State Enforcement As A Federal Legislative Tool

Rohit Chopra [*] & Seth Frotman [**]  View PDF

Abstract

Enacted in the wake of the 2008 financial crisis, the Consumer Financial Protection Act (“CFPA”)—which was Title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act (“Dodd-Frank”)—made sweeping changes to the federal framework for consumer financial protection. This law created the Consumer Financial Protection Bureau (“CFPB”) and included a broad range of new protections for consumers, as well as a wide variety of tools for law enforcement and regulators to enforce the Act’s provisions.1See infra Part II Section C. Among the most important features of the CFPA is its embrace of cooperative federalism. Specifically, section 1042 of the CFPA empowers states to enforce federal consumer financial protections against entities covered by the CFPA,2See Dodd-Frank Wall Street Reform and Consumer Protection Act § 1042, 12 U.S.C. § 5552. and section 1044 safeguards state efforts to build on federal protections.3See 12 U.S.C. § 25b.

This article examines the use of the CFPA by state law enforcement agencies. Our analysis finds that all fifty states have collectively participated in about fifty total actions using this authority across the country, regardless of the political party of state officials.4See infra Part III Section A. For reference, the CFPB itself filed about 350 enforcement actions in total from its founding in 2011 through January 2024. See CFPB, Enforcement by the Numbers, https://www.consumerfinance.gov/enforcement/enforcement-by-the-numbers/ [https://perma.cc/2RSE-VNGY]. We also find that this cooperative federalism model and the use of the CFPA by states has been successful in ensuring robust protections for consumers, complementing in several significant ways federal enforcement of the federal consumer financial protection laws, as well as private enforcement by individual citizens of many of those laws. Given this success, state law enforcement officials may wish to utilize this tool even more in the coming years. In turn, the article highlights the power of cooperative federalism to ensure the comprehensive enforcement of federal law, a lesson that lawmakers could carry into more policy areas.

I. Introduction

The Commission concludes that . . . the Office of the Comptroller of the Currency and the Office of Thrift Supervision preempted the applicability of state laws and regulatory efforts to national banks and thrifts, thus preventing adequate protection for borrowers and weakening constraints on this segment of the mortgage market.5Fin. Crisis Inquiry Comm’n (FCIC), The Financial Crisis Inquiry Report 125–26 (2011).

On July 21, 2010, President Barack Obama signed the Dodd-Frank Wall Street Reform and Consumer Protection Act (“Dodd-Frank”) into law.6Dodd-Frank Wall Street Reform and Consumer Financial Protection Act of 2010, Pub. L. No. 111-203 (codified as amended in scattered sections of 7, 12, and 15 U.S.C.). This legislation marked the “most far reaching Wall Street reform in history.”7Wall Street Reform: The Dodd-Frank Act, Obama White House (last visited Sept. 29, 2024), https://obamawhitehouse.archives.gov/economy/middle-class/dodd-frank-wall-street-reform [https://perma.cc/UYF7-KUCY]. Title X of this new law, the Consumer Financial Protection Act (“CFPA”), made wholesale changes to the federal framework for consumer financial protection.8See Dodd-Frank Wall Street Reform and Consumer Financial Protection Act of 2010, Pub. L. No. 111-203, §§ 1001–1100H (codified at 12 U.S.C. §§ 5301–5641). Many of these reforms addressed the federal regulators that had previously been charged with consumer protection and the rules they had made to carry out this role, which had not prevented—and indeed may have helped cause—the financial crisis and the massive harms it inflicted on consumers.9See FCIC, supra note 5, at 75–80. Perhaps the most visible example of reforms along these lines was the creation of the Consumer Financial Protection Bureau (“CFPB”)—a “transformative” new federal consumer financial regulator headquartered in Washington, D.C.10Fact Sheet: President Obama Announces Final Rules to Better Protect Service Members from Financial Abuse on Fifth Anniversary of Signing Wall Street Reform into Law, Obama White House (July 21, 2015), https://obamawhitehouse.archives.gov/the-press-office/2015/07/21/fact-sheet-president-obama-announces-final-rules-better-protect-service [https://perma.cc/BYV6-CUAA]. Yet, notwithstanding the focus on, and importance of, these changes with respect to federal regulators, one of the CFPA’s most innovative and important features involves state law enforcement and regulators. This article tells that story.

In particular, this article examines the wide, bipartisan success that state law enforcement has had in bringing claims against consumer finance companies under the CFPA, which gives states the ability to enforce the protections of the federal consumer financial laws,11See 12 U.S.C. § 5552; see also Authority of States to Enforce the Consumer Financial Protection Act of 2010, 87 Fed. Reg. 31940 (May 26, 2022) (explaining state authority to address violations of the federal consumer financial laws committed by “covered persons” and “service providers” as violations of the CFPA). while also providing important safeguards against federal preemption of state law.1212 U.S.C. § 25b. In doing so, this article highlights the power of cooperative federalism to ensure the robust and comprehensive combatting of consumer harm. This regime has also complemented private enforcement of some of these consumer protections by individual citizens, especially as this private enforcement has been curtailed in some respects.13See infra Part II Section A.

Academic literature points to several different congressional rationales behind provisions that specifically allow for dual enforcement of federal law by the federal government and states, which has been concentrated in the areas of consumer protection and antitrust.14See Amy Widman & Prentiss Cox, State Attorneys General’s Use of Concurrent Public Enforcement Authority in Federal Consumer Protection Laws, 33 Cardozo L. Rev. 53, 55 (2011); see generally Mark Totten, Credit Reform and the States: The Vital Role of Attorneys General After Dodd–Frank, 99 Iowa L. Rev. 115 (2013); Arthur E. Wilmarth, Jr., The Dodd–Frank Act’s Expansion of State Authority to Protect Consumers of Financial Services, 36 J. Corp. L. 893 (2011). These motivations include a desire to overcome limitations inherent in reliance on only federal enforcers, such as federal agencies having limited resources that states can complement;15See Widman & Cox, supra note 14, at 58. a perception of increased consumer harm throughout the mid-20th century, necessitating an enhanced response;16See id. at 78. and a hope that multi-state actions could address cross-state misconduct that would otherwise require successive actions across individual states.17See id. at 58. Scholars have also noted that dual enforcement allows states to tailor the application of law to local customs, markets, and institutions;18See Stephen Calkins, Perspectives on State and Federal Antitrust Enforcement, 53 Duke L.J. 673, 679–81 (2003); Philip J. Weiser, Federal Common Law, Cooperative Federalism, and the Enforcement of the Telecom Act, 76 N.Y.U. L. Rev. 1692, 1698–700 (2001). to permit states to “experiment”;19See Weiser, supra note 18, at 1701–03. and to more effectively deliver monetary recoveries to consumers.20See Calkins, supra note 18, at 691–93.

As demonstrated in the examples discussed below, by giving authority to a decentralized group of law enforcement officials, Congress in section 1042 of the CFPA ensured that consumer financial protection is far more comprehensive and effective than it would have been if only regulators at the federal level had authority to address violations of the federal consumer financial laws. Specifically, enforcement at the state level (as well as by territories and tribes) has enabled law enforcement and regulators with localized information and/or unique, state-specific priorities to address emerging consumer financial risks and harms to vulnerable communities that have not yet, or may never, become a subject of significant federal action.21See infra Parts III.B.1–2.

Additionally, in granting states enforcement authority via section 1042, Congress implicitly acknowledged that harms that emerge in one state are no longer likely to remain localized, such that empowering states to address harms early is a matter of federal consumer protection. The nationwide consumer financial protection framework has also benefitted from state action against actors and with respect to types of conduct that may have otherwise gone unaddressed under state law (including where state law is preempted) or by private cases brought by individual citizens.22See discussion infra Parts III.3–4. And section 1042 has provided states with remedies and other advantages that may not be available under state law and can be especially impactful in multistate litigation.23See discussion infra Part III.B.5. The dual enforcement of the protections of the federal consumer financial laws by state and federal officials has also led to helpful development of the law—providing protection for consumers and regulatory clarity for financial institutions—by providing more interpretations of the law by courts and regulators.24See discussion infra Part III.B.7. Finally, by providing safeguards against federal preemption, the CFPA preserves states’ ability to experiment with stronger protections or remedies as the states deem appropriate.25See Weiser, supra note 18; infra notes 108–111 and accompanying text.

