LENDERS COMPLIANCE GROUP®

AARMR | ABA | ACAMS | ALTA | ARMCP | IAPP | IIA | MBA | MERSCORP | MISMO | NAMB

Showing posts with label Fair Lending. Show all posts
Showing posts with label Fair Lending. Show all posts

Wednesday, April 29, 2026

CFPB Eliminates Disparate Impact

YOUR QUESTION 

YouTube

You may have heard about a major change to Regulation B. They eliminated disparate impact. I also learned that they changed a few other areas that were working to reduce discrimination. As an underwriter, I think this is wrong-headed. I think this reduces fair lending protection. 

We met with our lawyer because we have a second review process, which weeds out potential discrimination in our loan process. Our lawyer says there is a shift away from not having to prove intent to discriminate to now having to prove intent. She says that this is a problem because proving intent is extremely difficult. In other words, discrimination is now possible without having to prove intent to discriminate – only the outcome matters. 

So, if I get this right, even if the outcome is discrimination, the company that discriminated won't be held responsible if you can't prove an intent to discriminate. I don't understand why disparate impact protection is being weakened. It’s scary! 

Do the changes to Regulation B basically eliminate disparate impact? 

OUR COMPLIANCE SOLUTION 

Policies and Procedures 

OUR RESPONSE 

I am going to be blunt: the CFPB's April 2026 Final Rule ("Rule") amending Regulation B eliminates the "effects test" – that is, "disparate impact" – of the Equal Credit Opportunity Act (ECOA), while also restricting special-purpose credit programs (SPCPs), and narrowing the definition of "discouragement" of applicants or prospective applicants. This is clearly a significant regulatory shift away from fair lending restrictions. 

However, saying it eliminates disparate impact and fair lending is not accurate. The Rule eliminates disparate impact liability specifically under ECOA and Regulation B. That's significant, but ECOA is only one of several legal frameworks that govern lending discrimination. The Rule does not affect several others that remain fully intact. 

The Fair Housing Act (FHA) still recognizes disparate impact for mortgage lending. The Supreme Court confirmed this in Texas Department of Housing v. Inclusive Communities Project (2015), and the Rule expressly does not touch FHA liability. So a mortgage lender whose policies produce racially skewed outcomes can still face a disparate impact challenge under the FHA, which is a completely separate statute.

State fair lending laws are arguably the bigger remaining protection. Many states – for instance, California, New York, Illinois, and others – have their own anti-discrimination statutes that incorporate disparate impact standards, and federal rulemaking cannot preempt those. State attorneys general were among the most vocal opponents of the Rule precisely because they intend to continue using their own authorities. 

The Department of Justice retains independent enforcement tools. And the Community Reinvestment Act, which addresses lending patterns in lower-income communities, operates on its own separate framework. 

HOW DID THIS HAPPEN? 

The CFPB received over 64,500 public comments, including ours. The overwhelming majority of comments opposed the Rule. Nevertheless, the Rule is now law. The compliance effective date is July 21, 2026. Whatever the comments offered, pro or con, the Rule largely finalizes a November 2025 proposal, with only clarifying edits rather than substantive revisions. 

Since your question specifically involves the change to disparate impact, I will discuss it primarily. The other changes are also very significant and should be incorporated into your policies and procedures. 

Eliminating the “effects test,” a change supposedly meant to lower compliance costs, actually gives lenders greater freedom to target protected groups. 

WHAT IS THE EFFECTS TEST? 

The purpose of the “effects test” is ultimately to protect against disparate impact. The "effects test" is actually a legal doctrine used to determine if a lender’s facially neutral policy creates a discriminatory, disproportionate impact on a protected class (for instance, race, gender, or age). It means a creditor can be liable for discrimination, even without discriminatory intent, if their practices have a discriminatory effect. 

Most regulators know full well that they can challenge lending policies that, while appearing neutral, create a negative impact on protected groups. Most compliance lawyers know full well that a financial institution can expose itself to a disparate impact violation by creating a pattern or practice that results from defective lending policies. And most financial institutions know, or should know, that if a policy has a discriminatory effect, they must prove that a legitimate business necessity justifies it. 

What the CFPB has done is to remove the “effects test” from Regulation B, thereby promulgating that ECOA does not recognize disparate impact liability. The focus now is on the intent to discriminate.

Wednesday, March 25, 2026

Will AI Reduce Fair Lending Violations?

YOUR COMPLIANCE QUESTION 

Our company is building an AI engine to monitor for fair lending violations. The AI system is extensive and includes chatbots. It will be integrated into our LOS and several other systems. We are a large mortgage originator and servicer. We use one of the most well-known platforms for loan originating and servicing. The system offers several new AI features. But we ran our own test against the LOS and found that our AI engine is identifying more fair lending issues than the one embedded in the LOS. 

