Exam 2 Flashcards

1
Q

Regulation E does not cover all types of accounts offered by credit unions. What types of accounts are covered, and what accounts are not?

A
  • Covered accounts include member asset accounts such as savings, checking, and payroll cards held directly or indirectly by the credit union and established primarily for personal, family, or household purposes
  • The definition does not extend to business purpose accounts, accounts held under a trust agreement, or escrow accounts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What types of transactions are covered transfers, meaning electronic fund transfers (EFTs)? What kinds of transfers are not EFTs? In addition to reviewing the list of examples, understand the reasons why certain transactions are covered and why others are not.

A

*EFT is defined as “any transfer of funds that is initiated through an electronic terminal, telephone, computer, or magnetic tape for the purpose of ordering, instructing, or authorizing a financial institution to debit or credit a consumer’s account”
*Point–of–sale (POS) transfers – including both PIN–based and signature–based;
*ACH transfers
*ATM transfers
*Direct deposit or withdrawal of funds
*Transfers initiated by telephone
*Transfers initiated by a debit card – regardless of whether conducted through an electronic terminal
*Electronic transfers using information from a check, such as a check processed via ACH
*Online bill payments
*To a Consumer asset account- shares, share draft, and share certificates- NOT LOANS
*Within the United States
Not covered
* Paper checks processed vis check channels, and certain automatic transfers occurring within the same credit union (between a member’s accounts, between family member’s account, to pay a loan)
* Transfers subject to UCC 4A- Wire transfers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

3What is the timing requirement for sending periodic statements? Is there a difference in timing depending on whether an EFT occurred or not? If so, what is the difference?

A

The timing for when a periodic statement must be sent depends on whether or not an EFT has been conducted in the preceding months. If no EFTs have occurred, the credit union is only required to send periodic statements on a quarterly basis. However, if an EFT has occurred in the prior month, the rule requires the credit union to send a statement for that month.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What triggers a change in terms notification? If you must send one, what is the timing requirement? What are some of the ways a credit union may provide this notice?

A

Required if certain terms of the account are changed and notice must be given at least 21 days prior to the effective date of the change. Can be included on or with periodic statements or sent as a separate mailing.
If the credit union increases fees, increases potential liability for members, removes types of funds transfer options under the account, or increases the limitations on the frequency or dollar amount of transfers.
Not required if the credit union closes ATM or cancels a member’s debit card.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How does Regulation E define an unauthorized electronic funds transfer? Which transactions are not considered unauthorized transfers?

A

An unauthorized EFT is any EFT from an account “initiated by a person other than the consumer without actual authority to initiate the transfer and from which the consumer receives no benefit.
i. This includes situations where a member’s account is accessed as a result of a robbery or fraud, as well as those where a member is forced to conduct a transfer against his/her will.

First, an unauthorized EFT does not include a situation where the member acts, alone or with another person, with fraudulent intent.
Second, if the member provides another person with authorization to make transfers from the account and they exceed the authority given by the member, those transfers are not unauthorized EFTs. However, once the member informs the credit union that this person no longer has authority to make transfers, then all future transfers are unauthorized EFTs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the different liability levels for unauthorized transfers? For each, when does the member need to provide notice and how much is the member liable for?

A
  • Members must provide notice (orally or in writing) of unauthorized EFTs within 60 days after the periodic statement showing the error was sent
  • Member liability depends on the timing of the member’s notification to the credit union
  • Loss or theft of an access device:
    i. Unauthorized transfers reported within 2 business days of when the member learns of the loss or theft, liability cannot exceed $50
    ii. If greater than 2 business days but within 60 days after the periodic statement is sent, liability can reach up to $500
    iii. If greater than 60 days after the periodic statement is sent, liable for the full amount
  • No access device used:
    i. If within 60 days after the periodic statement is sent, no liability
    ii. If greater than 60 days after the periodic statement is sent, liable for the full amount
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the timelines the credit union has for completing its investigation? What notice is the credit union required to provide after it completes its investigation?