Section 1042’s cooperative federalism regime is arguably the most significant instance of Congress specifically empowering states to play such an important role in the enforcement of federal consumer protections, building on similar provisions in a range of prior consumer protection statutes on narrower subject matters. In light of section 1042’s demonstrated effectiveness, this regime could serve as a model to be adopted in more areas of law. Private and dual federal-state enforcement can be used to create a comprehensive enforcement framework that may have relevance across policy areas subject to emerging regulation, such as data privacy, artificial intelligence, and more.

A. Overview of Section 1042 of the Consumer Financial Protection Act

To be sure, states have long played an important role in the enforcement of certain consumer financial protections.26See, e.g., Fair Credit Reporting Act, 15 U.S.C. §§ 1681–1681x; Real Estate Settlement Procedures Act, 12 U.S.C. § 2607(d); Truth in Lending Act, 15 U.S.C. § 1640(e); see also Lewis v. BT Inv. Managers, Inc., 447 U.S. 27, 38 (1980) (“[B]oth as a matter of history and as a matter of present commercial reality, banking and related financial activities are of profound local concern. . . . [S]ound financial institutions and honest financial practices are essential to the health of any State’s economy and to the well-being of its people. Thus, it is not surprising that ever since the early days of our Republic, the States have chartered banks and have actively regulated their activities”). For example, states have prohibitions on unfair and deceptive practices under their own laws,27See generally Carolyn Carter, Consumer Protection in the States: A 50-State Evaluation of Unfair and Deceptive Practices Laws, Nat’l Consumer L. Ctr. (“NCLC”) (Mar. 1, 2018), https://www.nclc.org/resources/how-well-do-states-protect-consumers/ [https://perma.cc/9MWR-FDV9]. States began adopting these protections in the 1960s after Paul Rand Dixon, the Chair of the Federal Trade Commission (“FTC”), began urging states to enact laws that reflected the federal FTC Act. See Paul Rand Dixon, Fed. Trade Comm’n, Remarks Before Public Seminar of the Fla. Dep’t of Agriculture and Consumer Servs., at 3–6 (Mar. 8, 1974). Dixon argued that such laws would produce “quicker and more precise action” given state government’s proximity to “matters primarily involving intrastate or local commerce . . .” Consumer Interests of the Elderly: Hearing Before the Subcomm. on Consumer Interests of the Elderly of the S. Special Comm. on Aging, 90th Cong., at 95 (1967). Subsequent model consumer protection acts, including the Uniform Deceptive Trade Practices Act, the Unfair Trade Practices and Consumer Protection Law, and the Uniform Consumer Sales Practices Act, helped promote states’ creation of “Little FTC Acts,” and by 1981 “every state had adopted some form” of consumer protection act. Charles Byrd, A 50-State Survey of Consumer Protection Acts and Their Connections to the Federal Trade Commission Act, PRO TE: SOLUTIO (Mar. 13, 2019), https://protesolutio.com/2019/03/13/a-50-state-survey-of-consumer-protection-acts-and-their-connections-to-the-federal-trade-commission-act/ [https://perma.cc/B33C-V6K5]. and before the CFPA, state regulators and law enforcement also had some, albeit often limited, ability to enforce provisions of certain federal consumer financial laws.28See discussion infra Part II.A.2. However, the period before 2008 was marked by the federal government’s increasing sidelining of state law enforcement, regulators, and consumer protection legislation. In particular, it has been well-documented how the Office of the Comptroller of the Currency (“OCC”) and Office of Thrift Supervision (“OTS”)29The OCC “charters, regulates, and supervises all national banks and federal savings associations.” Who We Are: Organization, OCC, https://www.occ.treas.gov/about/who-we-are/organizations/index-organization.html [https://perma.cc/47RK-HQ8L]. Previously, the OTS had chartered, regulated, and supervised federal savings associations, but in 2011, the Dodd-Frank Act dissolved the OTS and transferred many of its authorities to the OCC. See 12 U.S.C. § 5413. aggressively preempted state efforts to address consumer-harming practices that eventually caused or contributed to the financial crisis.30See FCIC, supra note 5, at 48.

In response to these failures, when crafting the CFPA, Congress aimed to strengthen the states’ role in consumer protection, defend that role from federal interference, and ensure that states could quickly address potential misconduct given the rapidly changing nature of financial markets.31See generally Totten, supra note 14. The results were section 1044 of the CFPA, which shields against federal preemption of state laws to protect consumers,32See generally id. and section 1042 of the law, which gives states—specifically, the attorneys general and other appropriate regulators of states, territories, and Indian tribes—the ability to enforce federal consumer financial protections without being beholden to the priorities of federal agencies.33See 12 U.S.C. § 5552. Much academic attention has been paid to section 1044 and broader issues around preemption after Dodd-Frank.34See generally Danyeale I. Hensley, Section 1044 of Dodd-Frank: When Will State Laws Be Preempted under the OCC’s Revised Regulations, 16 N.C. Banking Inst. 161 (2012); Jared Elosta, Dynamic Federalism and Consumer Financial Protection: How the Dodd-Frank Act Changes the Preemption Debate, 89 N.C. L. Rev. 1273, 1296 n.160 (2011); Jamelle C. Sharpe, Legislating Preemption, 53 Wm. & Mary L. Rev. 163 (2011); Michael Bolos, The Application of Dodd-Frank’s Dual Preemption Standard to State UDAP Laws, 14 U. Pa. J. Bus. L. 289 (2011). Less, however, has been written about section 1042, which deputizes states as consumer financial enforcers in addition to the federal government, and the extent to which this legislative design was a direct response to the failure of the pre-crisis enforcement system.35But see Totten, supra note 14; Wilmarth, supra note 14. As the CFPB has articulated, section 1042 applies in a broad set of circumstances—indeed, among other things, it enables states to enforce the law with respect to a wider range of institutions than the CFPB itself can—and it empowers states to enforce the protections of more than a dozen consumer financial protection laws against entities covered by the CFPA.36See Press Release, CFPB, CFPB Bolsters Enforcement Efforts by States (May 19, 2022), https://www.consumerfinance.gov/about-us/newsroom/cfpb-bolsters-enforcement-efforts-by-states/ [https://perma.cc/D8GY-NJZF].

With these authorities in hand, state regulators and law enforcement agencies across the country—with leaders spanning the ideological spectrum—have used section 1042 in a growing range of enforcement actions.37See discussion infra Part III. States have brought about fifty enforcement actions to date under section 1042 of the CFPA. These have invoked a variety of different laws and claims—including alleged violations of the CFPA’s prohibition on unfair, deceptive, or abusive acts or practices as well as the “Enumerated Consumer Laws” (eighteen other consumer financial protection laws that the CFPA defines to be part of “federal consumer financial law”)—against a range of different financial institutions. And they have won consumers a wide range of significant relief.38See discussion infra Part III.B.5.

Thus, for more than a decade, and with growing frequency, states’ widespread use of section 1042 has served as an important complement to federal efforts to protect consumers in the consumer financial marketplace and to private enforcement of the federal consumer financial laws. This outcome marks a stark break from the period before 2010, when federal intervention diminished state tools and thereby stymied consumer protection.

II. The CFPA Framework for Dual Enforcement of Federal Consumer Financial Law

As explained below, historically, federal consumer protection statutes—including those relating to consumer finance—were enforced both by federal regulators and by private citizens on their own behalf. Over time, private enforcement has been diminished by a variety of factors, and Congress began to include state enforcement when it enacted a number of new consumer protection statutes focused on specific subject matters. State enforcement of federal consumer financial protection statutes, however, remained somewhat limited until Dodd-Frank was passed in the wake of the 2008 financial crisis. It was widely recognized that federal interference with state consumer protection efforts was a significant cause of the crisis, and Congress responded by passing the CFPA, which created new consumer protections, consolidated their administration and federal enforcement in the CFPB, and provided states new tools to enforce these protections.

