Compliance Blog

Feb 12, 2018

Rumor Has It…Exams Include Website Reviews

NAFCU has been hearing from members that examiners are conducting website reviews as part of recent examinations. A credit union's website can contain advertising content as well as impact other areas of compliance. Here are some things to consider if conducting a review is on your radar.

Advertising Content

Keep in mind that federal regulations define advertisement quite broadly. For example, under Regulation Z, an ad is "a commercial message in any medium that promotes, directly or indirectly, a credit transaction." NCUA's Truth in Savings rule is similarly broad, as is NCUA's general advertising rule. As a result, much of a credit union's website could include content that federal regulation considers to be an advertisement. Below are several regulatory provisions that may impact a credit union's website due to its advertising content:

  • Use of the Official NCUA Sign and Advertising Statement – Section 740.4(a) requires credit unions to display the official sign "on its Internet page, if any, where it accepts deposits or opens accounts." Section 707.5 requires a credit union's website to state "federally insured by NCUA," but this can be accomplished using the official sign. However, if a particular credit union page has information about investment-type products that are not insured, such as those offered through a CUSO, it could be problematic to include this information if it insinuates that uninsured products are insured.
  • Accuracy of Advertising – Section 740.2 generally prohibits insured credit unions from any advertisement that is "inaccurate or deceptive in any particular, or which in any way misrepresents its services, contracts, or financial condition." There is no staff commentary and not much guidance as to what might be deceptive or a misrepresentation, but these kinds of considerations often involve judgement calls made from a consumer's perspective.
  • Deposit Accounts and the TIS Advertising Rule – If website content promotes share accounts, section 707.8 prohibits such advertisements from being misleading or inaccurate. This includes limits on when an account can be described as "free" and a requirement to state the "annual percentage yield" if the ad states a rate of return (APY may be used after the unabbreviated term is used at least once). Where the APY is stated, additional disclosures are also triggered as applicable including:
    • A statement that the rate may change, if a variable rate account;
    • The period of time the APY will be offered for interest and dividend bearing term share accounts;
    • The minimum balance required to earn the advertised APY;
    • The minimum deposit required to open the account to hear the APY, if greater than the minimum balance;
    • A statement about fees; and
    • If a share term account, disclosures regarding the term of the account, early withdrawal penalties, and specific disclosures for noncompounding term share accounts with a stated maturity of over a year.

There are also specific disclosures triggered if a bonus is stated in an advertisement for an account and requirements if overdraft features are promoted. However, the staff commentary to the rule allows for some flexibility here to provide some disclosures a click away:

"9. Electronic advertising. If an electronic advertisement, such as an advertisement appearing on an internet Web site, displays a triggering term, such as a bonus or annual percentage yield, the advertisement must clearly refer the member to the location where the additional required information begins. For example, an advertisement that includes a bonus or annual percentage yield may be accompanied by a link that directly takes the member to the additional information.” (Emphasis added.) See, 12 C.F.R. Part 707, App. C, comment 707.8(a)-9.

  • Regulation Z – Content that promotes a credit product will have Reg Z implications. Section 1026.16 applies to open-end credit products and section 1026.24 applies to closed-end credit products. Both of these rules contain "trigger terms" that, if used, require additional disclosures. Of course, these terms are not the same for open-end versus closed-end credit, or home-secured versus non-home-secured loans. For example, the rate or APR when used for open-end credit products NAFCU has articles for members on open-end credit ads and home secured ads which may help. But like the TIS rule, Reg Z does contain commentary about providing some disclosures a click away in an electronic format, here is an excerpt:

Paragraph 16(c)(1)

[…]

2. Electronic advertisement. If an electronic advertisement (such as an advertisement appearing on an Internet Web site) contains the table or schedule permitted under §1026.16(c)(1), any statement of terms set forth in §1026.6 appearing anywhere else in the advertisement must clearly direct the consumer to the location where the table or schedule begins. For example, a term triggering additional disclosures may be accompanied by a link that directly takes the consumer to the additional information.” (Emphasis added.) See12 C.F.R. Part 1026, Supp. I, comments 1026.16(c)(1)-1 and -2.

For closed-end credit, there are more specific provisions in section 1026.24(e) and its commentary.

  • Other Lending Implications Section 701.31(d) requires the "equal housing lender" logo on real estate related advertising, or "any other method reasonably calculated to satisfy the notice requirement," although there is no guidance as to what this alternative may be. As a result, the logo is generally used. Also if the credit union accepts loan applications online, keep in mind that the same fair lending type considerations would be in play on web based applications as well.

 

Electronic Funds Transfers and Other Account Considerations – Credit unions that offer EFTs or open accounts online may want to consider that Regulation E requires certain disclosures to be made "at the time a consumer contracts for an electronic fund transfer service or before the first [EFT] is made involving an account." Where accounts are offered or opened online, Regulation CC requirements regarding the credit union's funds availability policy and another possible disclosure requirement.

 

Weblinking – If the credit union links to third-party websites, keep in mind NCUA's guidance on weblinking, such as "speed bumps":

COPPA – Websites can have implications under the Children's Online Privacy Protection Act (COPPA) rules. Making determinations as to the applicability of COPPA generally requires an analysis of the specific facts and circumstances of the credit union's situation against the requirements of the rule. COPPA can apply to any internet services you provide, such as online banking.  The credit union may be accessing information through things like cookies or similar internet devices that often collect nonpublic personal information. The FTC’s rule implementing COPPA is located in 16 CFR 312. If a credit union is “collecting” information from minors under the age of 13 you will need to comply with the COPPA requirements.

Overall, considering the credit union's website content from the perspective of how it would be reviewed if it were in print (e.g., an ad, an application, etc.) can be helpful in reviewing for compliance. Also, while not specific to exams, many credit unions are also considering the Americans with Disabilities Act as well when reviewing their websites.

About the Author

Brandy Bruyere, NCCO, Vice President of Regulatory Compliance/Senior Counsel, NAFCU

Brandy Bruyere, NCCO, Vice President of Regulatory ComplianceBrandy Bruyere, NCCO was named vice president of regulatory compliance in February 2017. In her role, Bruyere oversees NAFCU's regulatory compliance team who help credit unions with a variety of compliance issues.

Read full bio