Compliance

The Consumer Financial Protection Bureau made it clear that consumers own their financial data and can share it with apps of their choice. Now it’s up to the industry to resolve thorny issues on liability and accountability.

KRACK, combined with other attacks, allows for the reading of pain text username, passwords, credit card numbers as well as the injection of code including ransomware, writes Timothy Crosby, senior security consultant for Spohn.

The CFPB's practice of "regulation by enforcement" forces mortgage companies to develop compliance standards based on the mistakes of their peers, rather than clear guidance from the enforcement agency, said David Motley, the new chairman of the Mortgage Bankers Association.

Both banks and fintech are satisfied for now with the CFPB's nonbinding principles on data-sharing. But the statement may lay the groundwork for future regulation.

Equifax continues work to add new security features and restore full access to The Work Number following a report highlighting potential security vulnerabilities in a browser-based portal of its employment verification service.

The answer is to change the authentication framework altogether with new technologies that employ passive biometrics and behavioral analytics, writes Ryan Wilk, vice president of customer success at NuData Security.

The problem could be even worse this year, thanks to a new round of consumer data breaches, including the huge Equifax breach that exposed protected data on more than 145 million Americans, writes Rafael, executive vice president at ClearSale.

As incidents such as the Equifax breach create more urgency to move beyond static identifiers and authentication methods, Visa is getting aggressive about pushing dynamic tools to vet and shield identity.

American Express' incoming CEO may have to fundamentally change how the company makes money, if regulators and the Supreme Court side against it.

There's never an easy time to change leaders, but for American Express it's a particularly challenging time as it faces legal challenges to a core part of its fee structure and is still revamping its business model after a stinging client loss.