A. Private and State Enforcement of Federal Law, Including the Federal Consumer Financial Protection Laws, Before Dodd-Frank

1. Private Enforcement of Federal Consumer Protection Statutes

Private enforcement of federal consumer protection laws by individual citizens has long served as an important backstop to federal enforcement. Most of the federal consumer financial laws—many of which date to the 1970s or earlier—expressly provide consumers with a private right of action for violations of those laws.39See, e.g., 15 U.S.C. § 1692(k) (assigning civil liability for violations of the Fair Debt Collection Practices Act); id. §§ 1681(n)–(o) (assigning civil liability for willful and negligent noncompliance of the Fair Credit Reporting Act); id. § 1640 (establishing civil liability for failure to comply with the Truth in Lending Act); id. § 1693(m) (creating civil liability for violation of the Electronic Fund Transfers Act); 12 U.S.C. §§ 2605, 2607–2608 (granting private rights of action for three violations of the Real Estate Settlement Procedures Act); 15 U.S.C. § 1691(e) (establishing civil liability for failure to comply with the Equal Credit Opportunity Act (“ECOA”)); 10 U.S.C. § 987(f) (granting a private right of action for violations of the Military Lending Act); 15 U.S.C. § 1709 (assigning civil liability for violations of the Interstate Land Sales Full Disclosure Act); 12 U.S.C. § 4907 (granting a private right of action for violations of the Homeowners Protection Act of 1998); 15 U.S.C. § 1666(i) (assigning civil liability for the Fair Credit Billing Act); id. § 1667(d) (defining the civil liability of lessors for the Consumer Leasing Act of 1976). In some cases, consumers may be able to pursue civil actions against financial institutions for violations of all provisions of a federal consumer financial protection statute.40See, e.g., the Fair Debt Collection Practices Act, 15 U.S.C. §§ 1692–1692p and the Electronic Fund Transfer Act, id. §§ 1693–1693r. Other federal consumer financial protection statutes assign civil liability only for certain provisions or violations.41See, e.g., the Fair Credit Reporting Act, id. §§ 1681–1681x, and the Real Estate Settlement Procedures Act, 12 C.F.R. 1024–1024.41. In a minority of the enumerated consumer laws, financial institutions may not be held civilly liable by individual citizens.42See, e.g., the Gramm Leach Bliley Act, 15 U.S.C. §§ 6802–6809, and the Consumer Financial Protection Act, 12 U.S.C. §§ 5481–5603. In many cases, however, for those statutes without a private right of action, similar state laws exist that allow consumers to pursue legal action against financial institutions for violations like those defined in the enumerated statute. See, e.g., Dee Pridgen, The Dynamic Duo of Consumer Protection: State and Private Enforcement of Unfair and Deceptive Trade Practices Laws, 81 Antitrust L.J. 911 (2017) (discussing private enforcement of state unfair and deceptive trade practices laws).

Starting in the 1980s, however, driven in part by a political landscape adverse to private enforcement of federal law at the urging of industry, some policymakers and courts took steps to undermine private litigation of consumer protection statutes, especially those that, unlike the federal consumer financial laws, do not expressly refer to private enforcement.43See Stephen B. Burbank and Sean Farhang, Rights and Retrenchment: The Counterrevolution Against Federal Litigation 16 (2017) (describing the counterrevolution against private enforcement focused on reducing statutory incentives for private enforcement, establishing procedural rules to inhibit private litigation, and eliciting federal court precedent to create further barriers to private enforcement). Enforcement of the federal consumer financial laws via private rights of action nonetheless has continued to be a significant mechanism for effectuating these protections, but has also been cut back by some of the forces affecting other consumer protection statutes. As just one indicator of the continued vibrancy of private enforcement, the Supreme Court continues to hear many cases addressing claims brought by private litigants under the federal consumer financial laws.44See, e.g., Jesinoski v. Countrywide Home Loans, Inc., 574 U.S. 259 (2015) (regarding the Truth in Lending Act); Chase Bank USA, N.A. v. McCoy, 562 U.S. 195 (2011) (same); Beach v. Ocwen Fed. Bank, 523 U.S. 410 (1998) (same); TransUnion LLC v. Ramirez, 594 U.S. 413 (2021) (regarding the Fair Credit Reporting Act); Spokeo, Inc. v. Robins, 578 U.S. 330 (2016) (same); TRW Inc. v. Andrews, 534 U.S. 19 (2001) (same); Rotkiske v. Klemm, 589 U.S. 8 (2019) (regarding the Fair Debt Collection Practices Act); Henson v. Santander Consumer USA Inc., 582 U.S. 79 (2017) (same); Midland Funding, LLC v. Johnson, 581 U.S. 224 (2017) (same); Freeman v. Quicken Loans, Inc., 566 U.S. 624 (2012) (regarding the Real Estate Settlement Procedures Act). Yet, new judicial precedent on standing, as well as courts’ willingness to enforce arbitration agreements, have served as unfortunate obstacles to private enforcement of the federal consumer financial laws.45Regarding recent decisions limiting consumer standing, see TransUnion, 594 U.S. at 414 (limiting standing for private litigation over violation of a statute to those plaintiffs who have been concretely harmed by a defendant); see also Spokeo, 578 U.S. at 330. Regarding arbitration, see Am. Express Co. v. Italian Colors Rest., 570 U.S. 228, 228 (2013) (holding that the prohibitively high cost of an arbitration proceeding is not sufficient to overrule an arbitration clause); see also CompuCredit Corp. v. Greenwood, 565 U.S. 95 (2012); Smith v. Spizzirri, 601 U.S. 472, 477–78 (2024); Imre S. Szalai, The Future of Arbitration in the United States: Textualism, A Tectonic Shift, and A Reshaping of the Civil Justice System, 25 Cardozo J. Conflict Resol. 13 (2023); Sarah Staszak, Explanations for the Vanishing Trial in the United States, 18 Ann. Rev. L. & Soc. Sci. 43 (2022).

2. State Enforcement of Federal Consumer Protection Statutes

Statutes with broad private rights of action may implicitly authorize state enforcement under the parens patriae doctrine.46As parens patriae, a state may bring civil actions to protect its quasi-sovereign interests. See Hawaii v. Standard Oil Co. of Cal., 405 U.S. 251, 258 (1972). Courts have recognized states’ parens patriae standing in suits brought under federal statutes when the statute reflects a clear congressional intent to enable such suits. See, e.g., Connecticut v. Health Net, Inc., 383 F.3d 1258, 1262 (11th Cir. 2004). Private rights of action can implicitly authorize this state authority only if they are broadly constructed. See Connecticut v. Physicians Health Servs. of Conn., Inc., 287 F.3d 110, 121 (2d Cir. 2002) (noting that federal statutes implicitly granting states parens patriae standing all contain broad civil enforcement provisions). As the trends cutting back private enforcement of consumer protection statutes took shape, Congress in the last few decades explicitly provided for state enforcement to supplement federal enforcement in new consumer protection statutes.47See Widman & Cox, supra note 14, at 56–60. These statutes were focused on specific, fairly narrow subject matters, and therefore served as precedents for the more substantial, wholesale dual enforcement consumer financial protection regime that Congress eventually passed in the CFPA, as described below.

For example, in 1998, Congress passed the Children’s Online Privacy Protection Act (“COPPA”)4815 U.S.C. §§ 6501–6505. to address growing concerns about children’s privacy. Unlike an earlier privacy law from 1970, the Fair Credit Reporting Act (“FCRA”), the COPPA does not include any private enforcement. However, the COPPA authorizes state attorneys general to bring civil actions on behalf of state residents when there is reason to believe that persons have violated the COPPA regulations.49Id. § 6504(a)(1). Similar state enforcement provisions, rather than a private right of action, are included in the Consumer Review Fairness Act (“CRFA”), which was enacted in 2016. Like the COPPA, the CRFA also authorizes state attorneys general to bring civil actions on behalf of residents of the state in federal district court to obtain relief for violations of the CRFA, rather than establishing a private right of action.

