Download the Full Letter [PDF]

Legal Division Docket Manager
Consumer Financial Protection Bureau
1700 G Street NW
Washington, DC 20052
Docket No. CFPB-2022-0080
RIN 3170-AB13

Re: Proposed Rulemaking – Registry of Nonbank Covered Persons Subject to Certain Agency and Court Orders

Dear Sir or Madam,

The Conference of State Bank Supervisors (“CSBS”)¹, along with the American Association of Residential Mortgage Regulators (“AARMR”), the National Association of Consumer Credit Administrators (“NACCA”), the North American Collection Agency Regulatory Association (“NACARA”), and the Money Transmitter Regulators Association (“MTRA”) (collectively, “state regulators”), appreciates the opportunity to provide comments on the Notice of Proposed Rulemaking (“NPR”) issued by the Consumer Financial Protection Bureau (“CFPB” or “Bureau”) regarding a Registry of Nonbank Covered Persons Subject to Certain Agency and Court Orders (“CFPB Registry”). The NPR would require certain nonbank entities that have violated federal or state consumer protection laws and are under final public actions issued by local, state, or federal agencies to register with the Bureau and provide up-to-date information on such covered orders. The NPR would also require a senior official from certain supervised nonbanks to provide an annual written statement attesting to compliance with covered orders. Information shared by covered nonbanks, including the identity of the attesting officials, would be published by the Bureau in a new CFPB Registry for use by the public. Commentary within the NPR states the CFPB Registry is necessary to ensure the Bureau and its enforcement partners can identify “repeat offenders” who are failing to adhere to the terms of existing orders or are engaging in additional violations of consumer protection laws. 

State regulators license and regulate a large number and range of nonbank financial services providers, including mortgage lenders and servicers, consumer finance companies, money services businesses, and debt collectors. State regulators utilize the Nationwide Multistate Licensing System & Registry (“NMLS”) for licensing purposes and as a system of record for nonbank firms and individual mortgage loan originators. Congress codified the use of NMLS as a comprehensive licensing and supervisory database for the residential mortgage industry with the passage of the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (“SAFE Act”). State agencies subsequently expanded their use of NMLS to manage license authorities beyond the mortgage industry. Congress and state regulators also recognized that sharing licensing and enforcement information with consumers could empower them to make better educated decisions in the marketplace for nonbank financial services. In 2010, state regulators launched NMLS Consumer Access, a fully searchable website that allows consumers to view information regarding state licensed nonbank entities as well as state licensed and federally registered mortgage loan originators. In place for fifteen years, NMLS is an established registry well known to consumers, nonbank firms, and federal regulators.

In addition to exercising licensing and prudential authority over nonbanks, state regulators supervise for compliance with both state and federal consumer financial laws, a province that is significantly broader than the Bureau’s. The CFPB is authorized to supervise a defined set of industries for compliance with federal consumer financial laws. 

State regulators and the CFPB share the objective of protecting consumers from harmful practices of consumer financial services providers. Like the Bureau, state regulators believe it is prudent to prioritize supervisory efforts on entities that pose the greatest risk of harm to consumers. However, state regulators view the creation of the proposed CFPB Registry as misguided for the following reasons:

• The Bureau has not proven there is a recidivism problem with nonbanks that necessitates the creation of the CFPB Registry, and state regulators effectively protect consumers from repeat offenders. 
• The CFPB Registry will be expansive, costly, and complex for covered nonbank entities, particularly small nonbank firms, and the Bureau notes it will have little impact on consumer behavior. 
• A significant share of covered public enforcement actions are already reported by state regulators and the CFPB in the Nationwide Multistate Licensing System & Registry (“NMLS”), particularly for nonbank entities subject to CFPB supervisory authority. This information is available to the public through NMLS Consumer Access. 
• Requiring attestations of compliance with state actions could position the Bureau to ostensibly exercise supervisory and enforcement authority over laws for which the CFPB has not been granted such authority, and it could pose serious challenges to state supervision and enforcement efforts. 
• The NPR’s Appendix of covered state laws does not provide a comprehensive view of state consumer protection efforts.
   

