Share
Compliance Specific News & Resources for GoWest Credit Unions
 ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌
Compliance Newsletter

COMPLIANCE HEADLINES

Consumer Financial Protection Bureau (CFPB) 


CFPB Report Details Student Borrower Harms from Servicing Failures and Program Disruptions 


The CFPB has released the annual report of the Student Loan Ombudsman. This report highlights severe difficulties reported by student borrowers due to persistent loan servicing failures and program disruptions. While the report details how many borrowers have benefited from relief programs, it also tells the CFPB how servicing breakdowns, improperly processed payments, and inaccurate information provided by servicers have stymied the borrower’s return to repayment.  


CFPB Student Loan Ombudsman Julia Barnard said, “Our analysis of over 18,000 consumer complaints shows that servicer errors with billing, customer service failures, and incorrect repayment information are causing severe financial and personal distress to borrowers.” “As the federal loan system undergoes rapid changes, it is crucial that servicers immediately address these persistent issues. Policymakers should ensure that student borrowers can access the loan cancellation and lower monthly payments they are entitled to and implement new accountability measures to fix these long-standing problems.”  


This report, like those in previous years, will being used to urge systemic reforms to improve student loan servicing, which includes last month's orders for Navient to pay $120 million. More reform is expected to come.  


Making Ends Meet in 2024: Insights from the Making Ends Meet Survey 


The CFPB released a research publication which provides insights from the Making Ends Meet survey. Overall financial stability and well-being deteriorated from 2023 to 2024. The deterioration occurred across demographic groups and measures.


Financial well-being measured using the CFPB’s scale fell and the share of consumers with the lowest financial well-being increased. More households had difficulty paying bills or expenses. Fewer households could cover a month of expenses if they lost their main source of income. These changes place overall financial health around where it was in 2019—and slightly worse by some measures—after the sharp improvement in financial health that started in 2020 due to COVID-19 government programs.


Meanwhile, large disparities in financial stability and health continue across income, racial, and ethnic groups. Access to credit remains difficult for many consumers. 


CFPB Issues Final Rule Defining Larger Participants for General-Use Digital Consumer Payment Applications 


The CFPB issued a final rule which will define larger participants of a market for general use digital consumer payment applications. Larger participants of this market will be subject to the CFPB’s supervisory authority under the Consumer Financial Protection Act (CFPA). A nonbank covered person qualifies as a larger participant if it (1) facilitates an annual covered consumer payment transaction volume of at least 50 million transactions as defined in the rule; and (2) is not a small business concern. 

_________________________________________________________________________ 


Cybersecurity & Infrastructure Security Agency (CISA) 


Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with Remote Desktop Protocol Applications 


CISA released an alert due to receiving multiple reports of a large-scale spear-phishing campaign targeting organizations in several sectors, including government and information technology (IT). The foreign threat actor, often posing as a trusted entity, is sending spear-phishing emails containing malicious remote desktop protocol (RDP) files to targeted organizations to connect to and access files stored on the target’s network. Once access has been gained, the threat actor may pursue additional activity, such as deploying malicious code to achieve persistent access to the target’s network.   


The alert provides proactive measures that credit unions can take such as: 

  • Restrict Outbound RDP Connections; 

  • Block RDP Files in Communication Platforms; 

  • Prevent Execution of RDP Files; 

  • Enable Multi-Factor Authentication (MFA); 

  • Adopt Phishing-Resistant Authentication Methods; 

  • Implement Conditional Access Policies; 

  • Deploy Endpoint Detection and Response (EDR); 

  • Consider Additional Security Solutions; 

  • Conduct User Education; and 

  • Hunt For Activity Using Referenced Indicators and TTPs. 


CISA urges users and administrators to remain vigilant against spear-phishing attempts, hunt for any malicious activity, and report positive findings to CISA. 



League InfoSight Highlight


League InfoSight Highlight: Evolving our Products for our Credit Unions!