Numerous other consumer protection statutes enacted during this time period grant similar explicit enforcement powers to state attorneys general and other relevant state enforcement officers. In total, since 1976, Congress has enacted more than twenty federal statutes on specific subject matters that explicitly grant state attorneys general or applicable state agencies the ability to act in response to alleged violations of federal law.

Statutory provisions in the federal consumer financial protection laws giving enforcement authority to states played a fairly limited role before the enactment of the CFPA—perhaps in part due to the robust private enforcement of these laws. For example, a 1983 amendment to the Real Estate Settlement Procedures Act (“RESPA”) empowered state attorneys general to enforce a prohibition on kickbacks in real estate transactions. In addition, the Home Ownership Equity Protection Act (“HOEPA”) of 1994 allowed state attorneys general to enforce new provisions in the Truth in Lending Act (“TILA”) requiring certain enhanced disclosures for, and limits on, specific high-cost mortgages. Finally, a 1996 amendment to the FCRA empowered state attorneys general to take injunctive action with respect to any violations of that law, but restricted when states could initiate actions for damages with respect to certain violations, such as certain violations committed by “furnishers.” Accordingly, before the CFPA, enforcement of the federal consumer financial protection laws was primarily by the federal government and citizens themselves.

B. Federal Interference in State Consumer Protection in the Run-Up to the Financial Crisis

Before the enactment of the CFPA in 2010, a wide range of federal laws relating to consumer financial protection were administered by a range of different federal regulators. Further, how financial institutions were regulated at the federal level depended on the organization of the institution. In turn, the state laws that applied to a particular institution could be preempted by the federal laws that applied to that institution.

Before the 2008 financial crisis, federal regulators acting in this framework often worked to stymie states’ activities to respond to growing consumer harm in the consumer financial marketplace, interfering with state-level lawmaking, regulating, and enforcement. In particular, as the Financial Crisis Inquiry Report would later explain, many states had attempted in the 2000s to address then-emerging issues in the mortgage market, including passing various anti-predatory lending statutes. Yet, the OCC and OTS aggressively stretched federal law to preempt, and therefore quash, these state laws’ applicability to the financial institutions they regulated (national banks and federal thrifts, respectively).

Most notably, in 1996, the OTS issued rules stating that federal law preempted laws that states had passed to address predatory lending to the extent they applied to federally chartered thrifts and their subsidiaries. The OCC then followed suit for nationally chartered banks, issuing preemptive orders against state anti-predatory lending laws in 2003 and adopting a general preemption rule blocking any state laws from interfering with national banks in 2004. At the time, the OCC stated that this guidance was intended to minimize uncertainty for national banks operating in multiple states, though many observers attributed these changes to competition among banking regulators to attract financial institutions to apply for charters as well as deregulatory ideology. A range of other actions also contributed to a sustained effort to preempt states from protecting consumers. For example, the OCC purported to prevent enforcement of even non-preempted state laws against national banks. Although the Supreme Court ultimately rejected the OCC’s position—which Justice Antonin Scalia deemed “[b]izarre”—it affirmed the OCC’s view that states cannot issue subpoenas to national banks to gather information about possible law violations.

The results of this preemption crusade were disastrous for consumers and countless Americans. Banks converted from state to federal charters, with the OCC’s and OTS’s policies freeing them from strong state consumer protections. These unencumbered financial institutions accelerated their work to drive prospective homeowners into risky mortgages that lenders often knew would fail, backed by Wall Street’s securitization machine. With state consumer protections preempted, financial institutions were more likely to issue mortgages with subprime features and that ended up in default. And when the market eventually turned, millions of consumers were left underwater on their mortgages, helping to produce a generational crisis with lasting repercussions across the economy.

C. The Consumer Financial Protection Act

In response to the financial crisis, the Dodd-Frank Act instituted sweeping reforms across the financial services industry. Title X of this new law, the CFPA, fundamentally restructured America’s framework for consumer financial protection. As described below, this included new consumer protections, as well as new tools for states, in addition to the federal government, to enforce these protections.

1. New Federal Consumer Financial Protections

First, the CFPA created important new substantive protections in the consumer financial marketplace, including most notably a prohibition on unfair, deceptive, or abusive acts or practices (“UDAAPs”) by consumer finance companies. In the CFPA, Congress aimed to have robust consumer financial protections cover the full sweep of harmful practices that drove the subprime mortgage crisis. The most obvious tool in consumer protection law was the ban on “unfair” and “deceptive” practices that had been present in the Federal Trade Commission Act since the early 1900s. But Congress concluded that the manner in which agencies had enforced the prohibitions on unfair and deceptive acts or practices was too limited, necessitating the creation of even further-reaching tools. Accordingly, Congress created a suite of new federal protections that apply specifically to mortgages. Additionally, Congress created a new prohibition in the consumer financial marketplace on “abusiveness,” defined as any practice that “materially interferes with the ability of a consumer to understand a term or condition of a consumer financial product or service” or takes “unreasonable advantage” of a consumer’s lack of understanding of a product or service, inability to protect his or her own interests, or reasonable reliance on a covered person (financial company) to act in the consumer’s interests. Through the addition of the abusiveness prohibition, Congress focused on conduct presumed to be harmful or distortionary to the proper functioning of the market, specifically addressing the (1) obscuring of important features of a product or service, or (2) leveraging of circumstances to take an unreasonable advantage of consumers.

The CFPA, including its prohibition on UDAAPs, applies broadly across companies that offer or provide consumer financial products or services. In particular, the CFPA applies to “any person that engages in offering or providing a consumer financial product or service” and service providers to such institutions. The CFPA also makes it unlawful for “any person,” full stop, “to knowingly or recklessly provide substantial assistance to a covered person or service provider in violation of the [UDAAP prohibition].”

2. A New Federal Agency

Next, Congress created a new agency—the CFPB—that would centralize the administration of the federal consumer financial laws and enforce the law consistently with respect to large banks and nonbanks. As noted above, previously, many regulators had authority over pieces of consumer financial protection, but no regulator or enforcer had consumers as their main focus. Congress believed that, under that status quo, “[a]ccountability was lacking because responsibility was diffuse and fragmented.” In turn, moving the administration of consumer protection law away from the prudential regulators helped address conflicts that had previously been present between consumer safety and systemic risk. Congress noted that these conflicts had led regulators to shy away from reining in certain harmful practices, including forms of subprime lending, for fear that doing so might undermine financial institutions’ “safety and soundness.” Accordingly, Congress gave the CFPB regulatory authority over both the new protections in the CFPA and eighteen other consumer financial laws—the “Enumerated consumer laws.”

Further, the CFPB enforces the CFPA against both large depository institutions (for example, banks and credit unions) and nonbank financial institutions and enforces the Enumerated Consumer Laws and a few other statutes and regulations (such as the Military Lending Act) against those institutions and certain others (generally those specifically covered by those authorities). Notably, however, as described further below, Congress did not provide private enforcement of the CFPA, including the UDAAP prohibition, by individual citizens.

Finally, the CFPB’s supervisory authority—that is, the ability to conduct examinations for consumer protection purposes—extends to large banks, certain nonbank financial institutions, and their service providers, while other federal regulators continue to supervise smaller banks as well as institutions they charter under existing authorities that the CFPA did not modify. Coupled with the CFPB’s enforcement authority over nonbanks, this feature helps address the way in which the nonbank financial companies that had been on the rise before the financial crisis escaped federal scrutiny. On the whole, this structure ensures that the CFPB has a range of tools to administer federal consumer financial law consistently and to address harmful and illegal practices.

