Last Week, This Morning

August 31, 2026

Below you will find several key developments in the financial services industry, including related developments in information privacy and data security, from the past week. We add an "Amicus Brief(ly)1" comment to each item, where we briefly (see what we did there?) note for friends (and again?) of CounselorLibrary the important takeaways from the developments outlined in the email. Our legal reporters - CARLAW, HouseLaw, InstallmentLaw, PrivacyLaw, and BizFinLaw - provide more comprehensive, real-time updates of federal and state laws, regulations, litigation, and other industry items of interest. For a personal guided tour and free trial of any of these legal reporters, please contact Michael Willer at 614-855-0505 or mwiller@counselorlibrary.com.

OCC and FDIC Finalize Definition of "Unsafe or Unsound Practice" for Purposes of Their Enforcement and Supervisory Authority

On August 27, the Federal Deposit Insurance Corporation and the Office of the Comptroller of the Currency announced the issuance of a final rule that adopts a uniform definition of the term "unsafe or unsound practice" for purposes of enforcement actions and supervisory activities. The final rule additionally establishes uniform standards for when and how the agencies may, as part of the examination process, issue Matters Requiring Attention and communicate supervisory observations and other violations of laws and regulations. The final rule also clarifies how the agencies will tailor their use of the unsafe or unsound practice definition and the MRA standard based on risk factors specific to an institution. In addition, the final rule explicitly limits its scope to institutions the agencies supervise.

The final rule defines the term "unsafe or unsound practice" to mean "a practice, act, or failure to act, alone or together with one or more other practices, acts, or failures to act, that (1) is contrary to generally accepted standards of prudent operation; and (2)(i) if continued, is likely to (A) materially harm the financial condition of the [insured depository institution]; or (B) present a material risk of loss to the [Deposit Insurance Fund]; or (ii) materially harmed the financial condition of the [insured depository institution]."

The final rule is effective 60 days after it is published in the Federal Register.

In connection with the final rule, the OCC substantially revised its policies and procedures manuals regarding enforcement actions and MRAs and released for public comment a notice of proposed rulemaking to codify its supervisory framework for the issuance of MRAs in response to violations of laws and regulations.

Amicus Brief(ly): This rulemaking marks the first time that federal banking regulators have defined "unsafe or unsound practices" in a regulation, requiring examiners to focus on "material financial risks" when issuing MRAs. The rule still allows examiners to identify weak policies and/or procedures that could lead to unsafe or unsound practices and allows the regulators to continue to provide prudential regulation of banks, subject to the clearer lines about what policies, procedures, or practices rise to the level of an MRA. All in all, this rulemaking should be good for federal and state banks because it gives both the banks and their regulators some clear, objective standards for identifying and addressing material risks.

Federal Agencies Rescind Interagency Statement on Special Purpose Credit Programs

On August 25, the Federal Deposit Insurance Corporation, the National Credit Union Administration, the Office of the Comptroller of the Currency, the Consumer Financial Protection Bureau, the Department of Housing and Urban Development, the Department of Justice, and the Federal Housing Finance Agency rescinded guidance provided in the "Interagency Statement on Special Purpose Credit Programs Under the Equal Credit Opportunity Act and Regulation B," clarifying that special purpose credit programs must comply with the ECOA, Reg. B, and the Fair Housing Act and that "[f]ederal law does not authorize any generalized remedial 'equity' initiatives absent specific cases of unlawful discrimination, and creditors should not rely upon previous guidance which may have suggested otherwise."

According to the agencies, the interagency statement, which was issued in February 2022, "encouraged creditors to offer special purpose credit programs that 'meet the credit needs of specified classes of persons' and gave assurances to participants that were uncertain about the permissibility of such credit programs. However, the Interagency Statement referenced a provision of [Reg. B] ... that has since been amended. The earlier version of [Reg. B] permitted creditors to implement lending programs based on the race, color, national origin, or sex of the applicant under certain circumstances, and the Interagency Statement and other related guidance referenced that earlier version of the provision. Similarly, the assurance given with respect to conformity with the [FHA] was based on an interpretation promulgated under HUD guidance that is no longer in effect. These prior interpretations cannot be reconciled with the statutory text of ECOA and the FHA, which expressly prohibit discrimination against individuals based on prohibited characteristics. Furthermore, the Supreme Court has been consistent that race-based policies are subject to higher scrutiny and that a general desire to remedy societal discrimination does not satisfy such threshold."