STATE REGULATORS EFFECTIVELY PROTECT CONSUMERS FROM REPEAT OFFENDERS

A year ago, CFPB Director Rohit Chopra delivered a speech regarding repeat offenders at the University of Pennsylvania. When discussing repeat offenders within the financial sector, the Director referred to repeat violations committed by the largest national banks, noting that the Bureau had taken action specifically against Citigroup, JPMorgan Chase, and Wells Fargo a minimum of four times each.²  Notably, the Director’s remarks did not emphasize a recidivism problem among nonbank financial services providers. 

State regulators are highly concerned by cases in which financial services providers commit repeat violations of consumer protection laws or fail to adhere to the terms of existing orders. However, states have not witnessed widespread issues with or a growing trend of recidivism among nonbanks that would necessitate the creation of the proposed CFPB Registry. Moreover, state regulators have supervisory practices and programs in place to oversee companies subject to regulatory actions with an objective that the firms take appropriate remedial actions and do not continue to harm consumers through ongoing or repeat violations of consumer financial laws. For example, state regulators engage in enhanced monitoring and supervision of financial services providers subject to enforcement actions, which requires ongoing reporting to regulators from entities under state orders. State regulators’ enhanced monitoring and supervision is designed to ensure firms take necessary corrective actions to prevent recurrence of violations. If the company is violating other state or federal consumer protection laws, these are regularly identified during this ongoing monitoring and enhanced supervision as well. Additionally, state regulators frequently coordinate their enforcement orders with one another, the Bureau, and/or other law enforcement partners. 

As an example, the Washington State Department of Financial Institutions (“WA DFI”) cited Quicken (now Rocket Mortgage) for violations of federal advertising laws in 2016 and pursued an unfair, deceptive, or abusive act or practice (“UDAAP”) action against the company. In 2018, state examiners found repeat advertising violations, triggering additional WA DFI investigations as well as a multistate action in 2021, which included twelve states.³  The coordinated action required the company to pay heightened penalties and to establish improved advertising standards. During the multistate examination, the CFPB was kept informed of state efforts through the State Coordinating Committee (“SCC”), a group established by the States under a coordinated supervision framework established with the CFPB in 2013 to share information, maintain consistent standards for examinations, and coordinate examination schedules and allocation of resources. 

State law enforcement officials also work independently as well as in partnership with the CFPB to protect consumers from repeat offenders. In 2020, the CFPB and New York Attorney General filed suit against several nonbank entities involved in a debt collection ring for repeat deceptive practices in violation of the Fair Debt Collection Practices Act (“FDCPA”). In May 2022, the Federal District Court for the Western District of New York issued a judgment that required the defendants to pay $4 million in civil money penalties and permanently banned the entities involved from the debt collection business.⁴ These and other cases illustrate that government agencies, including the Bureau, can identify repeat offenders through existing monitoring and coordination mechanisms. 

THE PROPOSED CFPB REGISTRY PROVIDES LITTLE NEW CONSUMER BENEFIT AT GREAT COST TO SMALL BUSINESSES

The CFPB’s coverage estimates for the NPR, coupled with data from NMLS, indicate that the Bureau will be undertaking significant effort and expense to construct a Registry that primarily captures and impacts small businesses that have never interacted with the Bureau in any other context. First, the Bureau estimates that 155,043 nonbank entities could be offering a covered consumer financial product or service. For context, this represents more than seven times the 21,714 companies over which the CFPB estimates, in a separate proposed rulemaking, that it has supervisory authority.⁵ The Bureau claims that between 1% and 5%, i.e., 1,550 to 7,752 of the 155,043 nonbank firms are likely subject to a covered order, and it is only these firms that would need to report such an order for publication on its proposed CFPB Registry. The Bureau states that because only 1% to 5% of covered nonbanks would need to comply with the NPR’s registration and reporting requirements, the NPR would not have a significant economic impact on a substantial number of small entities. 

However, the Bureau makes no effort to estimate the size or any other relevant characteristics of firms that would be required to register with the CFPB and report a covered order. Since NMLS is currently the most comprehensive registry of nonbank financial services providers, NMLS Call Report data may be used to estimate the number of small firms that might ultimately be subject to the proposed CFPB Registry. Based on their annual receipts, nearly 96% of the over 18,100 state-licensed nonbank NMLS Call Report filers would be classified as “small businesses” by the U.S. Small Business Administration (SBA).⁶ Using NMLS Call Report filers as a proxy, roughly 96% of other nonbank entities offering a covered consumer financial product or service would also likely be classified as small businesses. Applying this proportion to the Bureau’s estimate of the number of firms likely subject to a covered order concludes that roughly 1,448 (96% of 1,550) to 7,442 (96% of 7,752) prospective CFPB registrants would be small businesses. One could reasonably deduce this proposed rule would predominantly impact small nonbank entities. 

