On October 29, the U.S. District Court for the Eastern District of Kentucky granted a preliminary injunction prohibiting the Consumer Financial Protection Bureau from enforcing its Personal Financial Data Rights Rule, also known as the open banking rule, until the
On October 15, the Oklahoma State Banking Department issued a memo detailing new licensing and compliance obligations for digital kiosk operators. The memo details the requirements under Senate Bill 1083, enacted in May under the Oklahoma Financial Reporting Act, which
On October 24, 2025, the Massachusetts Division of Banks (DOB) finalized a suite of regulatory amendments implementing the Massachusetts Money Transmission Act. The final regulations, 209 Mass. Code Regs. §§ 44.00, 45.00, 48.00, and 801 Mass. Code
On October 30, the California DFPI announced a consent order against a Nevada-based crypto kiosk operator for alleged violations of the Digital Financial Assets Law and the California Consumer Financial Protection Law. The action follows a DFPI investigation into widespread noncompliance
On October 29, the CFPB rescinded two related rulemakings that would have created public registries for nonbank financial companies. The Bureau withdrew both the Registry of Nonbank Covered Persons Subject to Certain Agency and Court Orders and the Registry of Supervised
On October 28, the CFPB issued an interpretive rule under the Fair Credit Reporting Act (FCRA) declaring that federal law generally preempts state laws governing the content of consumer credit reports. The Bureau’s action, led by Acting Director Russell Vought, replaces
On October 17, 2025, the California Department of Financial Protection and Innovation (DFPI) entered a consent order with a licensed consumer lender, alleging violations of the Fair Access to Credit Act, which amended the California Financing Law to cap interest
On October 21, the NYDFS issued new cybersecurity guidance addressing the growing risks associated with regulated entities’ reliance on third-party service providers (TPSPs). The guidance clarifies compliance obligations under the New York Cybersecurity Regulation and outlines best practices for managing cybersecurity