Amicus Brief(ly): Special purpose credit programs are still available for providers that seek to expand their offerings to serve "economically disadvantaged" consumers, but those programs will now have to comply with the letter of fair lending and fair housing laws. The rescission of the interagency statement is largely procedural, given that the agencies had already withdrawn prior guidance that was not consistent with the current administration's directives for providers to avoid using race, color, national origin, or sex as direct eligibility criteria for special purpose credit programs. These programs have been relatively rare in practice, representing only a fraction of the overall consumer lending market, so this rescission will not be very impactful in the grand scheme.

FTC Seeks Comment on Proposed Policy Statement Concerning Personalized Pricing

On August 19, the Federal Trade Commission announced that it is seeking public comment on a proposed policy statement concerning personalized pricing, which is the use of a consumer's personal data to set a price according to the amount that a company believes the consumer is willing to spend on a product or service. According to the proposed policy statement, "Congress has not given the Commission the authority to prohibit personalized pricing in all circumstances, but the Commission intends to enforce the law aggressively against any deceptive or unfair personalized pricing practices that violate Section 5 of the FTC Act or any other law enforced by the Commission. Where consumers reasonably expect that prices for a product or service will not vary based on their personal data, businesses that engage in personalized pricing should clearly and conspicuously disclose not just that the price is personalized, but also the basis for that personalization and the types of data on which the personalization is based. The failure to make these disclosures is likely to constitute an unfair or deceptive act or practice in violation of Section 5."

The FTC states that "[r]etailers may deceive consumers in violation of Section 5 when they represent, expressly or by implication, that a price is static or widely offered when in fact it is personalized. They may similarly deceive consumers when a consumer reasonably believes that a price for a good or service is static or widely offered, and the merchant fails to disclose that the price is in fact personalized. ... Similarly, retailers may violate Section 5 when they mislead consumers as to the basis for the personalization of a price or the effect of that personalization. Consumers who reasonably believe that a personalized price is a discount based on their purchase history with that retailer when it is in fact a higher price based on information about their disposable income or their shopping habits with other firms, for example, may be deceived into not taking action to avoid the personalized price."

The FTC also states in the proposed policy statement that "[s]ome personalized pricing practices may also be unfair under Section 5. The higher price paid by a consumer due to personalized pricing may be a substantial injury. Consumers may not reasonably be able to avoid that higher price if the fact or nature of personalization of the price has been concealed by the retailer. For example, consumers may not be able to avoid paying the higher personalized price if they lack the information or tools necessary to, among other things, modify their behavior to avoid triggering higher prices, dispute or correct inaccurate information collected about them that is leading to higher prices, or avoid the collection of that data in the first place."

"Data practices associated with personalized pricing may also implicate Section 5. ... Businesses that collect, use, or disclose consumers' personal data for the purpose of personalized pricing without adequate disclosures or without obtaining consent may violate Section 5. And businesses that base personalized prices on personal data of consumers without sufficiently verifying that consumers consented to the collection of those data for that purpose may violate Section 5."

Comments are due by September 18, 2026.

Amicus Brief(ly): It is not too hard to predict the comments businesses and consumers will submit to the FTC. Consumers will certainly focus on the privacy angle and will not want businesses to be able to use their data to set pricing tailored to what those businesses think the consumers are willing to pay for a product or service. Businesses will want the flexibility to price products and services based on what the market will bear, knowing that if this idea does not work well, they will move on to the next idea. The concerns from consumers are likely to lead to some combination of disclosure and consent (or opt-out/opt-in) requirements similar to what we have seen in the more general context of consumer data use and sharing. It is early in this policy statement development process, but the data use issues are familiar, as are the anticipated regulatory requirements and limitations.

FTC and Connecticut Obtain $4 Million Settlement with Vehicle Dealership

On August 19, the Federal Trade Commission and the State of Connecticut obtained a $4 million settlement with a vehicle dealership, its principals, general manager, finance manager, and two sales managers, alleging deceptive and unfair practices in the advertising, sale, and financing of vehicles in violation of the FTC Act and the Connecticut Unfair Trade Practices Act.

