Thursday, January 28, 2016

FYI: Parsing the CFPB's EFTA Bulletin

The Consumer Financial Protection Bureau issued a bulletin on November 23, 2015 "intended to remind entities of their obligations under the Electronic Fund Transfer Act (EFTA) and Regulation E."  A careful read is needed, as Bulletin 2015-06 can be easily misinterpreted.


A copy of the CFPB's Bulletin 2015-06 is available at:  Link to Bulletin 2015-06


As you may recall, electronic transfers become subject to the EFTA and Regulation E when they are made from a consumer's "account."  Credit cards will typically not cause a transfer from a consumer's account, but debit cards would cause a transfer from a consumer's account.  


Much of the Bulletin's focus is directed at the preauthorized electronic fund transfer ("PAT"), referred to as an "electronic fund transfer authorized in advance to recur at substantially regular intervals."  See 12 CFR § 1005.2(k).


E-Sign and the EFTA Guidance


Bulletin 2015-06 provides favorable guidance on the interplay between the EFTA and the Electronic Signatures in Global and National Commerce Act ("E-Sign").


EFTA and Regulation E require PATs to be in writing and "signed or similarly authenticated" by the consumer. The Bulletin confirms that if an entity uses E-Sign, it can obtain a consumer's signature by use of an oral recording of a consumer's agreement to a PAT.


Under E-Sign, provided all E-Sign disclosures and other requirements are satisfied, recording a consumer's statement of, for example, "I agree to the agreement . . ." would qualify as an electronic signature. The Bulletin provides other examples of electronic signatures.


The problem for many companies is that EFTA and Regulation E require the PAT agreement to be "in writing."  As the Bulletin itself notes, E-Sign draws a distinction between an "electronic record" and an "electronic signature."  In the above example, we have only obtained an "electronic signature" under E-Sign.


'Electronic Record' PATs Cannot Be Oral Recordings


While the oral recording of the consumer's voice in the above example could go on to include the terms of the agreement, E-Sign expressly prohibits creating an "electronic record" solely by ". . . a recording of an oral communication . . . except as otherwise provided under applicable law."  That "under applicable law" exception does not work under the EFTA since it expressly requires a PAT to be in writing.


As noted by the CFPB in the Bulletin, E-Sign would prohibit an oral recording of an agreement as an "electronic record" where a statute or regulation (such as the EFTA and Regulation E) requires that the agreement "be provided or made available to a consumer in writing."  But the Bulletin then goes on to say in footnote 20 that the E-Sign prohibition does not extend to a PAT "authorization," because "Regulation E does not specify that entities must provide a writing to consumers when obtaining the authorization."


The wording used in footnote 20 is not well versed.  It could easily be misunderstood to mean that the "writing" requirement may be satisfied by an oral recording of an agreement based upon the bureau's interpretation of Regulation E.  That construction, though, is contrary to EFTA section 1693e(a), which requires the PAT agreement be made "only in writing, and a copy of such authorization shall be provided to the consumer when made."


E-Sign prohibits the creation of an electronic record by an oral recording of an agreement, which the Bulletin, prior to footnote 20, does not dispute. But the wording of footnote 20 could be construed to mean an electronic record can be made by simply making a recording of the "document" during a telephone call.  Such an interpretation would, at the minimum, require rulemaking, which the bulletin does not do.


Elements of a PAT Authorization


It is likely that footnote 20 in the Bulletin is addressing other elements of the PAT authorization. First, it is noting the distinction between "electronic records" and "electronic signatures" under E-Sign and is speaking only to the "electronic signature." Second, it may also be speaking to the timing of the delivery of the authorization to the consumer.


On the elements necessary for an electronic signature, the bulletin correctly notes that EFTA and Regulation E require clear assent to the PAT agreement: the "authorization must be readily identifiable as such to the consumer and the terms of the preauthorized EFTs must be clear and readily understandable to the consumer. The authorization process should evidence the consumer's identity and assent to the authorization." That sounds more like a concern for the electronic "signature" than the electronic record.


Four elements are necessary to any complete PAT authorization: 1) that the transfers are recurring; 2) the timing of each transfer; 3) the amount of each transfer and 4) that the consumer is authorizing the PAT. The bulletin is focused on the fourth element – the consumer's authorization or electronic signature. The first three elements would be part of the electronic record.


But following the Bulletin's guidance in this case may not be wise. Simply incorporating requirements 1 through 3 into a form may not satisfy EFTA and Regulation E. If the amounts of the transfers vary, that imposes a different set of requirements. If this will be accomplished under E-Sign, E-Sign carries with it its own set of mandatory disclosures in consumer transactions, which are detailed and may be cumbersome for some to implement.


Delivery of Written Authorization, Electronic or Paper, Can Follow Assent to Authorization


It will not be enough to make a copy of the authorization "available" to the consumer; instead a copy of the authorization must be provided to the consumer. But what has plagued many under the EFTA is the timing of the delivery of the "written agreement" authorizing the PAT. Must it be provided before the PAT begins, at the time of the "authorization," or afterwards?


The Bulletin answers the question by saying that you can obtain an E-Sign signature and then provide the writing separately, either in paper or as an E-Sign electronic record. According to bulletin footnote 20, "Regulation E does not specify that entities must provide a writing to consumers when obtaining the authorization."


Bulletin Does Not Alter E-Sign Requirements for Electronic Records


Now, as far as the PAT written agreement is concerned, the Bulletin correctly states it may be either in paper or E-Sign compliant electronic record form. The Bulletin's statement "Regulation E requires persons that obtain authorizations for preauthorized EFTs to provide a copy of the terms of the authorization to the consumer," can be read as demonstrating that the "written agreement" requirement does not authorize the use of oral recordings to satisfy the writing requirement.


It is probably best to read the Bulletin as the CFPB's attempt to clarify that E-Sign does work in EFTA PAT transactions and that PAT agreements can be provided to the consumer after the agreements become effective.


For more about the EFTA and Regulation E, please sign up to view our webinar here.





Ralph T. Wutscher
Maurice Wutscher LLP
The Loop Center Building
105 W. Madison Street, 18th Floor
Chicago, Illinois 60602
Direct:  (312) 551-9320
Fax: (312) 284-4751

Mobile:  (312) 493-0874


Admitted to practice law in Illinois




California   |   Florida   |   Illinois   |   Indiana   |   Maryland   |   Massachusetts   |   New Jersey   |   New York   |   Ohio   |   Pennsylvania   |   Texas   |   Washington, DC



NOTICE: We do not send unsolicited emails. If you received this email in error, or if you wish to be removed from our update distribution list, please simply reply to this email and state your intention. Thank you.

Our updates and webinar presentations are available on the internet, in searchable format, at:


Financial Services Law Updates




The Consumer Financial Services Blog








California Finance Law Developments




Insurance Recovery Services