A

Once a credit union has received a member’s notice of error, under section 1005.11(c), the credit union has 10 business days to complete the investigation. If a credit union is unable to complete its investigation within 10 business days, the rule permits the credit union to take up to 45 days to conduct its investigation provided it does the following:
* If unable to complete notify the member of the provisional credit, allow full use of the provisional credit during the investigation, correct any errors within 1 business from determining the error, and notify the member of the investigation results within 3 business days, Notifies the member within two business days of the provisional credit in their account.
* Credit unions must provide notice (orally or in writing) to the member within 3 business days of the conclusion of the investigation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can credit unions require members to repay a loan via an EFT in order to be approved for the loan? What can the credit union offer to incentivize its members that agree to repay using EFTs?

A

The credit union cannot create a product that forces the member to set up automatic electronic payments to repay the loan. However, the credit union can offer lower rates or fees on loans that have automatic repayment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What types of transactions are covered by the Regulation E opt-in rule for overdrafts? What types of overdraft services are not included?

A
  • Applies to ATM and one-time debit card transactions
  • Excludes lines of credit (i.e., CLOCs) covered by Reg Z, and transfers between a member’s accounts, checks, ACH transfers, or recurring debit card transactions
  • IMPACT: NO FEES WITHOUT OPT-IN
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
  1. What are the requirements for allowing members to opt in for overdraft protection? How long is an opt-in valid for? What is the process for revocation?
A

There are 4 parts to the opt-in process:
* The credit union provides the member an opt-in notice in writing (or electronically if agreed), which describes the credit union’s overdraft program and discloses the potential fees;
* The credit union provides the member with a reasonable opportunity to provide the opt-in (Consent)
* The member provides affirmative consent (i.e., opt-in); and
* The credit union provides a written confirmation (or electronic if agreed) of the member’s consent, which must include information about the member’s ability to revoke their consent in the future.
i. a member’s opt-in is effective until it is revoked by the member or the credit union ceases to offer the overdraft service.
ii. The member’s right to revoke this opt-in also extends throughout the account relationship. The credit union must provide the same methods for a member to revoke as it does to allow a member to provide the initial opt-in consent.
iii. CU CAN REQUIRE THE DECISION BE MADE AT ACCOUNT OPENING

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Can credit unions offer different account terms or features to members who do not opt-in to overdraft protection? Can credit unions condition other overdraft services on the member’s decision to opt-in?

A

No, they cant. The credit union cannot treat its overdraft program as an all or nothing program.
The credit union must offer the same account terms, conditions and features to members who do not opt-in as the credit union offers to those that do opt-in (aside from the actual overdraft coverage)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What types of accounts are covered by Regulation E’s prepaid accounts rules?

A
  • Employer-established payroll card accounts to which electronic transfers of salary or other employee compensation are made on a recurring basis;
  • Government benefits accounts established by a government agency for distributing government benefits to a consumer electronically;
  • Accounts marketed or labeled as “prepaid” and redeemable at multiple, unaffiliated merchants or usable at ATMs; or
  • Accounts meeting the 3 following conditions:
    i. Is either issued on a prepaid basis in a specified amount or is not issued on a prepaid basis but capable of being loaded with funds thereafter;
    ii. Primary function is to conduct transfers with multiple, unaffiliated merchants, at ATMs, or for person-to-person (P2P) transfers; and
    iii. Is not a checking account, share draft account, or negotiable order of withdrawal account
  • Does not include certain gift certificates and gift cards; loyalty, award, or promotional gift cards; general use prepaid cards marketed and labeled as a gift card or gift certificate; health savings accounts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the disclosure requirements for prepaid accounts?