The Bureau also states that because covered orders are already public, the NPR would not have a significant economic impact on a substantial number of small entities. However, the NPR underestimates the compliance costs and complexity for nonbank entities. Notably, more than 133,300 of the estimated 155,043 firms offering covered consumer financial products or services, including roughly 128,000 small businesses, are not subject to CFPB supervision and, therefore, have likely never interacted with the Bureau in any regulatory, supervisory, enforcement, or any other context. These firms will be required to undertake complex legal and compliance analyses to understand if and how to comply with the CFPB’s novel self-reporting requirements, and then also register with the Bureau. A small nonbank entity that is not subject to the CFPB’s supervisory authority will likely need to engage legal counsel to help discern and decide if and how it must potentially self-report a covered order issued by a separate agency or court, and simultaneously register with a new agency (the CFPB) it heretofore might not have been aware of and never contemplated as part of its firm’s compliance framework.

Commentary in the NPR suggests that “for firms unsure of their obligations under the proposed provision, one option would be to hire outside legal counsel to advise them on these issues.”⁷ The Bureau also acknowledges this could be costly for small firms. As a second option, the Bureau suggests such firms register with the CFPB, even if doing so is not legally required. Suggesting that nonbank entities comply with the rule because it is cheaper than determining whether compliance is required does not achieve an acceptable level of clarity in rulemaking, and again fails to account for the impact of the rule on small businesses, many of which have limited compliance resources or funds to put toward legal expenses. State regulators are concerned the NPR raises more questions about if, when and how a nonbank entity might be required to report an order to the CFPB than could be reasonably expected of such firms to understand or comply.

State regulators fully expect small businesses to comply with any and all state and federal consumer financial laws. Additionally, state regulators recognize that complying with regulatory requirements often necessitates costs and degrees of complexity, irrespective of a regulated entity’s size. Therefore, regulatory costs and complexities must be weighed against their benefits. To this point, the Bureau makes a curious and problematic summation regarding the ultimate benefit to consumers of creating this expansive, costly, and complex new CFPB Registry for companies that it does not supervise: “[The Bureau] believes that most consumers would not change their behavior due to this proposed [CFPB Registry],” and it implicitly acknowledges that the covered orders published on the CFPB Registry would not constitute the type of “impactful information disclosures” that would “materially affect consumer decision-making.”⁸  

NMLS CONTAINS INFORMATION ON PUBLIC ORDERS FOR MOST STATE AND CFPB-SUPERVISED NONBANKS

The Bureau states that one of the primary goals of the proposed CFPB Registry is to aid it and other regulatory partners, such as state regulators, in prioritizing certain firms for risk-based supervision. However, the proposed CFPB Registry would add little value to either the Bureau’s or state regulators’ efforts to prioritize certain companies for risk-based supervision because a significant share of covered orders on CFPB-supervised nonbank entities are currently reported in NMLS. 

As previously noted, the CFPB does not have supervisory authority over 86% of the 155,043 nonbank entities it estimates could be offering a covered consumer financial product or service. Again, the Bureau estimates in a separate proposed rulemaking that roughly 21,714 nonbank entities are likely subject to its supervisory authority.⁹  For CFPB-supervised nonbanks subject to a covered order, the Bureau proposes a more substantial reporting and executive attestation regime (“Supervisory Reports Provision”), if such company has more than $1 million in annual receipts. State regulators wish to first comment on the scope of the reporting aspects of the Supervisory Reports provision and then will address the annual executive attestation requirement in more detail.

Since the CFPB Registry NPR makes no attempt to estimate the number of nonbank entities subject to the Bureau’s supervisory authority, it also fails to estimate how the proposed annual receipts exemption might narrow the larger universe of CFPB-supervised covered nonbanks that would ultimately be subject to the Supervisory Reports Provision. Here again, NMLS Call Report data can be used to estimate the number of CFPB-supervised firms that will be subject to the NPR’s more substantial reporting requirements. Nearly 26% of NMLS Call Report filers, i.e., 4,643 of over 18,100 companies, reported 2022 annual receipts of more than $1 million. Using this NMLS data as a proxy, roughly 26% of the 21,714 CFPB supervised entities would have more than $1 million in annual receipts and be subject to the Supervisory Reports Provision. If, as the Bureau estimates, only 1% to 5% of those 5,646 firms are subject to a covered order, then the CFPB Registry would provide regulatory insight for “risk-based supervision” purposes on only about 56 to 282 companies over which the CFPB has supervisory authority. 