3. A New Regime Empowering States

These new federal protections marked an important step forward for consumers. However, with the lessons of the financial crisis in mind, Congress also restored and expanded the role of states in consumer protection in the CFPA. First, Congress abolished the Office of Thrift Supervision (“OTS”)—arguably the worst offender on preemption matters—entirely. Next, Congress ensured that the remaining prudential regulators—in particular, the OCC—would not unduly intervene in future state efforts to rein in predatory industry practices. Specifically, in section 1044 of the CFPA, Congress codified a practical, non-categorical standard for preemption based on Supreme Court precedent:

State consumer financial laws are preempted, only if—

(A) application of a State consumer financial law would have a discriminatory effect on national banks, in comparison with the effect of the law on a bank chartered by that State;

(B) in accordance with the legal standard for preemption in the decision of the Supreme Court of the United States in Barnett Bank of Marion County, N. A. v. Nelson, Florida Insurance Commissioner, et al., 517 U.S. 25 (1996), the State consumer financial law prevents or significantly interferes with the exercise by the national bank of its powers; and any preemption determination under this subparagraph may be made by a court, or by regulation or order of the Comptroller of the Currency on a case-by-case basis, in accordance with applicable law; or

(C) the State consumer financial law is preempted by a provision of Federal law other than title 62 of the Revised Statutes.

While the OCC has tried in certain instances to ignore Congress’s rebuke of its categorical approach to preemption, the Supreme Court recently unanimously again rejected the OCC’s position, holding instead that the preemption standard codified in Dodd-Frank requires a practical, non-categorical assessment.

The CFPA also enacted new procedures to prevent federal regulators from cavalierly preempting state law:

(3) Case-by-case basis.—

(A) Definition.—As used in this section the term “case-by-case basis” refers to a determination pursuant to this section made by the Comptroller concerning the impact of a particular State consumer financial law on any national bank that is subject to that law, or the law of any other State with substantively equivalent terms.

(B) Consultation.—When making a determination on a case-by-case basis that a State consumer financial law of another State has substantively equivalent terms as one that the Comptroller is preempting, the Comptroller shall first consult with the Bureau of Consumer Financial Protection and shall take the views of the Bureau into account when making the determination.

As such, section 1044 ensured that states would remain able to build and experiment on top of a strong federal floor for consumer protections. In more than a decade since the CFPA’s enactment, the OCC has not preempted a single state law using these procedures, though it may have overreached on preemption in other ways. Additionally, section 1047 of the CFPA codified the Supreme Court’s rejection of the OCC’s “[b]izarre” position that states could be prohibited from enforcing even state laws that were not preempted.

And in section 1042 of the CFPA, Congress empowered states to enforce the full suite of safeguards that the CFPA created, including a CFPA provision that makes it unlawful for entities covered by the CFPA to violate the other federal consumer financial laws. Section 1042 states:

(a) In General.—

(1) Action by state .—Except as provided in paragraph (2), the attorney general (or the equivalent thereof) of any State may bring a civil action in the name of such State in any district court of the United States in that State or in State court that is located in that State and that has jurisdiction over the defendant, to enforce provisions of this title or regulations issued under this title, and to secure remedies under provisions of this title or remedies otherwise provided under other law. A State regulator may bring a civil action or other appropriate proceeding to enforce the provisions of this title or regulations issued under this title with respect to any entity that is State-chartered, incorporated, licensed, or otherwise authorized to do business under State law (except as provided in paragraph (2)), and to secure remedies under provisions of this title or remedies otherwise provided under other provisions of law with respect to such an entity.

(2) Action by state against national bank or federal savings association to enforce rules.—

(A) In general.—Except as permitted under subparagraph (B), the attorney general (or equivalent thereof) of any State may not bring a civil action in the name of such State against a national bank or Federal savings association to enforce a provision of this title.

(B) Enforcement of rules permitted.—The attorney general (or the equivalent thereof) of any State may bring a civil action in the name of such State against a national bank or Federal savings association in any district court of the United States in the State or in State court that is located in that State and that has jurisdiction over the defendant to enforce a regulation prescribed by the Bureau under a provision of this title and to secure remedies under provisions of this title or remedies otherwise provided under other law.

This provision creates a powerful dual enforcement regime for federal consumer financial protections. In particular, as the CFPB has explained, this language gives states the following tools:

  • States—specifically, state attorneys general and other state regulators—may bring civil actions or other appropriate proceedings against covered entities (excluding national banks) to address violations of the CFPA. Since the CFPA makes it unlawful for covered entities to violate any of the federal consumer financial laws, states can bring such actions to address violations of the CFPA’s own restrictions (including the UDAAP prohibition) and violations of the protections of the Enumerated Consumer Laws by covered entities;
  • State attorneys general may bring civil actions against national banks for violations of regulations that the CFPB has promulgated under the CFPA
  • State attorneys general and other state regulators may bring civil actions or other appropriate proceedings against entities excluded from the CFPB’s enforcement authority, such as auto vehicle dealers and others; and
  • State attorneys general and other state regulators may bring civil actions or other appropriate proceedings even if the CFPB is already taking action against the same entity.

Accordingly, section 1042 of the CFPA significantly expanded state enforcement of federal consumer financial protections (including both those that existed before Dodd-Frank and the protections created by the CFPA itself) and thus paved the way for increased state enforcement of federal consumer protection statutes as a whole. Indeed, because Congress did not provide private enforcement of the CFPA itself (and hence did not provide for private enforcement of the UDAAP prohibition), section 1042 is particularly important because it allows states to complement what would otherwise be solely a federal enforcement regime.

III. Applying Section 1042

A. States Taking Up the Mantle of Federal Consumer Financial Protection

Armed with the authorities outlined above, states across the country have used section 1042 in an increasing number and variety of enforcement actions, producing a more rigorous and comprehensive framework for consumer financial protection. States have brought about fifty enforcement actions under section 1042 since passage of the CFPA. These cases illustrate how Congress’s vision for nationwide consumer financial protection through federal law is being realized.

The states using section 1042 span geographies, and state regulators and law enforcement officials that have invoked the provision have been both Democrats and Republicans. Two of the approximately fifty actions that invoked section 1042 have involved all fifty states and the District of Columbia, and twenty-three states—from California and New York to Texas and Arkansas—have participated in at least one other action under section 1042. The CFPB joined fifteen of the lawsuits that states have brought under section 1042, with the rest being brought only by states. Finally, in addition to the two instances of actions under section 1042 that involved all fifty states, seven of the other state lawsuits under section 1042 involved more than one state as a plaintiff.

The lawsuits that states have brought under section 1042 have invoked a wide set of laws and claims. Twenty-four of the state suits under section 1042 asserted only CFPA UDAAP violations, thirteen alleged wrongdoing under the Enumerated Consumer Laws, and the remaining thirteen suits made both types of claims. Moreover, states are more frequently bringing a greater variety of claims under section 1042. In particular, states have recently addressed both conduct that violates the Enumerated Consumer Laws and violations of the CFPA UDAAP prohibition in the same suit.

B. States’ Uses of Section 1042 Show How Dual Enforcement Advances Federal Law

Admittedly, states may be deterred from bringing federal claims for a variety of reasons, from the perception that state law enforcement bringing state law claims in front of state court judges will receive more deference, to greater familiarity with state court procedures for bringing state law claims. Yet the actions that states have taken under section 1042 show how the empowerment of states has contributed to comprehensive and effective combatting of consumer harm in the consumer financial marketplace. States, relying on localized information and priorities, have addressed emerging risky products or entities that appear focused on specific geographic areas, sometimes seemingly in an effort to evade federal scrutiny. Further, state law enforcement has access to on-the-ground information regarding harm to vulnerable communities that federal regulators may be hard-pressed to otherwise uncover. States have also brought cases against actors and with respect to types of conduct that may otherwise go unaddressed under state law (such as where relevant state law is preempted) and have procured remedies that may not have been otherwise available. Section 1042 can also prove especially valuable in multistate actions because the process for settling such an action may be more straightforward in cases where states—and sometimes the CFPB—bring a shared set of federal claims under section 1042. And state enforcement has provided more interpretations of the law by courts and regulators, which protects consumers and offers regulatory clarity for financial institutions.

