Newsroom
September 22, 2014
GAO report echoes NAFCU concerns with CFPB data collection
A Government Accountability Office report Monday on CFPB's data collection activities echoes numerous concerns raised by NAFCU regarding privacy and security procedures that should be enhanced by CFPB in implementing its data collections.
The report is in response to 12 different large-scale data collections by CFPB.
"NAFCU, in its comment letter to FHFA in May, highlighted some privacy and transparency concerns regarding the data collection efforts of the FHFA and CFPB," Meyster said. "This GAO report notes many of the same concerns, and we'd like to see even more from the CFPB in terms of transparency and accountability when it comes to its data collection efforts."
The GAO report found that "CFPB lacks written procedures and comprehensive documentation for a number of its processes, including data intake and information security risk assessments." GAO recommended that CFPB establish written standards for its data intake, making data anonymous and assessing and managing privacy risk, among other things. It also noted that CFPB has not yet fully implemented a number of privacy control steps and security practices and recommended that the bureau obtain periodic, independent reviews of its privacy processes, and update its remedial action plan.
GAO also expressed concern over compliance with the Paperwork Reduction Act and recommended that CFPB consult with the Office of Management and Budget about "its credit card collection and data-sharing agreement."
The report is in response to 12 different large-scale data collections by CFPB.
"NAFCU, in its comment letter to FHFA in May, highlighted some privacy and transparency concerns regarding the data collection efforts of the FHFA and CFPB," Meyster said. "This GAO report notes many of the same concerns, and we'd like to see even more from the CFPB in terms of transparency and accountability when it comes to its data collection efforts."
The GAO report found that "CFPB lacks written procedures and comprehensive documentation for a number of its processes, including data intake and information security risk assessments." GAO recommended that CFPB establish written standards for its data intake, making data anonymous and assessing and managing privacy risk, among other things. It also noted that CFPB has not yet fully implemented a number of privacy control steps and security practices and recommended that the bureau obtain periodic, independent reviews of its privacy processes, and update its remedial action plan.
GAO also expressed concern over compliance with the Paperwork Reduction Act and recommended that CFPB consult with the Office of Management and Budget about "its credit card collection and data-sharing agreement."
Share This
Related Resources
Add to Calendar 2024-06-26 14:00:00 2024-06-26 14:00:00 Gallagher Executive Compensation and Benefits Survey About the Webinar The webinar will share trends in executive pay increases, annual bonuses, and nonqualified benefit plans. Learn how to use the data charts as well as make this data actionable in order to improve your retention strategy. You’ll hear directly from the survey project manager on how to maximize the data points to gain a competitive edge in the market. Key findings on: Total compensation by asset size Nonqualified benefit plans Bonus targets and metrics Prerequisites Demographics Board expenses Watch On-Demand Web NAFCU digital@nafcu.org America/New_York public
Gallagher Executive Compensation and Benefits Survey
preferred partner
Gallagher
Webinar
Add to Calendar 2024-06-21 09:00:00 2024-06-21 09:00:00 The Evolving Role of the CISO in Credit Unions Listen On: Key Takeaways: [01:30] Being able to properly implement risk management decisions, especially in the cyber age we live in, is incredibly important so CISOs have a lot of challenges here. [02:27] Having a leader who can really communicate cyber risks and understand how ready that institution is to deal with cyber events is incredibly important. [05:36] We need to be talking about risk openly. We need to be documenting and really understanding what remediating risk looks like and how you do that strategically. [16:38] Governance, risk, compliance, and adherence to regulatory controls are all being looked at much more closely. You are also seeing other technology that is coming into the fold directly responsible for helping CISOs navigate those waters. [18:28] The reaction from the governing bodies is directly related to the needs of the position. They’re trying to help make sure that we are positioned in a way that gets us the most possibility of success, maturing our postures and protecting the institutions. Web NAFCU digital@nafcu.org America/New_York public
The Evolving Role of the CISO in Credit Unions
preferred partner
DefenseStorm
Podcast
AI in Action: Redefining Disaster Preparedness and Financial Security
Strategy
preferred partner
Allied Solutions
Blog Post
Get daily updates.
Subscribe to NAFCU today.