Legal experts said they believe the CFPB's action against online payment provider Dwolla – its first action related to data security – could lead to considerable ramifications going forward. The CFPB targeted Dwolla March 2 for deceiving consumers about its data security practices and the safety of its online payment system.
The bureau ordered the Des Moines, Iowa-based Dwolla, an agent of the $2.7 billion, Waterloo, Iowa-based Veridian Credit Union and the Houston-based Compass Bank, to pay a $100,000 penalty and fix its security practices.
"The CFPB's action against Dwolla is significant in that it marks the bureau's first foray into an area that up until now was the domain of the Federal Trade Commission and sets up the enforcement stage in this area for the bureau in 2016," Andrew L. Sandler, chairman and executive partner for the Santa Monica, Calif.-based BuckleySandler, said.
Margo Tank, a partner at BuckleySandler, warned, "The CFPB's opening salvo in this area creates concern for digital payment companies and other e-commerce providers. It also establishes an onerous level of oversight as the consent order requires a twice-annual risk assessment and annual audit, along with board approval of the company's data security program, policies and procedures. Clearly, this action should put data security even higher on companies' priority lists if it is not there already."
Sandler represents financial institutions and financial service companies during regulatory examinations and enforcement actions brought by federal and state banking and enforcement agencies, while Tank advises financial services organizations and technology companies on structuring online and mobile financial services product offerings to stay in compliance with state and federal laws.
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
Roy Urrico
Roy W. Urrico specializes in articles about financial technology and services for Credit Union Times, as well as ghostwriting, copywriting, and case studies. Also: writer/editor of a semi-annual newsletter for Association for Financial Technology since 1997 and history projects funded by the U.S Interior Department, National Park Service and Warren County (N.Y.).