A

The two main disclosure requirements, pre-acquisition and periodic statement disclosures, other required disclosures include: account opening disclosures required under section 1005.7, change in terms notices, access device disclosures and notices regarding unregistered prepaid accounts.
Pre-Acquisition Disclosure
Before a member acquires a prepaid account, section 1005.18(b) requires two disclosures: 1) a short form disclosure and 2) a long form disclosure. In general, a member acquires a prepaid account by purchasing, opening or choosing to be paid or receive wages via a prepaid account. There are specific content, placement and font size requirements for the short and long form disclosures. To assist credit unions in meeting these requirements, there are several model form disclosures that offer a safe harbor to credit unions that use them.
There are additional requirements for the disclosures if a prepaid account is acquired electronically, such as online or via a mobile app. Staff commentary explains credit unions must ensure the member is required to view the webpage displaying the pre-acquisition disclosures before accepting the prepaid account. Section 1005.18(b)(6)(i)(B) requires the electronic disclosures be viewable across all screen sizes, in a responsive form and using machine-readable text. For accounts acquired electronically, the pre-acquisition disclosures may be provided electronically without obtaining the consumer’s consent in accordance with the E-SIGN Act.
Periodic Statement Disclosures
The periodic statement disclosures outlined in section 1005.9(b) apply to all prepaid accounts. Rather than sending a periodic statement each month or quarter for prepaid accounts, section 1005.18(c)(1) permits credit unions to provide alternative disclosures. To meet the alternative disclosure requirement, the rule requires credit unions to provide all of the following:
* The account balance via phone
* An electronic history of account transfers for at least the past 12 months
* Upon request, a written history of account transfers for at least the past 24 months
The electronic and written histories must include all of the information required for periodic statements under section 1005.9(b) and must also disclose the amount of any fee assessed against the account, not just those fees associated with EFTs. A total of all fees assessed against the account must be included on each history for the previous calendar month and for the current calendar year to date.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the error resolution procedures for prepaid accounts? How are they different from the regular Reg E error resolution procedures?

A
  • Prepaid accounts that are considered unverified, are fully exempt from the error resolution rules. For verified accounts, CU must investigate and resolve errors on same frequency as timely notice of error rules. “Timely Notice = within 60 days of when CU sent the periodic statement reflecting error”
    read page 108 in full
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a remittance transfer?

A

They are not considered EFT’s. The electronic transfer of funds requested by a sender to a designated recipient that is sent by a remittance transfer provider.”
A “sender” is the person requesting the remittance transfer be sent to the designated recipient for personal, family or household purposes. A “designated recipient” is the person receiving the remittance transfer. The designated recipient must be located in a foreign country and can be either an individual or a business.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How are the disclosure and error resolution procedures different for remittance transfers?

A

Remittance transfers requires two types of disclosures
i. pre-payment disclosure when sender requests the remit transfer, but before payment is mad
ii. receipt when the sender authorizes the payment
* They can be combined into a single disclosure if credit union can provide proof of payment when payment is made
Remittance errors includes:
1. an incorrect amount paid by a sender or
2. computational error made by the credit union or
3. failure to make funds available to designate recipient by the date disclosed
**an error does NOT include situations where the funds were sent to the wrong account because SENDER provided the CU with the wrong account number and/or routing number.
If a CU received a notice of error - the CU is required to complete the following for error resolution:
- Conduct a timely investigation
- Resolution depends on type of error

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the funds availability rules? Expect to apply the rules to different fact pattern situations.

A

 Next-Day Availability: cash, electronic payments, and certain check deposits (US Postal Service money orders, Federal Reserve Bank and Federal Home Loan Bank checks, state or local government checks deposited at an institution in the same state as the payor, on-us checks, and cashier/teller/certified checks); for local check deposits, the lesser of $225 or the aggregate of all check deposits not already subject to next-day availability; while the full amount must be available for check-writing purposes by 9:00am on the 2nd day, $450 of the amount must also be available for cash withdrawal by 5:00pm the 2nd day with the full amount available for cash withdrawal by the 3rd day
 Second-Day Availability: local check deposits in excess of the first $225 discussed above; checks that do not satisfy the requirements for next-day availability
 Fifth-day availability: cash or check deposits at nonproprietary ATMs must be made available no later than the 5th business day

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When are funds considered deposited? Does anything change based on how something is deposited (i.e., by mail, lockbox, branch)?

A

YES
* Funds deposited at a staffed facility, ATM, or contractual branch are considered deposited when they are received at the facility, ATM, or contractual branch
* If funds normally are removed from the ATM not more than 2x each week, funds deposited at an ATM that is not on, or within 50 feet of, the premises of the depository bank are considered deposited on the day the funds are removed from the ATM
* Funds deposited in a drop box in the lobby of a credit union are considered deposited when placed in the box (unless there is a posted notice on the box stating otherwise)
* Funds mailed to the credit union are considered deposited the day they are received by the credit union (i.e., the day the mail is delivered to the credit union)
* Funds deposited in a night depository, lock box, or similar facility are considered deposited on the day on which the deposit is removed from such facility and is available for processing by the credit union
* Funds may be considered deposited on the next banking day in the case of funds that are deposited:
i. On a day that is not a banking day for the depository bank; or
ii. After a cut-off hour set by the depository bank for the receipt of deposits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the permissible cutoff times for the receipt of deposits? Do these timeframes change based on where an item is deposited?