As the company's General Counsel and Chief Risk Officer, I was shocked that building our own AI system could produce better results than a highly rated, well-established LOS. Granted, our AI system is proprietary and reflects our unique compliance needs. Full disclosure: We have been a client of yours for over 15 years, and we have discussed these and other AI findings with your team in order to mitigate compliance risk. 

I wonder if a one-size-fits-all AI integration in the LOS can really be effective, given that fair lending involves many state and federal regulations. We are testing and monitoring our AI integration, but many companies lack the resources we have and will rely on their LOS provider's results. 

Do you think a generic AI system can reduce fair lending violations? 

Signed, 

Risk Averse 

OUR COMPLIANCE SOLUTION 

AI POLICY PROGRAM FOR MORTGAGE BANKING™ 

Our AI Policy Program aligns with Freddie Mac's AI governance requirements for Freddie Mac Sellers/Servicers. Responsible AI practices can help align AI system design, development, and use with applicable legal and regulatory guidelines. 

Our AI Policy Program consists of the following policies: 

1.      Artificial Intelligence Governance Policy

2.      Artificial Intelligence Use Policy

3.      Artificial Intelligence Workplace Policy

4.      Artificial Intelligence Credit Underwriting Policy

5.      Artificial Intelligence Do & Do Not Policy

6.      Artificial Intelligence Ethics Policy

7.      Artificial Intelligence Vendor Management Policy 

Contact us for the presentation and pricing 

RESPONSE TO YOUR QUESTION 

Let me begin with my conclusion: there is currently no one-size-fits-all, generic AI system that can be thoroughly relied on to reduce fair lending violations. 

Most companies will rely on originating and servicing platforms that integrate AI into fair lending analytics. Unfortunately, companies are generally liable for AI errors, particularly when AI causes financial losses, safety issues, or provides consumers with false information. Legal responsibility typically falls on the business deploying the technology, even if it properly monitors, tests, or ensures that the AI is fit for fair lending detection. 

Legal and Regulatory Risk 

Put another way, your business is responsible for any misinformation provided by your AI chatbots. As you likely know, there are certain aspects of tort law, like duty of care, that require individuals and entities to act with reasonable care to avoid causing foreseeable harm to others. It forms the basis of negligence claims; if this duty is breached and causes injury, the responsible party may be held liable. 

I have repeatedly said that companies must ensure AI systems are properly trained and monitored to avoid liability for errors caused by biased AI. Although developers may be liable for inherent defects, the business deploying the AI is often responsible for how the system is used. 

If you are going to use AI to detect fair lending, you must be able to identify disparate impact patterns across demographic groups, monitor for "redlining" analogs in digital lending, flag outlier decisions that deviate from modeled norms, and generate audit trails for regulatory review. 

AI is rapidly transforming the mortgage industry, promising increased efficiency, faster decision-making, and improved risk assessment. Still, its integration poses significant challenges related to fair lending compliance, data bias, and transparency. While AI can expand credit access by utilizing alternative data, it risks perpetuating historical biases if models are trained on biased data or utilize "black box" algorithms that make decisions hard to explain.

Thursday, December 11, 2025

Shadow AI in Mortgage Banking

Podcast | Substack

QUESTION 

Everyone in our company received a message from management warning us about the use of Shadow AI. Most of us have never heard of Shadow AI. Next week, a company-wide video session is taking place to learn about it. Attendance is mandatory. 

So, I started reading about it. I found that it involves going to websites like ChatGPT. The management notice says that some of us are going online to AI websites and using them to replace our own knowledge and experience. Until further notice, we have been told not to use ChatGPT and other AI websites. 

A few of us got together to find out how this could affect us. We are underwriters, processors, loan officers, and quality control people. It's just a small group. You have written articles on AI and have AI policies. Please tell us how Shadow AI affects mortgage banking.

How does Shadow AI affect mortgage banking? 

Our Compliance Solution 

We recommend our AI Policy Program for Mortgage Banking. 

A well-constructed AI Policy Program is a proactive means designed to avoid and mitigate risks associated with Artificial Intelligence. Responsible AI practices can help align AI system design, development, and use with applicable legal and regulatory guidelines. 

RESPONSE TO YOUR QUESTION 

Shadow AI is not as spooky as it sounds, but it can adversely impact mortgage banking entities. Our AI Policy Program for Mortgage Banking addresses Shadow AI and many other features of artificial intelligence. Keep in mind that the pace of AI development is brisk, somewhat unstable, and rapid. Updates to policies and procedures are necessary for the foreseeable future. You should expect to see more alerts, notices, updates, and training. 