However, there is reason to believe that a significant share of the covered order information captured by the proposed CFPB Registry on these 56 to 282 CFPB-supervised nonbank entities is likely already available in NMLS Consumer Access. There are currently over 31,000 nonbank entities licensed by state regulators through NMLS, including all mortgage companies, most money services businesses (“MSBs”), and many other types of nonbanks such as consumer finance companies and debt collectors. Covered orders issued by state regulators on these 31,000 nonbank companies would already be published on NMLS Consumer Access, as well as covered orders issued by the CFPB on nonbank entities subject to its supervisory authority. 

In 2022, state agencies posted 1,382 public regulatory actions in NMLS Consumer Access, and the CFPB posted 28 actions it had taken against companies and individuals in NMLS. In the same year, NMLS Consumer Access received more than 196.5 million page views from more than 8.4 million visitors.¹⁰ As noted by the Bureau in the proposal commentary, NMLS does not cover all nonbank industries, but the discrepancy between the number of nonbank entities licensed by states through NMLS and the number of firms subject to CFPB supervisory authority appears negligible. The proposed CFPB Registry will likely be largely duplicative of NMLS and provide little new insight for risk-based supervision purposes, particularly for the mortgage and MSB industries.

State regulators strongly recommend that the Bureau not build and maintain its own public CFPB Registry given the cost and confusion it could cause nonbank financial services companies that are already licensed and registered through the statutorily authorized NMLS, as well as the confusion it could cause consumers and other public users of NMLS Consumer Access. However, if the Bureau chooses to proceed with its own public CFPB Registry, state regulators highly recommend that the CFPB exempt companies from the requirement of filing any public order that is already published on NMLS Consumer Access. Such an exemption would help minimize company, consumer, and other public user confusion when utilizing both NMLS Consumer Access and the proposed CFPB Registry.  

EXECUTIVE ATTESTATIONS WILL INFRINGE UPON STATE AUTHORITY AND FRUSTRATE STATE SUPERVISION AND ENFORCEMENT EFFORTS 

State regulators have serious concerns regarding the potential impacts of the NPR on state supervision and enforcement efforts, particularly the requirements regarding executive attestation of covered orders at covered nonbanks for which the CFPB has supervisory authority. The CFPB’s efforts to require nonbank entities to annually attest to complying with covered orders issued by a state, especially orders based on violations of state or local law, appears to be an effort by the Bureau to ostensibly exercise supervisory and enforcement authority over laws for which it has not been granted such authority. In addition, requiring executive attestations for state orders based on violations of federal consumer financial laws is onerous, duplicative, unnecessary, and may ultimately weaken the original regulatory action and order. 

According to the NPR, nonbank entities that are subject to CFPB supervision, under a covered order, and have more than $1 million in annual receipts are required to appoint an executive who will attest, on an annual basis, to the company’s compliance with the reported orders. Covered orders often require and direct companies to take numerous actions, such as rectifying any harm to consumers and remediating the underlying deficiencies that led to the initial violations. By virtue of their terms and requirements, ongoing supervision and enforcement efforts are part and parcel of these covered orders. In such instances where covered orders, and their associated actions, are based on violations of state and/or local consumer financial laws, the NPR will require companies to submit annual attestations to the CFPB regarding compliance with laws for which the Bureau has no supervisory or enforcement related authority. The CFPB fundamentally lacks the requisite authority to “monitor” individual nonbank entities and hold company executives accountable for compliance with state orders based on violations of state consumer financial laws. Moreover, as noted earlier, state regulators conduct enhanced supervision and ongoing monitoring of companies that are subject to such orders.