1. Swift Action Against Localized Emerging Risks

Although the CFPB’s enforcement of the federal consumer financial protection laws has been robust, the CFPB, like any other institution, nonetheless has limited resources. At the time of publication, the CFPB’s leadership has focused on prioritizing scrutiny of the largest institutions, which often create nationwide or at least multi-state harm, as well as repeat offenders. The structure of the CFPA reinforces this dynamic of focusing on the largest institutions by, for example, enabling the CFPB to conduct examinations of large depository institutions and nonbank “larger participants” in consumer financial markets. Yet, in section 1042, Congress empowered state law enforcement with tools—including the ability to enforce the law against some entities in instances in which the CFPB cannot—to fill in the consumer protection framework with important albeit relatively more localized actions. Hence, the provision empowers attorneys general and regulators to deploy firsthand, on-the-ground information to combat localized harms that can nonetheless have a nationwide impact. In a world of scarce resources, even at the federal level, having more law enforcement agencies on the beat provides significantly more protection for consumers.

One recent example of how section 1042 has allowed states to respond to new and emerging risks is the growing market for financing related to energy-related home improvements, such as the installation of solar panels. This area of consumer finance is rapidly expanding, and scams and other harms are also starting to proliferate in the space. However, with limited exceptions, federal law enforcement has only just begun taking action to address these problems.

Enter section 1042. In 2023, Tennessee and Kentucky sued the at-home solar energy company, Solar Titan USA, over claims that it “misle[d] consumers about the qualities and characteristics of the solar system and installation services they are selling to consumers” and “omit material information about the qualities of Mosaic’s products and services when financing Solar Titan’s solar system sales.” In particular, the states allege that Solar Titan violated the CFPA’s prohibition on UDAAPs by representing to consumers that they would generally be eligible for a substantial tax credit that was not actually available to all homeowners and by incorrectly describing when billing on loans would begin. Notably, Solar Titan USA operates in only limited areas of the country, not nationwide, making it an ideal candidate for state enforcement. And under section 1042, states were able to act to enforce the CFPA as soon as they became aware of these significant harms. The case is still pending at the time of publication.

2. Capitalizing on Familiarity with Local Communities

Section 1042 has also strengthened enforcement of the federal consumer financial laws by capitalizing on local law enforcement’s familiarity with specific local communities and their diverse needs. This aspect of the law is particularly powerful given that many financial scams take advantage of the trust that people often place in people with whom they share community bonds. And section 1042 may be especially relevant in this regard because, as noted above, the abusiveness standard that Congress created in the CFPA applies with respect to entities that take “unreasonable advantage” of a consumer’s reasonable reliance on a covered person to act in the consumer’s interests.

One example of how section 1042 allowed states to protect consumers based on their localized knowledge of individual communities was Minnesota’s recent lawsuit against Chadwick Banken, an operator of companies offering a type of risky seller-financing for homes called “contracts for deed.” Minnesota has one of the largest Muslim populations in America, and the state alleged that Banken targeted Muslim home purchasers “by selling them homes on grossly unfair terms using contract terms that are designed to fail.” In particular, the state alleged that Banken “leverage[d] Muslim customer[s’] religious beliefs to extract both higher down payments and increased monthly installment payments than contracts offered to non-Muslims” by framing the Muslim-targeted loans as being “Sharia compliant.” Banken’s alleged scheme involved “hundreds of home sales,” thereby having a large impact, especially on this particular community, notwithstanding that the operation was limited to a specific region and so, again, may not have immediately drawn the scrutiny of federal regulators.

Minnesota’s suit under section 1042 alleged that Banken violated the CFPA’s prohibition on abusiveness, emphasizing how his actions specifically targeted Muslims, as well as the prohibition on unfairness and the Truth in Lending Act. In spotlighting harm to this specific community, the state illustrated how familiarity with local communities, their needs, and the way that scammers may attempt to take advantage of those communities can bolster CFPA enforcement.

Another example of how section 1042 allows local knowledge to flow into CFPA enforcement is the Navajo Nation’s 2017 suit against Wells Fargo related to that bank’s notorious fake account scandal. Similar to allegations that the CFPB and states such as California had already made against the company, the Tribe alleged that Wells Fargo employees, “[u]nder intense pressure from superiors to grow sales figures,” created “unauthorized bank accounts” and “activated unauthorized debit cards” in consumers’ names. The Navajo Nation’s complaint added extensive detail on how Wells Fargo specifically targeted the Tribe, including by noting that Wells Fargo “is often the only banking choice for Navajo people living on the Navajo Nation,” making tribe members “particularly vulnerable to Wells Fargo’s unlawful sales practices.”

This conduct was especially damaging as it pertained to Navajo elders. The Tribe’s complaint alleged that Wells Fargo “specifically targeted elderly members of the Navajo Nation,” even though these elders generally “do not have a need for traditional banking product” given that “the Navajo Nation operates largely as a cash-carrying society.” Often, these “elders could not speak English or write their names,” so Wells employees would “have the elders apply a thumbprint” in lieu of a signature. Illustrating what this alleged conduct looked like, the complaint stated: “[s]ales personnel would go to flea markets to encourage vendors to open unnecessary accounts. Elderly women selling Navajo products or crafts were particularly promising targets; because many could not read, they could be easily conned into opening accounts that they did not need or understand.”

Although the CFPB and others had already taken action against Wells Fargo, the Navajo Nation’s ability to sue under section 1042 helped ensure that the Tribe could tell the story of the harm specific to their community and seek redress. Local knowledge of the bank’s conduct allowed the Navajo Nation to shine a national spotlight on specific practices that often do not make it into a federal complaint. While the CFPB’s own action may have covered some of Wells Fargo’s conduct in general, it did not detail the targeting of Tribe members. Accordingly, the Navajo Nation’s action illustrates how section 1042 makes the enforcement of the CFPA more complete, thereby advancing the consumer protection framework Congress envisioned when drafting the law.

3. Conduct that May Not be Addressed by State Law

Another powerful aspect of section 1042 is that states may address conduct that may not be able to be addressed under state law. Specifically, in certain instances, the states’ ability to enforce the protections of the CFPA itself and the CFPA’s prohibition on violating the Enumerated Consumer Laws has allowed them to take action to address a broader set of practices than they might otherwise be able to under state law. For example, state statutes may enumerate only a specific set of prohibited actions, be found to be preempted by federal law, or have hurdles or other limitations that dampen the effectiveness of state consumer protections, such as a prohibition only on deceptiveness and/or unfairness. Accordingly, Congress implicitly recognized that state law may be insufficient to address certain practices, especially activity that may have a nationwide effect, and empowered states to take action regarding the full scope of conduct addressed by the federal consumer financial laws and actors covered by the CFPA.

For example, Texas recently brought a lawsuit against Colony Ridge, a set of land development companies, and its owner, John Harris. In that case, Texas alleged that Colony Ridge “targets foreign born and Hispanic consumers with limited or no access to credit with promises of cheap, ready to build land and financing without proof of income,” “lies in a multitude of ways about the conditions that those buyers will experience” on the land, and then sells people land with defects that “preclude the buyer from actually making any practical use of the land.” As a result, the buyer “defaults on the land financing at jaw-dropping rates,” at which time Colony Ridge “forecloses on the buyer, re-possesses the land having lost nothing, and then turns around and sells the same land again to another unsuspecting buyer with the same deceptive set of misrepresentations.”

Texas’s suit raised two counts against Colony Ridge and Harris under state laws prohibiting deceptive trade practices and fraud related to the extensive misrepresentations that Harris and his employees allegedly made as part of their scheme. Texas also included a count alleging violations of the CFPA’s prohibition on deceptive acts or practices relating to many of these alleged lies and misrepresentations. And because of section 1042, Texas was also able to take action against other misconduct that Congress had specifically recognized and targeted in the federal consumer financial laws. In particular, Texas alleged, via section 1042, that Colony Ridge’s conduct violated the Interstate Land Sales Full Disclosures Act (“ILSA”), which Congress passed in 1968 to protect consumers when leasing or buying land. Among other requirements under ILSA, developers must provide consumers with a property report disclosing relevant information about the land for sale or lease. ILSA’s implementing regulations also prohibit misleading sales practices. Texas alleged that Colony Ridge violated ILSA by failing to provide these specifically required disclosures and failing to provide non-English speakers “with contracts or any other documents in any other language than English” as that law requires. Had section 1042 not been available, Texas would not have been able to enforce these affirmative requirements of federal law. A federal magistrate judge recently recommended denying Colony Ridge’s motion to dismiss, finding that Texas sufficiently alleged violations of both the CFPA and ILSA.

