Unfair, deceptive, and abusive acts or practices are governed by three distinct statutory tests, not one blanket standard, and enforcement authority splits by institution size and charter.
Published for comment in August 2025 and held for further work in May 2026, the proposal would route machine output through Rule 702's reliability requirements. Here is what the text says, what the 59…
A federal court has stayed the tiered compliance dates for the CFPB's open-banking data-access rule while the bureau reconsiders its fee, privacy, and representative-authorization provisions.
Predictive coding has been accepted in federal courts for over a decade, but acceptance never meant a court can order you to use it. Here is how the workflow, the proportionality math, and the…
The CFPB's Section 1033 open-banking rule takes effect in stages from April 30, 2026. Here is what the final rule requires of banks, fintechs, and data aggregators.
New York's amended cybersecurity regulation 23 NYCRR 500 imposes a 72-hour ransomware reporting duty and phase-in obligations that conclude in November 2025.
The AI Act's transparency and copyright duties for general-purpose AI models became binding on August 2, 2025, reaching US legaltech and regtech vendors with EU customers.
From Unified Agenda entry to effective date, the Administrative Procedure Act sets the floor and Executive Order 12866 and the Congressional Review Act set the calendar. A practitioner's map of the…