A

Yes
* 2:00pm or later for branch office or head office (although not required to remain open until 2:00)
* 12:00pm or later for ATMs, contractual branches, and off-premise facilities (night depositories or lock boxes)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How does Regulation CC address indemnity for remotely deposited checks? When might a credit union need to indemnify another financial institution when a check is deposited both by remote deposit capture (RDC) and as a paper check? Note: There is no need to memorize specific indorsement language.

A

A credit union that permits remote deposit by its customer indemnifies a depository bank that subsequently accepts the original check for deposit and incurs a loss if the loss is due to the check having previously been paid.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the various check exception holds? What circumstances may they be invoked? When may a credit union invoke the exception for reasonable cause to doubt collectability and how long may a hold last?

A
  • New accounts: account was opened within the last 30 days and member had no prior transaction accounts with the credit union
    i. Next-day availability applies to cash, electronic deposits, and the first $5,525 of most other next-day items
    ii. The remaining funds of the next-day items must be made available on the 9th business day
    iii. Credit union may choose availability schedule for on-us checks and local checks
  • Large deposits: >$5,525 deposited by a member in any one banking day
  • Redeposited checks: checks that were previously deposited and returned unpaid; does not apply to checks that were returned because they were post-dated and are no longer post-dated or to checks that were returned due to a missing indorsement and the indorsement is no longer missing
  • Repeated overdrafts: if a member has repeatedly overdrawn his/her account (meaning the account balance is negative or would have become negative if checks/other charges had been paid on 6 or more banking days within the preceding 6 months, or if the account is negative or would have become negative in the amount of $5,525 or more on 2 or more banking days within the preceding 6 months), the availability rules for checks do not apply for 6 months after the last overdraft
  • Reasonable cause to doubt collectability: belief must be based on a set of facts particular to the check and not on the fact that the check is of a particular class or is deposited by a particular class of persons
  • Emergencies beyond the credit union’s control
  • Except for new accounts and emergency holds, a “reasonable period of time” to extend a hold is generally as follows:
    i. 1 additional business day for on-us checks
    ii. 5 additional business days for local checks
    iii. 6 additional business days for deposits at nonproprietary ATMs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the funds availability disclosure requirements (specific policy disclosures, initial disclosures and additional disclosures)? What is required to be preprinted on deposit slips versus lobby notices?

A
  • Credit unions must provide members with a disclosure, before an account is opened, that describes the funds availability policy followed by the credit union in most cases
  • Preprinted deposit slips must include a notice that deposits may not be available for immediate withdrawal
  • Funds availability policy must be posted conspicuously in locations where employees accept consumer deposits, and a notice that deposits may not be available for immediate withdrawal must be posted at ATMs
  • Funds availability policy must be provided to anyone upon oral or written request
  • Changes to the funds availability policy must be provided to consumer account holders at least 30 days prior to the effective date of the change unless it expedites funds availability, in which case it must be provided no later than 30 days after the change
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Where must a credit union post its funds availability policy?

A

In a conspicuous place at all locations where employees accept consumer deposits (not required at drive-through windows or night depository boxes)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What types of accounts are covered by NCUA’s Truth in Savings rule?

A
  • Share or deposit accounts at a credit union held by or offered to a member or potential member
  • Includes, but is not limited to, share, share draft, checking, and term share accounts
  • Does not include mortgage escrow accounts, accounts opened by an executor in the name of a decedent’s estate, trust accounts opened by a trustee under a formal written trust agreement, accounts held by non-natural persons (i.e., business accounts), or accounts held for commercial purposes.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Credit unions can call accounts by certain names. What are the permissible names? What are the prohibited names?