Similarly, in 2019, New York brought a lawsuit against the Pennsylvania Higher Education Assistance Agency (“PHEAA”), a student loan servicer that previously serviced millions of federal student loans. In that case, New York alleged that PHEAA “failed miserably in its administration” of Public Service Loan Forgiveness (“PSLF”), a key program that offers federal student loan borrowers debt cancellation after a decade of service in their communities. In particular, the state alleged that PHEAA had proven “unwilling or unable” to “accurately count[] the qualifying payments” borrowers had made toward cancellation, left borrowers “waiting for months to over a year” when they contacted PHEAA with problems, failed “to fairly and correctly administer” the payment plans borrowers needed to be enrolled in to access PSLF, and more.

New York was able to use state laws banning deceptive practices and fraud to levy three causes of action against PHEAA. These causes of action generally covered the allegations that PHEAA lied to or otherwise misled borrowers. However, because New York is one of a handful of states that do not outlaw unfair practices, it could not use state law to address certain other ways that PHEAA had allegedly caused “substantial injury” that was not “reasonably avoidable” or “outweighed by countervailing benefits to consumers or to competition.” These alleged harms include PHEAA failing to keep accurate records, to process paperwork timely and accurately, or to conduct adequate quality assurance over payment counts. Section 1042 made it possible for New York to take action against PHEAA’s allegedly unfair conduct by invoking the unfairness prohibition of the CFPA. Accordingly, New York included a count in its complaint alleging that PHEAA violated the CFPA’s prohibition on unfair practices in eleven different ways, including by “[s]teering borrowers into less-favorable repayment options such as forbearance and consolidation,” “[a]pplying policies inconsistently to borrowers,” and “[f]ailing to provide timely explanations to borrowers for PSLF payment count determinations.” Absent section 1042, this misconduct—which might not fit neatly into the state’s prohibitions on deceptive or other fraudulent practices—may not have been addressed. Again, this action demonstrates how section 1042 enables more robust and comprehensive consumer protection.

New York’s PHEAA case also alleged a violation of the CFPA’s prohibition on abusive practices, a ban that is not present in New York law. Indeed, although some state laws may address “unconscionability”—a concept which bears some similarity to abusiveness—only one state, California, currently has a prohibition on abusive practices analogous to the one in the CFPA. This gap means that, absent section 1042, some states may lack the authority to take action when companies obscure important features of a product or service, or leverage aspects of their relationship with consumers (such as gaps in understanding or bargaining power, or companies’ knowledge that consumers will reasonably rely on them when making decisions) to gain an unreasonable advantage. Among the approximately fifty actions that states have taken under section 1042, more than a third have included claims under the CFPA’s abusiveness prohibition.

One of these cases was Illinois’s lawsuit against Westwood College, a for-profit college that the state alleged had operated a years-long scheme to direct students into expensive loans for low-quality educational programs that did not lead to jobs. Illinois’s consumer fraud statute prohibited unfair and deceptive acts and practices, so—in addition to the state making an unfairness claim under section 1042—the state already had tools it could use to seek redress for many of the outright misrepresentations that Westwood made about program quality and student outcomes, as well as for certain ways in which the school engaged in predatory lending. However, the availability of the abusiveness prong enabled Illinois to also hold Westwood accountable for one of the core aspects of its scheme—taking advantage of students’ reasonable reliance on school admissions and financial aid officials to act in their best interests—with a law specifically designed to stop this type of abuse. As the complaint states, Westwood and its co-defendants “held themselves out as schools that would help students better their lives” while “admissions and financial aid staff solicited students’ reliance and trust,” only to then misrepresent the costs students would pay and push students into high-cost loans that officials knew would fail. The CFPA’s prohibition on abusive practices therefore broadened Illinois’s toolkit so that it could efficiently address this significant aspect of Westwood’s broader misconduct.

4. Actors that Could Otherwise Fall Through the Cracks

As noted above, when Congress drafted the CFPA, it aimed to cover the full sweep of companies and industries that consumers interact with in their financial lives. Section 1042 allows states to bring actions addressing violations of the federal consumer financial laws by any “covered person,” namely, companies that offer or provide consumer financial products or services, or “service providers” thereof, as well as those who knowingly or recklessly substantially assist such violations. Hence, states may address consumer harms committed by a set of entities that may be broader than those covered by many state consumer financial protection laws, which may be narrower or have significant carve-outs.

To give one example, Michigan has a prohibition on “[u]nfair, unconscionable, or deceptive methods, acts, or practices in the conduct of trade or commerce.” However, the state exempts from these protections any “transaction or conduct specifically authorized under laws administered by a regulatory board or officer acting under statutory authority of this state or the United States.” State courts have held that this exemption applies to many industries, significantly cutting back the general state consumer protection law.

Section 1042 helps fill this breach. To date, Michigan has brought four suits under section 1042, including one case it brought on its own and three that it joined as part of multi-state efforts. For example, in 2019 Michigan used section 1042 to take action against Sierra Financial, “an online lender that offers loans with interest rates between 388.55% and 1505.63%,” and its owner, Huggy Lamar Price. Michigan alleged that Sierra Financial and Price violated the CFPA’s prohibition on UDAAPs through an extensive list of harmful practices that included “misrepresenting contract terms over the phone, harassing or pressuring consumers into signing up for loans, and refusing to let consumers pay off their loans early.” In addition, Michigan alleged that Sierra Financial and Price violated state interest rate limitations and “engaged in activities constituting common law nuisance.” In 2020, Sierra Financial and Price agreed to an assurance of voluntary compliance, wherein they stopped collecting on existing loans past the principal balance and must notify the Michigan Attorney General within 120 days if they intend to do business in Michigan again.

Moreover, even in instances where carve-outs to state law are less clear or categorical, section 1042’s broad application is still valuable. Consider Massachusetts’s 2017 case against PHEAA, the same student loan servicer that New York took action against in the separate case described above. At this time, PHEAA was one of the largest financial companies in the world, servicing one out of every ten dollars of non-housing consumer debt in the United States. Again, section 1042 filled a possible gap in coverage. Massachusetts brought claims under state law and section 1042, accusing PHEAA of “depriving dedicated public servants of” earned opportunities for federal student debt cancellation after breakdowns blocked borrowers from accessing PSLF and the Teacher Loan Forgiveness program. However, because PHEAA purports to be a quasi-governmental entity founded by the Commonwealth of Pennsylvania, the company challenged whether it was covered by Massachusetts’s prohibition on unfair and deceptive practices. In particular, the Massachusetts law applies only to “persons” engaged in “trade or commerce,” and PHEAA argued it was not a person or corporation but a public instrumentality.

This argument ultimately failed, but even if it had not, section 1042 would have ensured that the ample federal claims against PHEAA would have survived. The CFPA clearly defines “servicing loans” as a “financial product or service,” the “offering” of which makes a company a “covered person” for the purposes of the law’s protections. Accordingly, even if PHEAA had prevailed with respect to coverage under state law, there is no serious dispute about whether the CFPA covers PHEAA. Thus, section 1042 allowed Massachusetts to allege that PHEAA violated the CFPA in several ways, including that it engaged in “unfair” acts by denying borrowers the opportunity to make progress toward debt forgiveness, failing to properly track their progress toward cancellation, and collecting without refunding amounts that borrowers did not owe. Massachusetts’s case shows how the CFPA’s clear coverage of a broad set of consumer finance companies helps fill in the potential gaps in state laws, allowing states to be full partners in rooting out misconduct in consumer financial markets that can have nationwide effect. This clarity helps ensure that states can confidently enforce the CFPA, helping to ensure comprehensive enforcement that bolsters the protection paradigm that Congress intended.

