Recent developments about the New York State Department of Financial Services
(Not affiliated with NYDFS; just a blog.)
NYDFS has issued guidance for regulated banks that seek to engage in “virtual currency-related activity.” The guidance requires prior approval based on submission of such items as a business plan, evaluation of risk management, governance structures, and financials. Unsurprisingly, and especially in this environment, consideration of consumer protection is central: “The Department has a particular … Read more
While the jury appears still to be out on what will result in imposition of a new DOJ monitorship under the Monaco Memos, if you breach a DPA — twice — you will get an extension of the Monitorship. DOJ has now extended the Ericsson monitorship arising out of an FCPA prosecution for one year. … Read more
According to its second report on fair lending violations, NYDFS took action against two mortgage lenders, although it did not make any findings of violations: “After taking the testimony of Premium Mortgage and 1st Priority executives, as well as a number of licensed mortgage loan originators at Premium Mortgage, and reviewing documents provided by the … Read more
NYDFS entered into another cybersecurity Consent Order, this time with TTEC Healthcare Solutions, Inc. an insurance broker. Cybersecurity actions have become one of the agency’s most common types of enforcement actions. This one carries a $1.9 Million penalty; some takeaways from DFS allegations include: • TTEC failed to implement adequate multi-factor authentication. • TTEC completely failed to … Read more
SELF REPORTING TO NYDFS – ITS NOT YOUR MONACO MEMO (Part One): Pleased that the New York Law Journal has published Part One of my latest article about self-reporting misconduct by financial institutions regulated by the New York State Department of Financial Services (NYDFS). Article is here: http://blogaboutnydfs.com/wp-content/uploads/2022/12/NYLJ11292022562493-DFSReporting-Part-One.pdf
NYDFS has announced a proposed regulation allowing banks to collect data concerning banking services offered to Minority and Women-Owned Businesses (MWBE) under the Community Reinvestment Act. From Superintendent Harris: “Banks must meet the needs of all consumers, including minority and women business owners, who historically have been denied fair access to credit,” said Superintendent of … Read more
The Wall Street Journal has reported that amendments to Part 500, the NYDFS Cybersecurity Regulation, could by issued by the agency in the near future. From the WSJ article: “”Last week’s consent order, one of three multimillion-dollar cybersecurity settlements NYDFS has reached in recent months, comes as the agency prepares to propose regulatory updates that … Read more
NYDFS has taken another cybersecurity enforcement action, this time against vision insurance company EyeMed. NYDFS leveled a $4.5 million penalty against the company. From its findings: “The Department’s investigation revealed that as a result of a July 1, 2020 phishing attack, a bad actor gained access to a shared EyeMed email mailbox which contained over … Read more
According to an interview given by NYDFS Superintendent Adrienne A. Harris to the Wall Street Journal, NYDFS will release guidance for regulated banks that interact with customers handling crypto or want to engage in the business themselves. Superintendent Harris to WSJ: “Where some regulators have said, “No, banks, don’t engage in this at all,” we’ve … Read more
FinCEN and OFAC teamed up to issue parallel enforcement actions against crypto exchange Bittrex, Inc. for alleged violations of BSA/AML and OFAC regulations, with penalties of $29 million and $24 million being issues, respectively. Previously in 2019, NYDFS had rejected Bittrex’s application for a license to operate in New York, finding amount other things that … Read more