The attestation requirement will also include covered orders based on violations of federal consumer financial laws. Congress has granted state regulators the authority to enforce federal consumer financial laws at state-licensed nonbank entities, and they may take unilateral action against a company for violating a federal consumer financial law. Irrespective of whether a federal consumer protection law has been violated, the attestation requirement could frustrate a state regulator’s ability to effectively resolve supervisory matters or to finalize enforcement orders if the nonbank entity is concerned about becoming subject to new layers of CFPB legal liability (for both individual officials and the company) and additional reporting requirements. At a minimum, this requirement will unnecessarily overlap with and complicate state efforts to supervise nonbanks for compliance with federal law. 

Ultimately, the implication of the proposed executive attestation requirement is that the Bureau has authority and responsibility to follow up on and enforce actions entered into by other agencies. However, they have not demonstrated such a need nor the authority to do so. As previously noted, state regulators have a record of effective follow-up actions and are confident they can rely on their own supervision and monitoring of firms with enforcement actions without the need for additional, annual attestations required by the CFPB. 
Moreover, state regulators maintain that our established information sharing and supervisory coordination protocols with the CFPB provide the most effective and straightforward means for the Bureau and state regulators to raise concerns and identify potential instances of recidivism at nonbank entities. State regulators look forward to continued collaboration with the Bureau in these settings to ensure nonbank entities are complying with consumer financial laws and providing consumers with safe and fair products and services.

THE PROPOSAL INTRODUCES OTHER COMPLEXITIES AND CONFUSION FOR COVERED ENTITIES AND CONSUMERS

The Bureau has not provided enough clarity on how it might identify repeat offenders, and specifically what it means to be a repeat offender, based on the various facts, circumstances, and potential violations that lead to a public order. This ambiguity raises questions including:

• Is a nonbank considered a repeat offender only if it has violated the same consumer financial law multiple times, or is an entity with multiple violations of different consumer protection laws also considered a repeat offender? 
• Would an entity be considered a repeat offender if it has certain violations that are administrative or licensing related and others that are consumer related? 
• How would the same or similar violations across different business lines be treated? 
• What if multiple states take unilateral action for a firm’s violation of the same consumer financial law? Could violations of certain administrative laws be interpreted by the Bureau to be violations of state UDAP/UDAAP laws? 

It seems unlikely that these questions could be clarified to the degree necessary for nonbank entities with a covered order to understand their reporting and/or attestation obligations to the Bureau, especially given the vast majority of these orders would be entered into with enforcement agencies other than the CFPB.  

In addition to causing confusion for covered entities, the NPR is likely to cause confusion for consumers and other public users of the proposed CFPB Registry. As evidenced by the volume of page views, many consumers utilize NMLS Consumer Access to search for information about state-licensed nonbanks, including information on public enforcement actions. Most states require nonbank mortgage lenders to display their NMLS unique company identification numbers, which are prominently displayed in radio, TV, and print advertising. Consumers can easily use this information to conduct due diligence prior to conducting transactions with a nonbank or state-licensed individual. Consumers visiting either the proposed CFPB Registry or NMLS Consumer Access may be confused as to why they are unable to locate information on certain companies on one site and not the other. Additionally, identical or similar information on the same company published in different formats by different online tools may frustrate consumers looking for critical financial services information. Commentary within the NPR indicates that the CFPB Registry will improve the Bureau’s consumer education efforts, but the Bureau does not offer any data to quantify these benefits and, again, notes that its CFPB Registry will not contain “impactful information disclosures” that will “materially affect consumer decision-making.”¹¹ 

STATE CONSUMER PROTECTION EFFORTS GO WELL BEYOND THE APPENDIX OF COVERED STATE LAWS 

The Appendix of state laws contained within the NPR does not paint a complete picture of state consumer protection efforts. Much of the consumer protection work conducted by state regulators takes place using business conduct related laws or other provisions that are not covered laws under the NPR. State regulators may choose to utilize these laws to protect consumers because state UDAP/UDAAP authority rests with the Attorney General’s Office or simply because the laws are the best fit for the situation. NMLS Consumer Access includes information on actions related to violations of covered consumer protection laws as well as actions related to licensing or administrative violations that would not be covered under the NPR. Therefore, it provides consumers with a more complete picture of nonbank enforcement actions than will be provided by the proposed CFPB Registry. In addition, the Appendix contains laws that may be inapplicable or outdated in certain states. As an example, users of the CFPB Registry may not find any enforcement actions related to certain payday lending laws in states that have recently enacted usury laws that cap rates at 36%. The Bureau or other users of the public CFPB Registry could draw inaccurate conclusions based on what they perceive to be gaps in enforcement for certain laws, industries, or geographies. 