5. Remedies and Statute of Limitations

CFPA section 1042 can also allow states to procure significant relief for consumers that may not otherwise be available under either federal or state law. The CFPA provides for a wide range of remedies that states, as well as the CFPB, are able to seek in enforcement actions, such as disgorgement of profits, damages, and restitution. In enforcement actions brought under section 1042, states have procured a wide variety of relief, ranging, for example, from payments to borrowers that were foreclosed on, to refunds of interest charged in violation of TILA. The scale of this relief has also been significant, including a judgment against a bond services company for $811 million.

In addition, by joining forces with the CFPB in bringing federal claims under section 1042, states can increase the chance that the victims affected by the defendant’s conduct will receive full compensation for their harm. That is because, where one or more states partner with the CFPB and obtain a judgment against a defendant, victims can potentially receive compensation from the CFPB’s “civil penalty fund.” Under the CFPA, this fund is available to provide “payments to the victims of activities for which civil penalties have been imposed under the federal consumer financial laws.” Monies available through this fund can help make victims whole when, among other things, companies that have broken the law do not have sufficient funds to provide consumers redress. The availability of the civil penalty fund is particularly important given that states often lack an analogous generally available pool of funds, meaning that consumer redress can be limited when companies that violate state law are insolvent.

The importance of the civil penalty fund was demonstrated in the action that the CFPB and eleven states brought against Prehired, a company that operated an online training “bootcamp” that used promises of high-paying technology sales jobs to trap consumers with expensive debts. Prehired had already declared bankruptcy by the time this joint action arose, making it possible that funds from the entity itself were limited and likely would not be available to provide consumers redress if only state law had been invoked. However, the states’ and the CFPB’s stipulated judgment against Prehired imposed a civil money penalty under federal law, thereby opening the door for the company’s victims to access federal relief. To the extent that this relief might not have otherwise been available for states to access on their own without section 1042, the Prehired case shows how section 1042 helps ensure that consumers receive relief for their injuries.

Further, the CFPA’s statute of limitations may also help ensure that unlawful conduct is able (or fully able) to be addressed by state law enforcement, especially where that conduct is only discovered by regulators after some period of time. The statute of limitations for actions brought under the CFPA is generally “3 years after the date of discovery of the violation to which an action relates.” As noted above, in addition to its own prohibitions (most notably UDAAP), the CFPA makes it unlawful for covered entities to violate the Enumerated Consumer Laws. Accordingly, the CFPA’s statute of limitations applies to claims brought by states addressing CFPA-covered entities’ violations of either the CFPA itself or of the Enumerated Consumer Laws. This period may be longer than the limitations periods that apply under state law, particularly if those laws do not tie the statute of limitations to when the violation was discovered.

6. Multistate and Federal Partnership Actions

The process for settling a multi-state action may also be more straightforward in cases where states—and sometimes the federal government, typically the CFPB—bring a shared set of federal claims under section 1042 than when they bring a series of related claims under state law. Where states—and possibly the federal government—are bringing a shared set of federal claims, the states and defendants involved need to negotiate only one proposed settlement about that single set of claims and one judicial proceeding to implement the settlement. By contrast, multi-state actions and state-federal partnership cases that draw on claims involving the laws of multiple states (and/or claims brought exclusively by the federal government under federal law) require individualized settlements for the claims based on the laws of each jurisdiction and separate proceedings, with different judges in different jurisdictions to implement them, all on different timelines. Section 1042 thereby makes it significantly more efficient to enforce the law, helping ensure robust enforcement and advancing Congress’s goals for consumer financial protection.

7. Section 1042 Helps Advance Consumer Financial Protection Law

Finally, in the years since the CFPA’s enactment, several state actions under section 1042 have been litigated. Both this judicial precedent and the state enforcement actions themselves provide beneficial guidance about how courts and regulators interpret the law. Applying the law to specific factual circumstances creates regulatory clarity for entities and increases consumer protection because regulated entities know more definitively whether their conduct is lawful or unlawful.

In particular, among the approximately fifty actions that states have brought under section 1042, more than a third have been litigated to a decision. These state cases under section 1042 have addressed important questions about the federal consumer financial laws. For example, the case brought by Illinois against Westwood College clarified the nature of certain practices that may qualify as unfair or abusive under the CFPA. Among other claims, the state alleged that Westwood violated the CFPA’s prohibition on unfair and abusive acts or practices by targeting students who they assumed would have little knowledge of financial aid and higher education, and misrepresenting both the cost of Westwood’s programs and the jobs available for graduates, all while knowing that most students would leave Westwood without a degree or a job. Westwood countered in part by claiming the CFPA’s prohibition of unfair, deceptive, or abusive acts or practices was “unconstitutionally vague.” Ruling on Westwood’s motion to dismiss, the United States District Court for the Northern District of Illinois rejected Westwood’s constitutional challenge and held that Westwood’s actions “[were] sufficient to state CFPA claims for unfair and abusive practices.” By making this ruling, the court contributed to the body of caselaw clarifying the acts or practices that may qualify as unfair or abusive and are prohibited by the CFPA.

IV. Conclusion: Applying Dual Enforcement Beyond Consumer Financial Protection

Out of the wreckage of the financial crisis, Congress crafted a key role for states in its effort to reshape American consumer financial protection. Part of that effort involved ensuring that states would be clearly empowered to build on top of a strong federal floor of consumer protections through state-level experimentation. In addition, Congress enshrined the sharing of enforcement authority for federal protections between states and the federal government. This “dual enforcement” tool has played a key role in America’s step forward from a broken pre-crisis consumer safety net to a more robust post-crisis consumer protection ecosystem and complements private enforcement of the federal consumer financial protection laws, especially as private enforcement has been cut away by industry efforts.

The aspects of section 1042 included above, and the examples of their real-world value, vindicate Congress’s success in crafting the CFPA’s dual enforcement mechanism. More than a decade after its passage, the CFPA, in general, and section 1042, in particular, have helped states seek redress for a far greater set of actors and conduct than they otherwise would be able, and to secure fuller relief when doing so. In turn, this has contributed to a comprehensive consumer financial protection framework, with state enforcement based on decentralized information that is not limited by the knowledge or priorities of any particular federal regulator at any particular time, while nonetheless acknowledging that localized emerging risks are matters of federal consumer protection given their likelihood of quickly spreading. It is clear that people across the country would be significantly worse off without the benefits of state enforcement of the federal consumer financial protection laws.

Congress’s success in deploying private and dual state-federal enforcement to advance consumer financial protection—as well as in a few other policy areas—suggests a playbook it can use to address other emerging challenges. Our country is currently having a conversation about how to address novel issues related to market consolidation, widespread financialization, the rise of artificial intelligence, online consumer surveillance, and more. In considering how to address these issues, lawmakers should understand that private enforcement of key protections by individual citizens has historically served as an extremely strong method for ensuring compliance—and that dual state and federal enforcement mechanisms can also contribute to a robust and comprehensive enforcement mechanism for federal law.

For example, while there is not currently a comprehensive federal data privacy regime, many states have recently passed data privacy bills that offer people a suite of protections from widespread surveillance and place certain important limitations on companies that would collect consumer data. States have therefore demonstrated their attention to this emerging risk in a way that echoes the advantages described above of dual enforcement. Accordingly, data privacy may be one area in which the tool of dual enforcement could effectively aid future federal lawmaking. But this is just one area where private and state enforcement may prove valuable for preventing and addressing consumer harm. As Congress debates a range of pressing issues, the widespread, bipartisan success of section 1042 in driving better outcomes for consumers shows how these enforcement mechanisms can help lawmakers reach their goals.


[*] Director, Consumer Financial Protection Bureau

[**] General Counsel, Consumer Financial Protection Bureau. The authors wish to acknowledge the significant assistance they received in the drafting process from Ben Kaufman and Brad Lipton, Nick Kime, Colin Wilson, Veronica Spicer, and Kristin Bateman at the CFPB.