that endorses protection of the personal identifying information and could be used in a lawsuit against employers.

June 27th, 2013|Educational Series, Legislation|

CFPB’s database is now searchable by state and includes complaints about credit reporting

On May 31, 2013 the Consumer Financial Protection Bureau (“CFPB”) announced that its Consumer Complaint Database, now searchable by state, has been expanded to include credit reporting and money transfer complaints. In addition to these two new categories, the database, which can be accessed at http://www.consumerfinance.gov/complaintdatabase/, includes complaints relating to credit cards, mortgages, student loans, bank accounts and services, and consumer loans.

When submitting a complaint about credit reporting, consumers can select from five common issues, which are all searchable on the updated database: incorrect information on a credit report; problems with a credit reporting agency’s investigation; improper use of a credit report; not being able to get a credit report or credit score; and problems with credit monitoring or identity protection services.

June 20th, 2013|Educational Series|

FTC says data brokers willing to sell consumer information and disregard FCRA

On May 7, 2013, the Federal Trade Commission (the “FTC”) announced the results of its testing operation, revealing that 10 companies out of the 45 that the FTC approached seemed to be willing to sell consumer information without complying with the Fair Credit Reporting Act (“FCRA.”) The FTC reported that its staffers asked the companies about buying the information for purposes such as determining creditworthiness, suitability for employment or eligibility for insurance.

Six of the 10 companies appeared willing to sell consumer information for employment purposes, two for insurance decisions and two for pre-screened lists of consumers to use in making firm offers of credit. The data brokers were contacted again by the FTC, but this time in the form of letters, warning that their practices may violate the FCRA. The warning letters are part of an ongoing international effort spearheaded by the Global Privacy Law Enforcement Network, an informal group of consumer protection and privacy agencies.

May 9th, 2013|Criminal Activity, Educational Series|

CFPB’s expanded complaint database goes live

The Consumer Financial Protection Bureau (the “CFPB”) announced that the nation’s largest database of federal consumer financial complaints is live and open for public viewing.

The CFPB’s recent launch significantly expands the Consumer Complaint Database from about 19,000 credit card complaints in 2012 to more than 90,000 complaints on mortgages, student loans, bank accounts and services, other consumer loans, and credit cards. It also includes product sub-categories, such as reverse mortgages, conventional fixed mortgages and adjustable mortgages, and home equity loans or lines of credit. Complaints are entered only after the company provides a response or after it has had the complaint for 15 days, whichever comes first. The CFPB states that while the allegations in the complaints are not verified, a commercial relationship between the consumer and the company is substantiated before the complaint is added to the database.

According to the CFPB, the database now has more than one million data points covering approximately 450 companies, and includes information such as the type of complaint, date of submission, consumer’s ZIP code, and the company’s name. The database also provides information about the actions taken on the complaint, i.e., whether the company’s response was timely, how the company responded, and whether the consumer disputed the response.

To file a complaint with the CFPB, consumers can:>

File online at www.consumerfinance.gov/Complaint;

Call 1-855-411-CFPB (2372) or TTY/TDD phone number at 1-855-729-CFPB (2372);

Fax to: (855) 237-2392; or

Mail to: Consumer Financial Protection Bureau, P.O. Box 4503, Iowa City, IA 52244.

May 9th, 2013|Educational Series|

SEC gives conditional okay for company announcements on social media

Last month, the SEC issued a report that makes it clear that companies can use social media outlets such as Facebook and Twitter to announce key information in compliance with Regulation Fair Disclosure (“Regulation FD”) as long as investors have been alerted about which social media will be used to disseminate the information.

May 6th, 2013|Social Media|

SEC and CFTC issue final identity theft rules to protect investors

On April 10, 2013, the Securities and Exchange Commission (the “SEC”) and the Commodity Futures Trading Commission (the “CFTC”) issued joint Identity Theft Red Flags Rules requiring broker-dealers, mutual funds, investment advisers, and certain other entities to adopt programs to detect red flags and prevent identity theft. Notably, certain state laws may also require the adoption of similar guidelines.

Additionally, entities that retain service providers must ensure that the providers conduct their activities in accordance with reasonable policies and procedures designed to detect, prevent and mitigate the risk of identity theft. A financial institution may be found in violation of the Rules if it fails to exercise appropriate and effective oversight over the engagement.

May 6th, 2013|Criminal Activity|

Do you know about the Right to Know Act?

The recently introduced “Right to Know Act of 2013” (Assembly Bill 1291), would require any business that retains or shares personal information of California residents to provide, at no charge and within 30 days of receiving a request from the subject, all information retained about him/her, as well as the names and contact information for all third parties to whom that business has disclosed the information within the last 12 months. This legislation is a significant expansion of the rights provided under California’s 2003 Shine the Light law, which this bill would repeal.

May 6th, 2013|Legislation|

Ponzi and pyramid schemes top SEC’s closed complaints list in fiscal year 2012

During fiscal year 2012, the SEC’s Office of Investor Education and Advocacy closed 29,291 files relating to complaints, questions, and other issues received from investors, a decrease of 4,341 files compared to FY 2011. Complaints related to Ponzi and pyramid schemes were up 1,328%. A footnote to the data states that “the vast majority of these complaints related to a particular highly publicized SEC enforcement action.” Complaints related to specific market events were up 565% which too had a footnote. In this case, the vast majority of the complaints related to a particular highly publicized initial public offering…

March 29th, 2013|Legislation|

Most service providers are not subject to Red Flags Rule

The Federal Trade Commission (the “FTC”) interim final rule which became effective February 11, 2013 confirms that most service providers are not subject to the Red Flags Rule. The rule clarifies the meaning of “creditor” ensuring that its definition is consistent with the revised definition of that term in the amended Fair Credit Reporting Act (the “FCRA”). A “creditor” must develop and implement a written identity theft prevention program premised on identifying “red flags” of identity theft only if in the ordinary course of business, the “creditor” regularly: 1) obtains or uses consumer reports in connection with a credit transaction; 2) furnishes information to consumer reporting agencies in connection with a credit transaction; or 3) advances funds to or on behalf of a person, in certain cases.

However, any entity collecting consumer data must remain vigilant in how it collects, uses and safeguards that data. The FTC may pursue enforcement actions under the FTC Act when a company does not take reasonable privacy protection measures scaled to the risk level of their business practices.

March 29th, 2013|Educational Series, Legislation|