A
  • Synonyms to name accounts are permissible, as long as the name does not mislead members; examples include:
    i. “Checking account” to describe a share draft account
    ii. “Money market account” to describe money market share accounts
    iii. “Savings account” to describe regular share and share accounts
    iv. “Share certificate,” “certificate account,” or “certificate” to describe term share accounts
  • Synonyms that do not accurately describe the account are prohibited; examples include:
    i. “Deposit account” may not be used to describe a share account
    ii. “Interest” may not be used to describe dividends
    iii. “CD” or “Certificate of Deposit” may not be used to describe a share certificate
    iv. Time account or time deposit
25
Q

What is an advertisement? What types of advertisements are exempt from some of the advertising rules?

A
  • Advertisement: a commercial message that appears in any medium and that promotes directly or indirectly the availability of, or a deposit in, a share account
  • Items that do not qualify as advertisements include:
    i. Rate sheets published in newspapers, periodicals, or trade journals, unless the credit union pays a fee to have the information included or otherwise controls the publication
    ii. In-person discussions initiated by a member or potential member
    iii. In-person discussions with a member about the terms for a specific account
26
Q

What terms in an advertisement would trigger additional disclosures? What are the additional disclosures that must be included in the advertisement?

A
  • Advertisements that contain an annual percentage yield trigger the need for additional disclosures, the word bonuses, and overdraft protection programs
  • Additional disclosures may include:
    i. Variable rates
    ii. Time annual percentage yield is offered
    iii. Minimum balance
    iv. Minimum opening deposit
    v. Effect of fees
    vi. Features of share certificate accounts
27
Q

Does Truth in Savings require a periodic statement? If not, what regulation might?

A
  • Truth in Savings does not require periodic statements
  • Reg E may require a statement
28
Q

Which fees must be disclosed? Are some fees outside of the regulation’s control?

A
  • Fees that may be imposed in connection with the account and the conditions under which the fee may be imposed must be disclosed:
    i. Maintenance fees, such as monthly service fees;
    ii. Fees to open or to close an account;
    iii. Fees related to deposits or withdrawals, such as fees for use of the institution’s ATMs;
    iv. NSF fees; and
    v. Fees for special services, such as stop-payment fees, fees for balance inquiries or verification of share and deposits, fees associated with checks returned unpaid, fees for regularly sending to members share drafts that otherwise would be held by the credit union and overdraft line of credit access fees (if charged against the share account)
  • Fees that are not required to be disclosed include:
    i. Fees for services offered to member and nonmembers alike, such as fees for travelers checks, wire transfers, ACH transfers, processing of credit card cash advances, or handling of U.S. Savings Bond Redemption; and
    ii. Incidental fees, such as fees associated with state escheat laws, garnishment or attorney’s fees, to change names on an account, to generate a mid-cycle periodic statement, to wrap loose coins, for photocopying, for statements returned to the credit union because of wrong address, and locator fees
28
Q

What triggers a change in terms notification? If you must send one, what is the timing requirement? What are some of the ways a credit union may provide this notice?

A
  • Any change in a term that is required to be disclosed at account opening if the change may reduce the annual percentage yield or adversely affect the consumer this will trigger the need for a change in terms notification
  • Notice must be mailed or delivered at least 30 calendar days before the changes take effect
  • Notice can be provided on or with periodic statements or in another mailing such as a highlighted portion of a newsletter or statement stuffer insert
29
Q

How must fees be disclosed on periodic statements? Are any fees exempt from this requirement? If so, which fees? What about overdraft protection fees?

A

Must be itemized by type and dollar amount.
* Fees not required to be disclosed under section 707.4(b)(4) (initial account disclosures) and Check-printing fees and
* Fees for obtaining copies of checks, whether or not the original checks have been truncated or returned
Overdraft protection fees
* Credit unions must disclose separate totals for the statement period and for the calendar year to date for:
i. The total dollar amount for all fees imposed on the account for paying checks or other items when there are insufficient funds and the account becomes overdrawn, using the term “Total Overdraft Fees,” and
ii. The total dollar amount for all fees imposed on the account for returning items unpaid
The total dollar amount for paying overdrafts includes per-item fees, daily or other periodic fees and fees charged for maintaining an account in overdraft status. It also includes fees charged when there are insufficient funds because previously deposited funds are subject to a hold or are uncollected.
The overdraft fee disclosure requirements do not apply to fees for transferring funds from another account to avoid an overdraft or fees charged when the institution has previously agreed in writing to pay items that overdraw the account and the service is subject to Regulation Z

30
Q

What terms must be disclosed in the account opening disclosures?