The FTC and Connecticut sued the defendants in January 2024, alleging that they charged improper fees in connection with the sale of certified pre-owned vehicles. Certified pre-owned vehicles have been inspected and repaired to the manufacturer's specification and are covered by a manufacturer's extended warranty. According to the complaint, when consumers attempted to purchase certified vehicles for the prices advertised, the defendants charged them hundreds to thousands of dollars in additional fees for services that are part of certifying a vehicle. In addition, the complaint alleged that the defendants represented that consumers were required to pay these additional inspection, safety and reconditioning, and certification fees to purchase vehicles when, in fact, consumers are not required to pay such fees to purchase vehicles that are already advertised as certified. The complaint also alleged that, despite stating in advertisements that vehicles are certified and come with a limited warranty, the defendants did not get the vehicles certified by the manufacturer. The defendants allegedly advertised a vehicle as certified but did not report the sale of that vehicle or pay the certification fee to the manufacturer. Therefore, the consumer did not receive a certified vehicle or the benefits of the limited manufacturer warranty that come with certification. The FTC and Connecticut also alleged that the defendants charged consumers for add-on products that they did not authorize, including guaranteed asset protection products, service contracts, maintenance contracts, and total loss protection coverage, or deceived consumers into paying for them by saying that they were required. Finally, the complaint alleged that the defendants made misrepresentations about registration and other state-imposed fees, such as by stating that certain fees were required by the state when, in fact, they were not and by inflating the amount of required state fees.

The proposed order prohibits the defendants from misrepresenting: the costs or terms of purchasing, financing, or leasing a vehicle; the availability of vehicles at an advertised price; whether vehicles are certified or include a limited manufacturer warranty; whether charges, fees, taxes, products, or services are optional or required; whether charges, products, or services are authorized by consumers; and the amount of any charge, fee, or tax. The defendants are also required under the proposed order to clearly and conspicuously disclose, with respect to the purchasing, financing, or leasing of a motor vehicle, the total price as the most prominently displayed item in any visual disclosure. However, if the defendants charge a fee for processing documents, they must, in addition to including the fee in the total price, state the fee separately and adjacent to the total price if the dealership is based in Connecticut or any other state that has such a requirement.

Finally, the proposed order requires the defendants to obtain express, informed consent from consumers for all charges.

Amicus Brief(ly): We have seen a number of these kinds of proposed (and finalized) consent orders involving vehicle dealerships over the past few years. Connecticut and the FTC collaborated on the investigation and proposed settlement to fine the dealership in this case $4 million. That is a lot, but it reflects how strongly the regulators feel about price advertising, the imposition of fees in a vehicle finance transaction, and the finance closing process, which includes the sale of ancillary products. The regulators want to see that dealerships mean what they say and say what they mean in advertisements about vehicle pricing and availability. They expect clear disclosure of fees, and they expect price advertisements to include mandatory fees so that consumers get a clear pricing picture before they arrive at the dealership. They also expect clear disclosures about ancillary products, ensuring that the consumer understands that those are optional, and a clear expression from the consumer - in writing - when the consumer wants to buy those products. Meeting these expectations can avoid expensive investigations and settlements with the government.

Illinois Law Confirms that 10-Year Limitations Period Applies to Actions to Foreclose All Mortgage-Secured Obligations

Illinois Governor JB Pritzker recently signed Senate Bill 2951, which amends Sections 13-115 and 13-206 of the Illinois Code of Civil Procedure to provide that an action on an indebtedness of any kind that is secured by a mortgage or deed of trust in the nature of a mortgage must be commenced within 10 years, regardless of whether it is a traditional home loan or a revolving credit product like a home equity line of credit.

S.B. 2951 supersedes the Illinois Appellate Court's 2025 decision in BMO Bank N.A. v. Zbroszczyk, which held that the 5-year statute of limitations under Section 13-205 applied to actions involving HELOCs secured by mortgages rather than the 10-year limitations period for promissory notes under Section 13-206.

The law is effective immediately.

Amicus Brief(ly): HELOC lenders will be grateful for Illinois' quick response to the Zbroszczyk decision. The new law is short and sweet, simply clarifying that foreclosures of any kind of credit secured by a mortgage or deed of trust are subject to the longer 10-year statute of limitations, not the 5-year statute of limitations that applies in Illinois to unwritten contracts and "all civil actions not otherwise provided for." The clarity this law provides should help mortgage lenders and servicers continue to work with consumers to avoid foreclosure without having to commence foreclosure in the shorter window just to preserve claims. Kudos to the Illinois legislature for its quick work on this issue.