If you want to learn more about AI and mortgage banking, consider our recent articles on artificial intelligence. 

Shadow AI 

What is Shadow AI? Essentially, it is the unauthorized use of artificial intelligence tools, apps, or features by employees within an organization, bypassing official IT and security oversight, often for productivity gains. Unfortunately, it introduces significant risks, including data leaks, compliance failures, bias, regulatory non-compliance, and intellectual property loss. 

Shadow AI is not "Shadow IT," which is quite a bit different, but, in a way, it is adjacent, because Shadow IT manifests where any technology (for instance, software, hardware, cloud services, and apps) is used by employees without the company's IT department approving it. 

COMPONENTS OF SHADOW AI 

Shadow AI refers to the unauthorized use of AI tools like ChatGPT, Midjourney, Claude, Bard, Microsoft 365 Copilot, Salesforce Einstein, or AI plugins, which create vulnerabilities because these tools are not vetted for corporate security or data policies. In other words, employees may be using these AI tools for various purposes – such as summarizing documents, drafting emails, generating content, providing knowledge, and so forth – although IT has not formally approved their use by employees. 

Sometimes, employees use workarounds by accessing AI tools from their personal accounts. Employees may even use their personal logins for AI services that process company data. 

UNAUTHORIZED USE OF AI 

The potential adverse consequences of unauthorized use of AI tools include data leakage, compliance issues, regulatory and legal problems, lending practices, security vulnerabilities, a lack of control and oversight, and inaccurate or biased output. Shadow AI, therefore, can really hobble a company's risk profile. 

Assuming the best of intentions in using Shadow AI tools, I can understand an employee wanting to be more efficient, but such use bypasses crucial safeguards, turning productivity tools into major security and governance risks for the business. 

Rather than outright banning Shadow AI tools, most organizations address Shadow AI by establishing clear governance, monitoring usage, and providing secure, approved AI alternatives. The focus is usually on striking a balance between innovation and essential security and compliance standards. 

ADVERSE RISKS OF SHADOW AI 

Depending on the Shadow AI tool used, there are numerous risks to mortgage banking, among which are surely the following, as I have mentioned in the aforementioned articles.

Tuesday, November 18, 2025

AI Credit Score Underwriting

QUESTION 

Thank you for your recent columns on artificial intelligence in mortgage banking. I want to know how to handle credit scores using AI. I am the SVP Operations of a large wholesale lender. We want to include AI in our underwriting. In particular, we want to use it to evaluate a borrower's creditworthiness. However, our legal department has advised us that there are huge privacy issues. 

We do not want to be dependent on the credit reporting agencies for AI information. And we do not want to outsource AI in our credit score underwriting. The AI evaluation methods we discussed with legal have been shut down due to potential privacy violations. 

What are the privacy risks in using AI to determine a borrower's credit score? 

COMPLIANCE SOLUTION 

AI Policy Program for Mortgage Banking 

A well-constructed AI Policy Program is a proactive means designed to avoid and mitigate risks associated with Artificial Intelligence (AI). AI risk management is a key component of responsible development and use of AI systems. Responsible AI practices can help align the decisions about AI system design, development, and use with intended aims and values.

RESPONSE 

The privacy challenges associated with artificial intelligence are enormous, and the risks will only become more and more difficult to mitigate. In our recently issued AI Policy Program for Mortgage Banking, we sought to provide a comprehensive policy framework for using AI in mortgage banking. Indeed, one of the policies in the Policy Program is titled "Artificial Intelligence Credit Underwriting Policy." 

If you need a policy framework for AI, please request information about our Policy Program. 

AI credit score underwriting is an uncharted legal and regulatory territory! 

You will find that most of your legal department's concerns about AI in mortgage lending involve the collection and potential misuse of vast amounts of sensitive personal data, heightened cybersecurity vulnerabilities, and a lack of transparency that can lead to a loss of consumer trust and potential regulatory non-compliance. 

Broadening this out, AI in credit score underwriting stems from the extensive collection of sensitive, alternative data, the potential for unauthorized access and data breaches, and the difficulty in ensuring transparency and consumer control over how personal information is used. 

Whatever you do, you will need to be in lockstep with your legal advisors. This "territory" is dotted with legal minefields! Let's consider these risks. 

AI models require vast amounts of data, often going beyond traditional financial information to include "alternative data" such as geolocation, social media activity, online behavior, transaction histories, and even biometric data. The sheer volume and sensitive nature of this extensive data collection increase the overall risk to consumer privacy. 

