On behalf of the Electronic Privacy Information Center (EPIC), the NYU Tech Law and Policy Clinic filed a complaint with the Consumer Financial Protection Bureau against financial technology company Rocket Money (formerly Truebill), alleging unfair, deceptive, and abusive trade practices and violations of the the Fair Credit Reporting Act.
Moreover, Rocket Money operates as a consumer reporting agency but fails to abide by the requirements for consumer reporting agencies set out in the Fair Credit Reporting Act (FCRA). For example, it shares reports about its customers without having a “permissible purpose” to do so. Rocket Money likewise obtains and uses its customers’ credit reports to engage in self-promotional marketing, another violation of the FCRA.
With this filing, EPIC further expands its advocacy for consumer protection and data privacy into the fintech space. EPIC has commented on the Consumer Financial Protection Bureau inquiry into big tech payment platforms and recommended that the Bureau strengthen Buy Now Pay Later data practices. EPIC also recently advocated that the Federal Trade Commission use all of its authorities to protect consumers, including its Section 5 rulemaking authority to promulgate a commercial surveillance rule and establish a data minimization rule. EPIC encourages the CFPB to protect consumers from data privacy harms in the fintech industry.