Vehicle-Secured Creditor Was Not Entitled to Enforce Arbitration Provision in Buyer's Order Where Dealership Did Not Assign Buyer's Order to Creditor When It Assigned Retail Installment Sale Contract

An individual bought a vehicle from a dealership. In connection with the purchase, the individual signed a Buyer's Order, which contained an arbitration provision. He also signed a separate retail installment sale contract to finance the purchase. The RISC did not include an arbitration provision. Neither the Buyer's Order nor the RISC referenced the other. Later, the creditor, which was the assignee of the RISC, repossessed and sold the individual's vehicle after he allegedly defaulted on his payments under the RISC. The creditor then sued the individual for breach of contract and sought a judgment for the deficiency amount remaining after the sale of the vehicle. The individual filed a counterclaim, alleging that the creditor violated the statutorily mandated pre-sale notice requirements. The creditor moved to compel arbitration of the individual's counterclaim pursuant to the arbitration provision in the Buyer's Order. The trial court refused to compel arbitration, concluding that no arbitration agreement existed between the parties. The creditor appealed.

The Court of Appeals of Missouri affirmed the trial court's decision. The creditor argued that an arbitration agreement existed between it and the individual because: (1) it was entitled to enforce the arbitration provision in the Buyer's Order; and (2) the Buyer's Order and the RISC should be construed together because they were signed contemporaneously.

The appellate court first concluded that the dealership did not assign or intend to assign the Buyer's Order to the creditor when it assigned the RISC. The appellate court relied on a statement by the dealership's finance and insurance manager confirming that the dealership neither assigned nor intended to assign the Buyer's Order to the creditor. In addition, the language in the Buyer's Order did not contemplate any assignment, unlike the language in the RISC. Therefore, the appellate court found that the Buyer's Order, including its arbitration provision, was between the individual and the dealership, not the individual and the creditor. Moreover, the appellate court noted that the RISC explicitly stated that it "contains the entire agreement between [the creditor] and [the individual] relating to the sale and financing of the motor vehicle."

Next, the appellate court concluded that although the individual signed the Buyer's Order and the RISC contemporaneously, the facts indicated that the dealership and the individual did not intend for the documents to be construed together. Applying the reasoning in a similar case, Jay Wolfe Used Cars of Blue Springs, LLC v. Jackson, 2014 Mo. App. LEXIS 152 (Mo. App. February 18, 2014), the appellate court found that because the dealership and the creditor are separate entities, it would be inappropriate to read the Buyer's Order and the RISC as one contract "'because doing so would result in imputing the contractual rights and obligations of one entity to the other, which Missouri law generally disallows.'" The appellate court "also decline[d] to find that because the documents may have been signed contemporaneously that the documents must be read together as one because, like in Jay Wolfe LLC, the [RISC] here contains all the material terms necessary to the transaction as it sets forth the purchase price of the vehicle, identifies all the terms for payment, and identifies the conditions and consequences of default. Also, as in Jay Wolfe LLC, [the creditor] only sought to enforce the [RISC] in its petition, with no reference to the Buyer's Order whatsoever. Further, the Buyer's Order states nothing regarding assignment, nor does it reference the [RISC.] The [RISC] also fails to reference or incorporate the Buyer's Order."

Amicus Brief(ly): This arbitration case underscores the importance of the language creditors use in sale and finance contracts, including the arbitration and assignment provisions. A number of cases over the past several years have landed in the same place as this appellate decision from Missouri, making clear that the courts will read the documents as they are written. The lesson from the courts is straightforward: creditors should draft merger clauses and other pretty standard contract provisions carefully to ensure that one agreement (e.g., the finance agreement) does not inadvertently exclude important transaction terms (like an arbitration agreement found in a sale document) that they intend specifically to travel with that agreement upon assignment. Courts are likely to construe transaction documents against the drafters, underscoring the importance of a document review to ensure that they reflect the parties' intentions.


1 For the unfamiliar, an “Amicus Brief” is a legal brief submitted by an amicus curiae (friend of the court) in a case where the person or organization (the “friend”) submitting the brief is not a party to the case, but is allowed by the court to file the brief to share information or expertise that bears on the issues in the case.