UDAAP Compliance: Defining Unfair, Deceptive, & Abusive Acts and Practices
UDAAP is an important area of focus for compliance officers and financial institutions, and continues to make headlines. One of the most challenging areas is how to define unfair, deceptive, and abusive acts and practices for UDAAP compliance. If that's a challenge you're facing, this post is for you! In this post, you'll learn how to define UDAAP, and a few best practices for managing your UDAAP compliance risk.
As compliance professionals work to manage risk, one area of focus is UDAAP. But what is a UDAAP? UDAAP stands for "Unfair, Deceptive and Abusive Acts or Practices." A UDAAP is any act or practice that is considered to be unfair, deceptive, or abusive in banking.
Originally just UDAP, the Dodd-Frank Wall Street Reform Act of 2010 added the "abusive" concept and changed the acronym to "UDAAP." In today's compliance world, UDAAP continues to evolve. Last year, former Acting Director of the CFPB Mick Mulvaney said he would be focusing on UDAAP! In particular, he said his goal was to provide clearer definitions for "abusive," the term in UDAAP that is the newest and most subjective.
Each word in the UDAAP acronym has a very specific definition in banking compliance; you'll learn each of them in this post!
Read this post to learn more about the history of UDAAP, and how to define unfair, deceptive, and abusive acts and practices for UDAAP compliance.
In spirit, the UDAAP regulations are designed to protect "vulnerable consumers" and ensure that financial institutions are working to protect their current customers in addition to consumers. We'll talk more about that later.
Want to shareable guide to these definitions?
Download this UDAAP compliance guide, which includes these key definitions and more!
But let's start with "easy" parts: UDAAP definitions! Read on to learn the details of important UDAAP definitions, and some tips for avoiding risk exposure.
Defining "Unfair" for UDAAP Compliance
Below are the definitions for unfair, deceptive and abusive for UDAAP compliance, gathered from Section 1031 of 2010's Dodd-Frank Wall Street Reform Act. It's important to note that some of these definitions are subjective; that's part of what makes UDAAP potentially tricky.
Acts and practices are considered "unfair" if they:
- May cause substantial injury. Interpretation of this is often subjective, but below are some considerations:
- May or may not include monetary harm;
- Small amount of harm to a large number of people or substantial harm to one person;
- Actual injury is not required, as harm could be substantial if it merely raises the risk of harm;
- Emotional harm is not typically part of the definition.
- Not reasonably avoidable.
- Interferes with the consumer's ability to effectively make decisions or to avoid the injury.
- Prevents a consumer from comparison shopping or choosing advantageous alternatives.
- If the practice is pervasive in the industry, regulators are more likely to find the practice unfair if there aren't alternatives.
- Injury is not outweighed by benefit.
- Offsetting benefits could include lower prices to the consumer or a wider availability of products and services because of competition.
- The costs to society as a whole are high due to any increased burdens.
Defining "Deceptive" for UDAAP Compliance
Statements or omissions are considered "deceptive" if they are:
- Misleading or likely to mislead.
- A reasonable consumer would be misled. That is, a consumer's interpretation of the statement or omission is not reasonable under the circumstances.
- A representation, omission or practice is material.
Here are a few additional points to remember about "deceptive" statements, omissions, acts or practices:
- Intent is not required to be considered deceptive.
- Actual deception is not required, only an interpretation.
- Deception may occur if you are misleading to a consumer through words, silence or action.
- Acting in good faith is not a defense.
You may have noticed the phrase "likely to mislead" above in the definition of "deceptive." That can be a vague phrase, so for UDAAP compliance, it needs to be defined more clearly. An act or practice is likely to mislead when:
- It omits key terms and conditions; and
- Terms and conditions are present, but key requirements are obscured. For example:
- Fine print;
- Oral delivery that is fast-paced;
- Bait-and-switch communications.
Another word, "material," leaves room for individual interpretation. Consider the following when determining whether an act, practice, representation or omission may be considered material:
- Materiality is assessed by the ability of the consumer to make and understand a decision.
- Deception of a consumer occurs if their understanding of cost or restrictions is not clear and concise.
“Although abusive acts also may be unfair or deceptive, examiners should be aware that the legal standards for abusive, unfair, and deceptive each are separate.”
- Richard Cordray, Director of the CFPB
Some experts have said that as much as 90 percent of UDAAP regulatory actions focus on deception.