CONCLUSION

The state system of licensing and supervising nonbank entities serves as a strong line of protection for consumers engaging in transactions with these firms. Consumers are well served by the existing framework that allows for state licensing and registration of nonbanks and for states and the CFPB to act as co-enforcers of federal consumer protection laws. When violations of consumer protection laws are identified, state regulators work independently, together, and/or in partnership with the CFPB to hold companies accountable. The Bureau has not proven there is a recidivism problem with nonbanks that necessitates building a new CFPB Registry that will be costly and complex for companies and will not provide any identified benefit for consumers but, instead, will likely cause industry and consumer confusion. These structural deficiencies are exacerbated by the fact the Bureau has no supervisory or enforcement authorities that allow it to require companies to comply with state consumer financial laws or other state laws. 

State regulators reiterate their request for the Bureau to reconsider the creation of the proposed CFPB Registry. If the Bureau chooses to proceed, state regulators ask that the CFPB exempt companies from the requirement of filing a public order if the order is already published on NMLS Consumer Access. State regulators would welcome the opportunity to discuss these comments in more detail as the Bureau considers next steps for the NPR.  

Sincerely,

James M. Cooper    
President & CEO  
CSBS  

Clifford Charland
President
AARMR

Zak Hingst    
President    
NACCA    

Erin Van Engelen
President
NACARA

Ingrid White
President
MTRA

---

Footnotes

1 - CSBS is the nationwide organization of state banking and financial regulators from all 50 states, American Samoa, the District of Columbia, Guam, Puerto Rico, and the U.S. Virgin Islands. CSBS supports the state banking agencies by serving as a forum for policy and supervisory process development, by facilitating regulatory coordination on a state-to-state and state-to-federal basis, and by facilitating state implementation of policy through training, educational programs, and exam resource development.

2 - Prepared Remarks of CFPB Director Rohit Chopra. “Reining in Repeat Offenders.” 2022 Distinguished Lecture on Regulation. University of Pennsylvania. March 28, 2022. Available here: cfpb_reining-in-repeat-offenders_cited-lecture_2022-03.pdf (consumerfinance.gov) 

3 - Washington Department of Financial Institutions Press Release, “WA DFI Finalizes Multi-State Settlement Regarding Rocket Mortgage, LLC’s Advertising Practices. September 23, 2021. Available here: WA DFI Finalizes Multi-State Settlement Regarding Rocket Mortgage, LLC’s (F/K/A Quicken Loans, LLC) Advertising Practices

4 - CFPB Press Release, “CFPB and New York Attorney General Shut Down Debt Collection Ring.” May 23, 2022. Available here: CFPB and New York Attorney General Shut Down Debt Collection Ring | Consumer Financial Protection Bureau (consumerfinance.gov)

5 - The CFPB provides this estimate in Registry of Supervised Nonbanks That Use Form Contracts to Impose Terms and Conditions That Seek to Waive or Limit Consumer Legal Protections. Available here: https://files.consumerfinance.gov/f/documents/cfpb_registry-of-supervised-nonbanks_2023-01.pdf 

6 - For example, the SBA considers “Real Estate Credit” or “Consumer Lending” companies with less than $47 million in annual receipts to be small businesses. See “Table of Small Business Size Standards Matched to North American Industry Classification System Codes.” U.S. Small Business Administration. Available here: SBA Table of Size Standards

7 - Page 177 of Registry NPR PDF. Available here: Registry of Nonbank Covered Persons Subject to Certain Agency and Court Orders (consumerfinance.gov)

8 - The Supplementary Information notes this in both the “Dodd-Frank Act Section 1022(b)(2) Analysis” and “Regulatory Flexibility Act Analysis” on pages 186 & 199.

9 - CFPB Proposed Rulemaking: Registry of Supervised Nonbanks That Use Form Contracts to Impose Terms and Conditions That Seek to Waive or Limit Consumer Legal Protections. Available here: Registry of Supervised Nonbanks that Use Form Contracts to Impose Terms and Conditions that Seek to Waive or Limit Consumer Legal Protections (consumerfinance.gov)

10 - Source: NMLS Data

11 - Pages 186 & 199 of Registry NPR PDF. Available here: Registry of Nonbank Covered Persons Subject to Certain Agency and Court Orders (consumerfinance.gov)