Each week I try to write articles that provide valuable insights into this ever-evolving regulatory environment. As I mentioned last week, it’s unlike anything I’ve experienced before. More than ever, I’m convinced that our collaborative model with our League/Association partners is the most effective and sustainable approach because it truly “takes a village.” We get to leverage the best and brightest talent across all your Leagues/Associations not only to maintain federal content but also ensure state-specific content is up to date and relevant as well! This has become increasingly critical as your credit unions expand across state lines. Through our conversations with credit unions, we discovered that many weren’t aware that they already had FREE access to state content for all 50 states within InfoSight as a member benefit. We realized this was an opportunity to drive awareness and provide even more value through our technology.   


When we started our technology transformation over a year ago, we recognized the need to modernize our systems in line with existing trends. Our goal was to make our systems easier for our credit unions to use, and ensure relevant information was front and center! Single sign-on was key, along with consolidating relevant resources under one URL. 


Our hard work is finally coming to fruition! We are excited to announce that next year, in partnership with our Leagues/Associations, we will be launching InfoSight360! The new name reflects a major upgrade to our technology platform. We are bringing our flagship products, InfoSight, CU PolicyPro, and RecoveryPro together under a single sign-on, which will allow you to navigate seamlessly between the resources that you subscribe to. We’ve also added fresh new features and enhancements, including the introduction of our groundbreaking artificial intelligence feature, which will leverage the amazing content we have throughout our combined products.   


Stay tuned for upcoming user training, user guides, FAQs and additional resources. While we are confident that the system will be intuitive and even easier to use, your Leagues/Associations and our team will be ready to answer any questions.   


We also want to take a moment to express our heartfelt gratitude for your continued partnership and trust. We’re thankful for the opportunity to work within an industry that is constantly giving back to their community. We are grateful to be able to continue to serve all of you so you can continue to carry out your important mission!  


Please reach out to info@leagueinfosight.com if you have any ideas or questions. We would love to hear from you! 


A partner in your village, 

Glory LeDu 

CEO, League InfoSight and CU Risk Intelligence 




ARTICLES OF INTEREST


Third Party Vendor Due Diligence 


Cost of Child Care for One Child Can Be More Than Rent in Some U.S. Counties 


FinCEN: Deepfake Fraud Schemes Target Financial Institutions 


SCAM UPDATES


Avoid Scams During Medicare’s Open Enrollment Period 


IRS: International Fraud Awareness Week Highlights Hoe to Report Fraud; Taxpayer Protection Against Scams, Schemes



COMPLIANCE CALENDAR

Nov. 28, 2024: Thanksgiving Day – Federal Holiday 


Dec. 25, 2024: Christmas Day – Federal Holiday 


Jan. 1, 2025: Department of Labor (DOL) - Fair Labor Standards Act Amendment 


Jan. 27, 2025: FCC – Targeting and Eliminating Unlawful; Text Messages 


July 1, 2025: CFPB and FRB – Reg CC Threshold Adjustments 


July 18, 2025: CFPB – Small Business Lending Data – ECOA 


Oct. 1, 2025: Quality Control Standards AVMs 


June 19, 2026: NACHA – Fraud Return Reason Code


TOOLS & RESOURCES

Effective Dates
Bulletins & Alerts
Webinar Calendar
AffirmX and GoWest Partnership

Q&A OF THE WEEK

Can an attorney issue a subpoena duces tecum (a type of subpoena requiring a third party to produce documents relevant to litigation)? 


Yes. The credit union can accept a subpoena duces tecum signed by an attorney rather than the court clerk. The courts grant the power to issue a subpoena duces tecum for the production of documentary evidence at trial to either the court clerk or an attorney of record. The attorney of record issuing the subpoena is required to sign it. 

For your individualized login, select your state below. 

Arizona
Colorado
Idaho
Oregon
Washington
Wyoming

If you have questions about this communication, contact us at 800.546.4465 or via our shared email inbox at compliance@gowest.org.

Have a great weekend!

Your GoWest Compliance Team, 

David Curtis

CUCE

Director, Compliance Services
P: 206.340.4785

Tiarra Sanders-Hausa

NCCO

Manager, Compliance Services

P: 206.618.9302

Copyright © 2023 GoWest Credit Union Association. All Rights Reserved.

Mailing Address:
GoWest Credit Union Association, 18000 International Blvd Ste. 1102, SeaTac, WA 98188, United States
1.800.995.9064

View in Browser | Manage Your Preferences | Unsubscribe


Email Marketing by ActiveCampaign