Data Security Feed Link

Data Security

With identity theft a widespread issue in the financial services industry, banks and ARM companies are under increased pressure to ensure consumers’ sensitive identification, contact, and financial information is kept safe. In fact, a number of recent state and federal laws and regulations codify certain requirements for handling financial data.

Firms in the ARM industry must adhere to a host of standards, including the Payment Card Industry Data Security Standard (PCI DSS), the financial privacy and safeguards rules in the Gramm–Leach–Bliley Act (GLBA), the FTC’s Red Flags Rule for identity theft, information security standard ISO 27002, HIPAA and the HITECH Act for the healthcare sector, and the Federal Information Security Management Act of 2002 (FISMA) for those collecting on government contracts. Auditing standard SAS 70 is also required for many in the financial services industry that use outside vendors such as debt collection agencies.

CFPB

Senate Hearing on CFPB Focuses on Data Collection and Supervision

Consumer Financial Protection Bureau (CFPB) Director Richard Cordray was on Capitol Hill Monday testifying before the Senate Committee on Banking, Housing, and Urban Affairs. The hearing was to discuss the CFPB’s semi-annual oversight report to Congress. While debt collection was noted in Cordray’s opening remarks, the majority of time was spent following up on a recent news report about the CFPB’s Big Data collection efforts.