Zero in on that data! It can be collected for one purpose but might be used for other, unforeseen purposes without the user's explicit consent. This lack of control over how personal data is processed raises significant privacy issues. From the legal perspective, this amounts to unauthorized use and repurposing. 

The large datasets used to train AI models are attractive targets for cyber attackers. Inadequate security measures or vulnerabilities in third-party vendor systems can lead to data breaches, exposing sensitive personal and financial information and increasing the risk of identity theft or fraud. Data security must be failsafe. 

AI algorithms can analyze seemingly innocuous data to infer highly personal attributes, such as health status, political views, or ethnic origin (a "predictive harm"). From a regulatory perspective, this risk arises from the inference of sensitive Information. In other words, this capability to derive sensitive insights can lead to potential discrimination and privacy infringements. 

Complex AI algorithms can be difficult to explain, even for their developers, creating a Black Box where it is unclear exactly how a specific credit decision was reached. This opacity, its lack of transparency, deprives consumers of understanding why they were denied credit and of exercising their right to an explanation or an appeal. I have written here about the Black Box "model" or "problem". 

Do not assume that so-called "anonymized" data effectively mitigates risk. Even when data is "anonymized," AI can sometimes de-anonymize individuals by cross-referencing various data points, compromising individual privacy.

Thursday, November 6, 2025

Blind Spots in Mortgage Compliance

QUESTION 

Our compliance department is being downsized. Apparently, I am one of the first to be fired–oh, excuse me, I mean downsized. Suppose I sound like I have a chip on my shoulder. In that case, I suppose I do, since this is my fourth compliance job that, through no fault of my own, is being downsized. It especially bothers me that the Chief Compliance Officer asks me, before I leave at the end of the month, to provide a list of compliance blind spots that we have encountered over the last few years. 

Anyway, I have been working on the list. However, the list is only involved with our company's blind spots. How about everyone else? I want to highlight some potential blind spots that may or may not be occurring in our company, but which could happen elsewhere. Since you have many clients across the country, I wonder if you could share the types of compliance blind spots that your clients encounter. 

Thank you in advance! By the way, I have read your articles for years. I will continue to subscribe wherever I go. I have my résumé out, but many companies are not hiring. So wish me well! 

What are some compliance blind spots in mortgage banking? 

SOLUTION 

We recommend the following Compliance Tune-up®! 

CMS Tune-up®

Compliance Management System 

The Compliance Tune-up® series assesses the overall strengths and weaknesses of departments, functions, and regulatory compliance, regardless of a financial institution’s size, regulator, complexity, or risk profile. 

ANSWER 

I am sorry that you are being downsized or, as you put it, fired. The tendency to use terms that mask the reality of circumstances can be infuriating. To be downsized means your position is eliminated as part of your company's permanent reduction of its workforce. It usually happens to cut costs or restructure. This is a business decision, not a reflection of your performance, and can be a response to economic downturns, technological changes, mergers, or a need for greater efficiency. I wish you all the best. Wherever you go, please stay in touch! 

Working with many clients provides an advantage because we can share our knowledge and experience with each client. The fact is, these days, no individual compliance department can master all the diverse issues associated with mortgage compliance. After a while, a company begins to form a rather parochial, narrow, and lopsided view of compliance challenges, as its understanding of compliance is specific to its particular experience. This model is problematic because a company faces numerous risks, and therefore, it can be blindsided by a lack of knowledge relating to compliance issues affecting other companies. 

I will share some blind spots that we have come across over the years. After nearly two decades, many compliance challenges have changed. But there are some perennials. My feedback here is certainly not comprehensive. I hope it helps! 

Fair Lending BLIND SPOTS 

First up in blind spots is fair lending. Many compliance managers are familiar with the basics of fair lending and rely on various types of reviews. The blind spots become a veritable regulatory minefield if they manifest themselves. Blind spots in areas such as prohibited practices, equal access to credit, loan applications compliance – including advertising, inquiries, reviews, loan disbursement, ongoing servicing, to name but a few – are areas that have massive legal consequences. However, I think this blind spot may be boiled down to at least these components.

 

·       Data Analysis Limitations

 Lenders sometimes fail to prepare quality Home Mortgage Disclosure Act (HMDA) data or view it in a narrow context, which tends to blind them to disparities in outcomes for minority groups.

 

·       Marketing and Outreach Bias 

Marketing materials may inadvertently exclude or discourage certain demographic groups, for instance, by not featuring diverse imagery or targeting underserved communities. For example, financial institutions risk bias when renting mailing lists based on criteria that skew toward specific neighborhoods.