A
  • Rate information
  • Compounding and crediting
  • Balance information
  • Fees
  • Transaction limitations
  • Features of term share accounts
  • Bonuses
30
Q

Are overdraft programs subject to enhanced advertising requirements? If so, what are the requirements?

A
  • Advertisements that promote the payment of overdrafts must also include:
    i. The fee(s) for the payment of each overdraft;
    ii. The categories of transactions for which a fee may be imposed for paying an overdraft;
    iii. The time period by which the member must repay or cover any overdraft; and
    iv. The circumstances under which the credit union will not pay an overdraft
  • These advertising disclosure rules do not apply in the following circumstances:
    i. An advertisement promoting a service where the credit union’s payment of overdrafts would be agreed upon in writing and subject to Regulation Z;
    ii. A communication by an institution about the payment of overdrafts in response to a member-initiated inquiry about deposit accounts or overdrafts;
    iii. An advertisement made on outdoor media, such as billboards;
    iv. An ATM screen or ATM receipt; and
    v. An in-person discussion with a member or consumer
30
Q

Under which circumstances must a credit union provide account disclosures? Consider both initial and subsequent disclosures.

A
  • Initial disclosures are required before an account is opened or a service is provided, whichever is earlier
  • Subsequent disclosures must be provided:
    i. Upon request from a member or consumer (even if the consumer is not a member)
    ii. When the terms of an account change, resulting in a negative effect on the member
    iii. For automatically renewing share certificate accounts with maturity longer than one month, notice must be sent prior to the maturity of the account
    iv. For term share accounts that do not automatically renew, notice must be sent at least 10 calendar days before maturity
31
Q

When can credit unions advertise that an account is “free?”

A
  • If the account does not impose any maintenance or activity fees
  • Maintenance or activity fees include:
    i. Fees imposed when a minimum-balance requirement is not met or when consumers exceed a specified number of transactions;
    ii. Transaction and service fees that consumers reasonably expect to be imposed on a regular basis;
    iii. A flat fee, such as a monthly service fee; and
    iv. Fees for the deposit, withdrawal, or transfer of funds
  • Maintenance or activity fees do not include:
    i. Fees not required to be disclosed in initial account disclosures;
    ii. Check-printing fees;
    iii. Fees for obtaining copies of checks;
    iv. Balance-inquiry fees;
    v. Stop-payment fees and fees associated with checks returned unpaid;
    vi. Fees assessed against a dormant account; and
    vii. Fees for using an ATM or electronic transfer service not required to obtain an account
32
Q

Credit unions can retain records in electronic format to satisfy federal record retention requirements if what conditions are met?

A
  • The records must accurately reflect the information in the original document, must be accessible, and must be capable of being accurately reproduced.
32
Q

What are the requirements of the consent process? When should new consent be obtained?

A
  • The member’s affirmative consent must be made or confirmed electronically.
    The consent or confirmation must “reasonably demonstrate” the member’s ability to access the information electronically
  • Prior to member consent, the credit union must provide a statement of the hardware and software requirements to access and retain electronic disclosures.
33
Q

Does consent or confirmation have to be provided electronically?

A

Yes

33
Q

Does consent apply to one category of records or to all records or disclosures?

A
  • The credit union has discretion in determining which records it will provide electronically. A description of the records which will be provided electronically must be given.
34
Q

What are some potential consequences of improper E-SIGN consent?

A
  • A court could determine that disclosures were never properly delivered to the member(s). This could affect member liability and when the “clock” started on a member’s liability for unauthorized transactions. Changes in terms could be disputed by members and be argued that the changes are null and void.
35
Q

Which law is implemented by Regulation P? What federal agency has rulemaking authority regarding Regulation P?

A
  • The Gramm-Leach-Bliley Act. The Consumer Financial Protection Bureau (CFPB has rulemaking authority regarding Regulation P).
36
Q

What kind of information is protected by Regulation P?

