Using another of its tools to set policy without prior public comment, the CFPB has released a circular stating that inadequate consumer-data safeguards may constitute a breach of the unfair, deceptive, or abusive acts or practices (UDAAP) protection standards subject to Bureau enforcement action. This is the case even if no consumers have been harmed, if only one consumer is adversely affected, …
The full report is available to retainer clients. To find out how you can sign up for the service, click here and here.