Defining "Abusive" for UDAAP Compliance
In 2010, the Dodd-Frank Wall Street Reform Act introduced the concept of "abusive," which is often perceived as the most subjective of the three. Dodd-Frank defines an abusive act or practice as one that:
- Materially interferes with the ability of a consumer to understand a term or condition of a consumer financial product or service; or
- Takes unreasonable advantage of a consumer’s:
- Lack of understanding of the material risks, costs or conditions of the product or service;
- Inability to protect its interests in selecting or using a consumer financial product or service; or
- Reasonable reliance on a covered person to act in the interests of the consumer.
Abusive can be difficult to define, and is sometimes applied inconsistently. While at the ABA panel on UDAAP compliance, Eric Mogilnicki of Covington & Burling noted that a pattern is emerging; it appears that the Bureau brings "abusive" allegations when they don't consider a product valuable or they don't think a payment is necessary.
Before we conclude here, we wanted to answer a few other common questions that you may have:
What is a "Vulnerable Consumer"?
A vulnerable consumer is often described in terms of consumer characteristics or demographics such as age, disability, gender, race/ethnicity, low or limited literacy, receipt of public assistance, and education level. It's similar to protected classes in Fair Lending compliance.
What is the History of UDAP and UDAAP?
The first version of UDAAP, originally referred to as Section 5 of the FTC Act, was introduced in 1938. In 2004, the FTC expanded the section to include deceptive and unfair acts and practices, and UDAP was born.
2010's Dodd-Frank Wall Street Reform Act introduced the "abusive" statutory standard, changing UDAP to UDAAP, and refocused regulatory attention on this area of compliance. In addition, Dodd-Frank made the Consumer Financial Protection Bureau the primary enforcer of the law. In 2011, the CFPB began oversight of UDAAP compliance.
Even it isn't exactly new, UDAAP can be challenging to understand and comply with. This is due, in part at least, to the following factors:
- It's broad in scope and may lack formal or complete definitions.
- Although it is a singular law, UDAAP is broad and can intertwine with other consumer protection laws and regulations. This may lead to varying interpretations.
- Regulatory standards and perspectives as evident in recent cases aren't always consistent.
- UDAAP is sometimes used more generally to include regulations related to good and fair practices.
We've seen how subjective UDAAP can be, particularly in great sessions at the ABA's Regulatory Compliance Conference in Orlando a few years ago.
In addition, UDAAP compliance also influences other areas of consumer compliance. UDAAP compliance is even changing the landscape of Fair Lending. Some experts are combining the two, and referring to them as "Fair and Responsible Banking." As you work to understand your UDAAP compliance requirements, keep in mind how UDAAP compliance relates to other areas of consumer compliance; this should make it a little easier to reduce your risks.
Given the potential for interpretation and changing regulatory guidance, it may be helpful to approach UDAAP compliance efforts with a little flexibility.
TRUPOINT Viewpoint: Unfair, deceptive and abusive acts and practices pose a great threat to your institution as regulators refocus attention on UDAAP compliance. While we are still learning how the regulators interpret UDAAP through regulatory news, lawsuits and enforcement actions, you can begin taking positive steps toward better UDAAP compliance today.
Ready to learn more about UDAAP compliance risk? Request this free eBrief and get it today!
The OCC released its final Community Reinvestment Act (CRA) rule last week, shortly before Comptroller Joseph Otting stepped down. The agency pushed ahead without the FDIC, which had been part of the original rulemaking proposal, since the FDIC was focused on dealing with the ongoing COVID-19 pandemic.
With the hourly updates for the number of sick, the calls for school and business closures, and prohibiting gatherings of more than 10 people, it’s clear that communities are struggling. There’s talk of stimulus payments and feeding those that are hungry and going without. As financial professionals, we need to ask ourselves: What can we do? How can we help?
But are you making the most of that data from a risk management perspective? Not if that data is only used by the lending, credit, or compliance departments.
While compliance and lending are the most closely linked to Fair Lending risk, the truth is that Fair Lending extends into many operational areas. From marketing to the location of new branches to M&A, Fair Lending risk has a role to play in decision making.
About Kinsey Sullivan
After studying Journalism at the University of North Carolina at Chapel Hill, I switched to the other side of content: Marketing, Advertising and PR. At TRUPOINT, I love turning complex data and ideas into high-impact content and campaigns. In my free time, I make art, read, and listen to a lot of podcasts on long walks with my dog, Charlie "Bird" Barker.