A
  • Regulation P limits the disclosure of nonpublic personal information to nonaffiliated third parties.
36
Q

What is the difference between customers and consumers? Which group receives notices and an opportunity to opt out under Regulation P?

A
  • A consumer is an individual who obtains or has obtained a financial product or service from a credit union that is to be used primarily for personal, family, or household purposes.
  • A customer is a consumer who has a customer relationship with the credit union. A customer relationship means a continuing relationship between consumer and the credit union where the credit union provides one or more financial products or services to the consumer that are to be used primarily for personal, family, or household purposes. A consumer has a continuing relationship with a credit union when he or she:
    i. Is a member as defined by the credit union’s bylaws;
    ii. Is a nonmember who has a share, share draft, or a credit card account with the credit union jointly with a member;
    iii. Is a nonmember who has a loan that the credit union services;
    iv. Is a nonmember who has an account with a credit union that has been designated as a low-income credit union; or
    v. Is a nonmember who has an account in a federally-insured, state-chartered credit union pursuant to state law
  • A consumer does not have a continuing relationship (and thus no customer relationship) if the consumer is a nonmember and:
    i. The consumer only obtains a financial product or service in isolated transactions, such as using the credit union’s ATM to withdraw cash from an account maintained at another financial institution;
    ii. Purchases traveler’s checks;
    iii. The credit union sells the consumer’s loan and does not retain the rights to service that loan.
37
Q

When is an initial privacy notice required?

A
  • When the credit union and the member establish the customer relationship.
    i. The credit union may always deliver a privacy notice earlier than required.
    ii. If an existing member obtains a new financial product or service, the credit union is not required to provide another initial notice to that member if the earlier notice accurately covers the product.
  • It must also provide the initial notice to consumers before it discloses information to a nonaffiliated third party unless it does so under an exception.
38
Q

When is an annual notice not required?

A
  • An annual notice is not required when the credit union does not share information with third parties in a way that triggers the member’s opt-out rights and there have been no changes to the information sharing policies and practices which were last disclosed to the member.
39
Q

How can a credit union deliver notices under the privacy rule?

A
  • In writing, electronically (if consented to), or on the institution’s website (customer must acknowledge receipt of the notice through the site).
39
Q

When are revised notices required?

A
  • Revised notices are required when a credit union changes its policies and practices regarding disclosures to nonaffiliated third parties so that its most recent notice is inaccurate.
40
Q

What are the exceptions for sharing information without following the notice and opt-out rule? To take advantage of the service provider and joint marketing exception, does the credit union have to do anything regarding third parties?

A
  • The exceptions are:
  • Right to Opt Out – Members have the right to opt out of the disclosure of their nonpublic personal information to nonaffiliated third parties.
  • Processing and Servicing Transactions – This exception generally permits credit unions to disclose member information freely to carry out routine business transaction involving existing accounts. For example, credit unions may disclose nonpublic personal information to nonaffiliated parties to:
    1. Service the credit union’s mortgages;
    2. Prepare and mail account statements;
    3. Make account information available to the credit union’s members on its website: or
    4. Collect a share draft
    ii. Other General Exceptions
    1. Where a member has consented and has not revoked said consent;
    2. To comply with a properly authorized subpoena or with federal, state, or local laws;
    3. To a nonaffiliated software vendor to protect the confidentiality or security of the credit union’s member records;
    4. To a person acting in a fiduciary or representative capacity on behalf of the consumer;
    5. The credit union’s auditors, attorneys, and accountants;
    6. To a consumer reporting agency in accordance with the Fair Credit Reporting Act; or
    7. A law enforcement agency in accordance with the Right to Financial Privacy Act.
    iii. Agreements with Service Providers and Joint Marketers – To be able to qualify for this exception and share NPPI without opt-out or notice rules, the credit union must satisfy two conditions:
    1. The credit union must describe the disclosure in its privacy notice; and
    2. The credit union must have an agreement with the recipient that prohibits it from using the information other than for the purposes for which it received the information and that it will maintain the confidentiality of the information.
    iv. Prohibition Against the Disclosure of Account Numbers
41
Q

When is the credit union required to provide an opt-out notice?