Thursday, October 9, 2025

Financial Penalties for Advertising Violations

YOUR QUESTION 

We have been using a marketing company for our advertising. We relied on their compliance to make sure the advertisements met the guidelines. Unfortunately, a banking department just cited us for violations in our advertising. So, we fired the marketing company. Meanwhile, we're stuck. The banking department has asked for all our advertising going back three years!   

My partner hired a lawyer to handle our case. The lawyer reviewed the advertisements from the last three years and informed us that there are many violations in them. It is scary how much money we will need to pay in financial penalties. The lawyer says there could also be remuneration to the borrowers. We don't have the money for all of these violations. We just don't. We may have to close down the company. We're going to meet with the department next week to discuss the situation. 

I need some more guidance. I want to be more prepared for the meeting. I need to know what we're facing in penalties. We have been told that your firm conducts advertising reviews before their publication, so I hope you can enlighten me about what to expect. 

What are the financial and other penalties for violations of mortgage advertisements? 

COMPLIANCE SOLUTIONS 

Advertising & Marketing Compliance Reviews 

Advertising Tune-up 

Advertising Manual 

Please contact us to discuss these solutions!

ANSWER TO YOUR QUESTION 

I am sorry to learn of this happening. This situation is avoidable, yet many companies get caught up in the dragnet of defective advertisements. You can't farm out your liability to marketing companies. Many of them claim to have compliance staff, but in reality, their compliance is sparse, if it exists at all. And forget about the testimonials of their awesome success; for goodness sake, they are marketing companies – what kind of testimonials do you expect them to provide? 

Yes, we provide relatively inexpensive advertising and marketing campaign reviews. We've offered advertising compliance for twenty years. The advertising review is expeditious. We hold the final masters in our extranet, so that clients can access them at any time. Our staff works with the client to ensure the advertisements both meet their marketing goals and comply with regulatory mandates. Some clients have even retained us to review the compliance procedures of their marketing companies.

If you want assistance with advertising compliance, please contact me. Get your company into a reliable advertising compliance program. Forget the bells and whistles. Forget the marketing company route! 

If you are not an expert in advertising compliance, you need compliance support. 

A hefty violation could cost you the company! 

Here's what happens when your advertising compliance is not reliable.

 

Recently, a company was shuttered for alleged deceptive advertising. Its home office was located in California. It was licensed in 30 states and Puerto Rico. In that case, specifically, the mortgage lender allegedly used the names and logos of the VA and FHA in its advertisements, described loan products as part of a "distinctive program offered by the U.S. government," and instructed consumers to call the "VA Interest Rate Reduction Department" at a phone number belonging to the mortgage lender, thus implying that government agencies sent the mailings. The result of this matter was a consent order permanently banning the company from engaging in any mortgage lending activities, or from "otherwise participating in or receiving remuneration from mortgage lending, or assisting others in doing so." In addition, the company, while neither admitting nor denying the allegations, was required to pay a $1 million civil money penalty. 

Fortunately, many compliance departments have a very good understanding of the restrictions on advertising, which are meant to protect consumers from misleading practices and ensure fair access to credit. 

Here is a list of a few basic Acts and regulations. 

Some Acts and Regulations 

Truth in Lending Act (TILA) (Regulation Z) 

TILA requires clear and accurate disclosure of loan terms, including the annual percentage rate (APR), loan amount, loan term, and repayment terms, presented clearly and conspicuously. Certain "trigger terms" (for instance, specific interest rates or monthly payment amounts) require additional disclosures.

Thursday, September 18, 2025

Sexual Orientation: Protected Class

QUESTION 

A banking department has cited us for a violation of the Equal Credit Opportunity Act, Regulation B. The allegation is that we denied several loans on the basis of sexual orientation. The applicants filed a complaint with the department. I will state the basis of the complaints. Based on their investigation, they issued an administrative demand to review our loan originations for the last three years. 

Other banking departments seem to be interested in this matter and have sent us document requests for loan files and loan logs. When I joined the company as its General Counsel two years ago, I undertook a review of administrative actions going back several years. Nothing like this happened. For the years I reviewed, we did not have complaints caused by violations of Regulation B, particularly, adverse action. 

In drafting our response to the department, I relied on case law, best practices, and specific regulatory guidelines. To ensure I have a deeper understanding of our legal exposure, I want your input on potential procedures that may cause a violation of the ECOA based on sexual orientation. 

What are potential procedures that may cause a violation of the ECOA based on sexual orientation? 

SOLUTION 

ECOA Tune-up 

Fair Lending Tune-up 

RESPONSE 

The Equal Credit Opportunity Act (ECOA), as implemented by Regulation B, prohibits discrimination on a prohibited basis in any aspect of a credit transaction. Prohibited bases under the ECOA are: race, color, religion, national origin, sex, marital status, or age (provided that the applicant has the capacity to enter into a binding contract); the applicant's income being derived from public assistance; or the applicant's exercise in good faith of any right under the Consumer Credit Protection Act or any state law upon which an exemption has been granted by the Consumer Financial Protection Bureau (CFPB). 

