CFPB Regulations Target Big Tech

BY: Michael Sutton

In 2021, the Consumer Financial Protection Bureau (“CFPB”) began investigating Big Tech companies offering digital payment services, including Apple, Google, and Facebook. The CFPB ordered them to produce information regarding personal financial data use and access management. The CFPB’s primary concerns were behavioral targeting or sale of data to third parties, the potential for exclusion of certain merchants, and how companies are protecting customers under existing laws. All of this often results in the phenomenon known as digital resignation, which is the feeling of helplessness when “people desire to control the information digital entities have about them but feel unable to do so.”

The CFPB has since pushed to bring Big Tech companies under the “financial institution” umbrella. In a summary of an Outline of Proposals and Alternatives, the CFPB labels financial institutions and credit card issuers “covered data providers,” whose actions are subject to the authority of the Bureau. The proposal would thus require the companies to make consumer financial data “available to a consumer, upon request.” 

One option the CFPB has considered proposing is “that covered data providers would be required to make available all the information… through online financial account management portals,” which they refer to as “third party access portals.” It is not that data should not be shared, but that it should be the choice of the consumer to share data with a third party, like a competing service provider. The proposal highlights how companies are able to hold data hostage and retain customers through the manufactured inconvenience of switching providers. The proposed rule would force providers to “earn [and retain] customers through competitive prices and high-quality service,” driving home the implicit point that this is not only a consumer rights issue, but an antitrust issue.

The CFPB has made it clear that “covered data providers” under its proposal are subject to the Gramm-Leach-Bliley Act, meaning the proposed third-party access portals would be governed by the Act. It is important to see laws like this and Electronic Fund Transfer Act (“EFTA”) as backbones to reinforce new regulations as opposed to past standards which have to change with the times; the CFPB has specified that its proposed rules will not interfere with the rights guaranteed by such laws, especially the right to digital error resolution and protection from unauthorized transfers afforded by the EFTA.

The proposal does an adequate job addressing the Bureau’s concerns. One must wonder, still, whether it adequately addresses the concerns of consumers. Certainly, ownership over one’s data is important. The existence of portals would be an improvement, but it seems unlikely to combat digital resignation in the average consumer without a simultaneous concerted effort to educate those consumers as to the role they can play in controlling their data. Even with education efforts, many consumers would likely see this development as another layer of complexity contributing to further feelings of confusion and helplessness. There is not an easy solution here. The CFPB has outlined some intriguing rules with a focus on Big Tech, but if it wants to make an even more widespread impact, it should consider a greater focus on the consumers—the human beings—who are at the center of all of this.

Sources

  1. C.F.P.B. Doc. No. 2023-0052, 12 CFR pt. 1001 & 1033 (2023).
  2. CFPB Orders Tech Giants to Turn Over Information on their Payment System Plans, CFPB, https://www.consumerfinance.gov/about-us/newsroom/cfpb-orders-tech-giants-to-turn-over-information-on-their-payment-system-plans/, (Oct. 21, 2021).
  3. CFPB Proposes New Federal Oversight of Big Tech Companies and Other Providers of Digital Wallets and Payment Apps, CFPB, https://www.consumerfinance.gov/about-us/newsroom/cfpb-proposes-new-federal-oversight-of-big-tech-companies-and-other-providers-of-digital-wallets-and-payment-apps/, (Nov. 7, 2023).
  4. CFPB Report Highlights Role of Big Tech Firms in Mobile Payments, CFPB, https://www.consumerfinance.gov/about-us/newsroom/cfpb-report-highlights-role-of-big-tech-firms-in-mobile-payments/, (Sep. 7, 2023). 
  5. CONSUMER FINANCIAL PROTECTION BUREAU, THE CONVERGENCE OF PAYMENTS AND COMMERCE: IMPLICATIONS FOR CONSUMERS (2022).
  6. Electronic Fund Transfer Act, 15 U.S.C. § 1693 (1978).
  7. Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6801-6809, §§ 6821-6827 (1999).
  8. High-Level Summary and Discussion Guide of Outline of Proposals and Alternatives Under Consideration for SBREFA: Required Rulemaking on Personal Financial Data Rights, (Oct. 27, 2022).
  9. Nora A. Draper & Joseph Turow, The corporate cultivation of digital resignation, NEW MEDIA & SOCIETY 1 (2016).
  10. Small Bus. Advisory Rev. Panel for Required Rulemaking on Personal Financial Data Rights: Outline of Proposals and Alternatives Under Consideration, (Oct. 27, 2022).

View all posts