A
  • When the relationship is established, on an annual basis (at least once through the credit union defined 12 month period, as long as that period stays consistent), or when policies and practices related to privacy are revised.
41
Q

What kind of information sharing is governed by the Affiliate Marketing Rule?

A
  • The sharing of eligibility information to make a solicitation for marketing purposes.
41
Q

Can credit unions share account numbers with nonaffiliated third parties for the purpose of marketing?

A

No

42
Q

What does the Affiliate Marketing Rule require credit unions to do in order to participate in the information sharing that is covered by the rule?

A
  • Credit unions are required to provide certain disclosures and allow the member to opt out.
42
Q

What is an affiliate?

A
  • An affiliate is defined as any company that is related by common ownership or common corporate control with another.
43
Q

What are the rules surrounding a member’s ability to opt out? Can it expire? Can it be revoked?

A
  • Covered credit unions must give members a reasonable opportunity to opt out after the delivery of the notice. The rule indicates that 30 days would be a safe harbor, also indicating that a longer or shorter period could be given in certain circumstances.
  • A member’s decision to opt out of the affiliate marketing rule may expire after 5 years. The credit union must send a renewal notice to the affected member with specific information.
    i. The renewal notice must indicate that the member had previously opted out, must inform him or her that the opt out has or will expire, and give the member the means to opt out again.
  • A member’s decision to opt out can be revoked in writing, or if he or she agrees, electronically.
44
Q

What is CAN-SPAM?

A
  • The Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act is implemented by the FTC. CAN SPAM generally prohibits the use of false or misleading header information in credit union emails. Header information includes the address and domain an email is sent from and to, and the routing information.
  • The Act further requires certain unsolicited commercial emails to comply with additional requirements:
    i. No deceptive subject lines;
    ii. Include information identifying the email as an advertisement or solicitation;
    iii. Include the credit union’s physical address, which includes a current street address, a post office box, or a private mailbox under certain circumstances;
    iv. Include instructions on how the member can opt out of future emails through a functioning electronic return address or comparable mechanism; and
    v. Honor any opt out requests within 10 days
44
Q

What is the difference between commercial content and transactional or relationship content? Are transactional/relationship emails subject to all of CAN-SPAM’s restrictions?

A
  • Commercial content advertises or promotes a commercial product or service, including content on a website operated for a commercial purpose.
  • Transactional or Relationship content facilitates an already agreed-upon transaction or updates a member about an ongoing transaction.
  • If any message contains only commercial content, its primary purpose is commercial. Therefore, it must comply with all of the requirements of CAN-SPAM.
  • If the primary purpose of an email is transactional or relationship, it may not contain false or misleading header information, but is otherwise exempt from most provisions of the CAN-SPAM Act.
45
Q

If an email falls into the commercial content category, what are the restrictions on the message?

A
  • Commercial content category messages must comply with all requirements in the CAN-SPAM Act mentioned above in question 1 of this section.
46
Q

Does the Right to Financial Privacy Act address federal and state government requests?

A
  • Yes. To obtain a member’s financial records, the RFPA requires (with certain exceptions) that the government authority obtain ONE of the following:
    i. An authorization, signed and dated by the member, that identifies the records being sought, the reasons for the request, and the customer’s rights un the RFPA;
    ii. A search warrant, judicial subpoena, or administrative subpoena or summons that meets the requirements of Sections 3405-3407, which, among other things, requires a copy to be appropriately mailed to or served on the member;
    iii. A formal written request by a government agency that meets the requirements of Section 2408, which, among other things, requires a copy of the request to be served on the member.
47
Q

What does the Right to Financial Privacy Act require the government to have and do to request financial records?

A
  • RFPA requires the government to have verified its compliance with RFPA’s requirements. This will be certified in writing when the government authority makes a request. This certification is called a certificate of compliance.
48
Q

What is the importance of receiving a certificate of compliance?

A
  • RFPA prohibits credit unions from releasing member financial information to government authorities unless the authority has certified their compliance with RFPA requirements.
49
Q

When is the government not required to provide a certificate of compliance?

A
  • When member financial information is provided to law enforcement authorities if there is information relevant to a violation of the law. The section of RFPA also provides that credit unions have a safe harbor from litigation by the member when providing information in this capacity.