For any rejected application, you should provide a written notice that clearly explains the specific principal reason(s) for the decision. The notice must also include the ECOA disclosure and the name of the appropriate federal enforcement agency. 

The prohibited basis doctrine, as applied to sex, includes sexual orientation and gender identity. The Supreme Court ruled, in 2020, in Bostock v. Clayton County that the federal law prohibiting discrimination in employment based on a person's sex includes gender identity and sexual orientation. 

Following this decision, certain federal agencies with regulatory authority for sex discrimination were directed to review their agency procedures and determine whether actions should be taken to align them with the Bostock decision. Subsequently, the CFPB issued an interpretive rule clarifying that the ECOA and Regulation B apply to discrimination in credit transactions based on a person's sexual orientation and/or gender identity. The rule also provided guidance to clarify the requirements. 

The FHA prohibits discrimination based on race, color, religion, sex, familial status, national origin, or disability in the sale, rental, and financing of housing. In 2021, the Department of Housing and Urban Development confirmed that discrimination based on sexual orientation is a violation of the FHA. 

In light of this change, lenders sought to mitigate this risk by updating their policies and procedures to align with the change. For instance, many lenders now include a statement of nondiscrimination in their loan policy, loan advertisements, and applicant disclosures, and on their websites to reflect the ECOA's requirements. Lenders should update these documents to indicate they do not discriminate on the basis of sex, including sexual orientation or gender identity. We have continually urged our clients to conduct staff training on this issue. 

Because your question is very specific with respect to procedures, I am going to keep this article narrowly focused on methods and procedures to prevent violations of ECOA based on sexual orientation. There are surely three actions that must be done to avoid such violations. In my view, these would be 

(1) ensuring that policies and procedures are updated,

(2) training all affected personnel, and

(3) removing such discriminatory practices from credit decisions. 

I will treat them here, with the caveat that implementing these actions correctly and legally throughout the mortgage process requires a rather extensive implementation of various regulations, federal and state, a review that is far beyond the reach of this article.

Thursday, March 28, 2024

“Woke” Policies in Mortgage Banking

QUESTION 

There was a big argument in a sales meeting last week. The loan officers got into a verbal fight over the use of the word “woke.” After the meeting, the whole company was talking about it. HR and Compliance got involved. I’m not sure what will happen next. But there is a lot of hate churning up in the company. This has never happened before. We were all friends, but now everyone is taking sides. All over the word “woke.” 

During the sales meeting, they discussed expanding into a mostly minority area. One of the loan officers got up and said he refuses to go into that area and is sick and tired of these “woke” policies that make him do deals with people based on their being minorities. Another loan officer got up and said he agreed and none of the loan officers should be forced to abide by these “woke” rules. 

The loan officers said they were not being racist or discriminatory. They just said they don’t feel safe and that loans from that area don’t close. There was a lot of pushback. Most loan officers disagreed, saying they never feel threatened, and most of their loans do close. There was a big shouting match. The sales manager ended the meeting, and everyone left, but they continued shouting at each other in the parking lot. 

I know this is a touchy subject. But you have taken on controversial subjects many times. I hope you can help to shed some light on the situation we’re in. I want things to go back to normal. 

Is there really a “woke” policy that forces loan officers to take applications in minority areas? 

COMPLIANCE SOLUTION 

ECOA Tune-up 

ANSWER 

Several benign words have come into the American idiom that morphed into a malignant meaning, and “woke” is one of those words. A few years ago, it meant being aware or well-informed politically or culturally. I believe it first entered the Oxford English Dictionary in 2017. 

“WOKE” 

The word “woke” was derived from Black culture. I believe it goes back to the 1940s. To be “woke” or to “stay woke” meant to wake up in the sense of being alert to social justice and preserving African American rights. Recently, the term has had negative overtones, especially in the context of demeaning the politics relating to the left-of-center, a kind of weaponizing by right-of-center and far-right politicians as a way to denigrate left-of-center politics. 

Because right-of-center politicians have adopted “woke” from Black culture, sociologically speaking, it is a form of “cultural appropriation,” although I’ve heard it described as “cultural theft.” Cultural appropriation happens when a majority group adopts elements of a minority group in an exploitative, disrespectful, and stereotypical way.[i] So, if “woke” is used in such a manner, it is inherently a racist term. 

