Data privacy

Many large internationally active U.S. banks are facing potentially hefty fines if they fail to comply with Europe's General Data Protection Regulation, which takes effect May 25 and gives consumers much more control over how their data is gathered, used and shared.

Acting CFPB Director Mick Mulvaney took heat from Democrats on whether he planned to take the agency's consumer complaint portal private while responding to Republican fears that its data collection activities pose a data security risk.

Mastercard and IBM have founded a company with a very narrow goal: to help organizations scramble their data to thwart hackers and comply with Europe's General Data Protection Regulation.

With consumer privacy issues in the spotlight, Citibank is betting its app — as an offering from a trusted data partner — will be more appealing than those from unknown brands or companies that have less liability if security breaches occur.

The concept of privacy is evolving in the digital age in ways that demand new attention from policymakers. As stewards of considerable personal information, banks should prepare to take part in this debate.

The bank says CEO had no input into $325 million loan to Trump's son-in-law; Fifth Third, First Republic take equity stake in online student loan lender.

Jamie Dimon, chairman and chief executive of JPMorgan Chase, jumped into the growing debate Wednesday over how consumer data is collected and used, responding to concerns about stolen Facebook data.

In many ways, the goal of the GDPR is to increase difficulty for a hacker, while also flipping the rights of data ownership back to the European consumer. U.S. companies that serve European consumers are obligated to follow the regulations.

PCI compliance won't be enough to meet the strict requirements of the General Data Protection Regulation, which takes hold May 25 in Europe.

We entrust tech firms with vast amounts of information about our daily lives, with an expectation that they will safeguard it. But have we become too casual in the trust we place with them in exchange for more personalized experience and convenience?

We entrust tech firms with vast amounts of information about our daily lives, with an expectation that they will safeguard it. But have we become too casual in the trust we place with them in exchange for more personalized experience and convenience?

Both banks and fintech are satisfied for now with the CFPB's nonbinding principles on data-sharing. But the statement may lay the groundwork for future regulation.

Equifax continues work to add new security features and restore full access to The Work Number following a report highlighting potential security vulnerabilities in a browser-based portal of its employment verification service.

A Consumer Financial Protection Bureau proposal would limit how much Home Mortgage Disclosure Act data is released to the public in an effort to protect consumer privacy.

It's not just big banks. Even U.S. community banks may be subject to the General Data Protection Regulation given the boundlessness of digital commerce.

Can the internet giants peek at bank data, or eavesdrop on conversations with customers, sent over their gadgets? Here are the facts and the fuzzy areas.

Quantitative investors, starved for trading signals that can be spun into gold, are pressuring the finance firms they work with to grant them access to proprietary information.

GlobalID stands out from scores of similar companies and projects by attempting to wed self-sovereignty with regulatory compliance. If its technology works, it could alleviate a major cost for banks.

The selling of anonymized customer data may be legal, but it raises ethical questions about the use and protection of that information.

At the recent Google Marketing Next event in San Francisco, Google revealed a new service designed to close the loop between online advertising and offline card payments. It's a service that should have marketers salivating, but it could easily backfire.