Not all cultural appropriation is intrinsically wrong when there is proper attribution and respectful use of the cultural artifact, keeping honestly to its use and meaning. People who use the term to disparage are not necessarily racist, but if used improperly – lacking attribution, not using it respectfully, being dishonest in use and meaning – it is a proxy for taboo words that are more explicitly racist. 

“WOKE” POLICIES 

Thus, in your specific scenario, when a loan officer says a policy is “woke,” they may be using it disparagingly, generalizing left-of-center policies, which they deem unacceptable to their right-of-center and far-right politics. Their use of the word doesn’t make them racists. They may simply be identifying a left-of-center policy they do not want to accept. However, it could also be a proxy for socially unacceptable racist lingo. 

There are no “woke” policies in mortgage banking. The regulations that financial institutions follow are extensively vetted over generations and many federal and state administrations. A mountain of litigation determines the legal interpretation of the applicable statutes. The rules are often refined to respond to economic demands and ensure appropriate consumer protection, such as the protection afforded through fair lending prohibitions relating to a protected class. 

PROTECTED CLASS 

I have heard grumbling over the years about “protected classes.” These are the categories of groups that are legally protected. I have listened to complaining for and against age as a protected class. From time to time, someone moans about allowing protected class status for sexual and transgender orientation. 

A CEO I spoke to a few years ago felt that political affiliation should never be a protected class. His view was that he is legally allowed to discriminate against an at-will employee or candidate as a direct result of their political beliefs or activities. He held that First Amendment protections do not apply to private employment. He need not fear. Title VII of the Civil Rights Act of 1964 does not deem political affiliation to be a protected class. Public employees have a few more rights regarding political activity protections, but these rights are not absolute. 

GOING ROGUE 

Your loan officers who refuse to work in minority areas are walking on thin ice. The sales manager may choose to assign them elsewhere, but this is a very litigious terrain. There are two primary acts relating to protected classes. I fail to see that either of them falls into the black hole of being “woke”— unless “woke” means acts whose goal is to allow consumers to be treated fairly in the marketplace. 

If loan officers object to treating consumers fairly, maybe they should find another line of work. Lenders strive mightily to build a strong and upstanding reputation. They don’t need some rogue loan officers undermining their reputation or putting them at regulatory risk. 

In any event, I suggest you retain competent counsel to ensure that a decision to withhold loan origination personnel from a minority area would not violate the law, especially the two following acts. 

REGULATIONS 

The Fair Housing Act (FHAct), among its list of illegal, discriminatory practices, includes this example of lending discrimination:

 

Providing a different customer service experience to mortgage applicants depending on their race, color, religion, sex (including gender identity and sexual orientation), familial status, national origin or disability.[ii] [My emphasis.] 

A different “service experience” would be discrimination in approvals and denials, loan terms, advertising, mortgage broker and other loan originator services, property appraisals, mortgage servicing, loan modification assistance, and homeowners insurance. 

Be advised: anyone can file a complaint with the Department of Housing and Urban Development (HUD), which administers and enforces the FHAct. Once the complaint is filed, the Office of Fair Housing and Equal Opportunity (FHEO) immediately opens an investigation to enforce applicable policies and laws. And, I can assure you, a complaint may be filed if a member of a minority community believes your firm is deliberately curtailing or shutting down access to loans in their area. 

The Equal Credit Opportunity Act (ECOA), taken together with the FHAct, covers a wide spectrum of anti-discrimination protections. For instance, the ECOA prohibits discrimination in any aspect of a credit transaction. Prohibitions consist of discrimination based on race or color, religion, national origin, sex, marital status, age (provided the applicant can legally contract), applicant’s receipt of income derived from any public assistance program, or the applicant’s exercise, in good faith, of any right under the Consumer Credit Protection Act.[iii] 

Under both the ECOA and the FHAct, it is illegal for a lender to discriminate on a prohibited basis in a residential real estate-related transaction. And, among other things, under one or both of these acts, a lender may not:

 

·       Fail to provide information or services or provide different information or services regarding any aspect of the lending process, including credit availability, application procedures, or lending standards.

 

·       Discourage or selectively encourage applicants concerning inquiries about or applications for credit. 

BUZZSAWS 

Without more information than you provided, it seems your loan officers – and, by extension, your company – risk running straight into the buzzsaw of a prohibited factor! Indeed, to go further, a lender may not discriminate on a prohibited basis because the present or prospective occupants of either the property to be financed or the characteristics of the neighborhood or other area where the property to be financed is located. Deliberately avoiding minority communities with respect to originating loans substantially increases legal and regulatory risk. 

If your firm were to pull back from or shut down originations in a minority area, it could trigger disparate treatment violations. All it takes for an illegal disparate treatment allegation to be set in motion is the establishment either by statements revealing that a lender explicitly considered prohibited factors (overt evidence) or by differences in treatment that are not fully explained by legitimate, nondiscriminatory factors (comparative evidence).[iv] 

Indeed, when a lender applies a racially or otherwise neutral policy or practice equally to all credit applicants but disproportionately excludes or burdens certain persons on a prohibited basis, the policy or practice is described as having a disparate impact. 

Your scenario manages to trigger all three types of lending discrimination: overt evidence of disparate treatment, comparative evidence of disparate treatment, and evidence of disparate impact. Here’s how. 

First, there is overt evidence of disparate treatment because, as described above, your firm would be openly discriminating on a prohibited basis. 

Secondly, there is comparative evidence of disparate treatment because your firm would treat a credit applicant differently based on one of the prohibited bases. It does not require any showing that the treatment was motivated by prejudice or a conscious intention to discriminate against a person beyond the difference in the treatment itself. 

Third, there is a disparate impact because your firm would apply a racially or otherwise neutral policy or practice equally to all credit applicants, disproportionately excluding or burdening persons on a prohibited basis. 

REDLINING 

A final word about redlining, a form of disparate treatment that your loan officers seem to be suggesting. Your firm may be exposing itself to a redlining allegation if it provides unequal access to credit or unequal terms of credit because of the race, color, national origin, or other prohibited characteristic(s) of the residents of the area in which the credit seeker resides or will reside or in which the residential property to be mortgaged is located. Redlining is a double-whammy: it often violates both the FHAct and the ECOA. 

Hopefully, your loan officers will worry less about “woke” policies and more about not violating fair lending laws. If your firm treats similar applicants differently based on a prohibited factor, it must explain the difference in treatment. If the explanation is not found to be credible, a supervision and enforcement agency may find that your financial institution discriminated.


Jonathan Foxx, Ph.D., MBA
Chairman & Managing Director 
Lenders Compliance Group


[i] See What Is Cultural Appropriation?, Encyclopedia Britannica, December 2023

[ii] Fair Lending: Learn the Fact, Fair Lending Guide, U.S. Department of Housing and Urban Development

[iii] § 1002.5(b), Title 12, Chapter X, Part 1002

[iv] Consumer Compliance Examination Manual, March 2021, IV. Fair Lending – Fair Lending Laws and Regulations, Federal Deposit Insurance Corporation

Thursday, February 8, 2024

HMDA: Procedures & Internal Controls

QUESTION 

I am a compliance analyst in our compliance department. We are getting ready to file our HMDA-LAR. Yesterday, our internal auditor requested an outline of the steps we take to evaluate our HMDA policies and procedures. 

Our compliance manager has put together a few bullet points. However, we need some procedures and internal controls that tell the internal auditors adequate measures are in place to ensure compliance. 

Mostly, our procedures are informal. We follow the HMDA guide and use HMDA reporting software. 

I am reaching out to you for guidance in putting together a list of HMDA procedures. 

What are some procedures and internal controls needed to comply with filing HMDA data? 

ANSWER 

Compliance Solution: HMDA, CRA, Fair Lending

The Home Mortgage Disclosure Act (HMDA) requires certain financial institutions to collect, report, and disclose information about their mortgage lending activity. HMDA was enacted by Congress in 1975 and implemented by Regulation C.[i] Over the years, there have been numerous amendments, updates, and linkages to other Acts. HMDA is a disclosure law that relies upon public scrutiny for its effectiveness. 

Contrary to what some people think, HMDA does not prohibit any specific activity of lenders, nor does it establish a quota system for mortgage loans to be made in any geographic area. The federal supervisory agencies use HMDA data to support a variety of activities.[ii] For instance, some federal supervisory agencies use HMDA data as part of their fair lending examination process,[iii] and other agencies use HMDA data in conducting Community Reinvestment Act (CRA) performance evaluations.[iv] 

HMDA disclosures provide the public with information on the home mortgage lending activities of particular reporting entities and activity in their communities. These disclosures are used by local, state, and federal officials to evaluate housing trends and issues and by community organizations to monitor financial institutions' lending patterns. Because HMDA data serve numerous important purposes, validating the accuracy of HMDA data is a key element of the federal supervisory agencies' examination activities. 

For the purpose of this article, I will use the term "institution" to refer to an institution that is either a depository financial institution or a non-depository financial institution that is subject to Regulation C. An institution is required to comply with Regulation C only if it is a financial institution as that term is defined in Regulation C. The definition of financial institution includes depository and non-depository financial institutions, as those terms are separately defined in Regulation C.[v] It is beyond the scope of this response to delve into the method to identify whether an institution meets the definition. An institution utilizes certain coverage tests and thresholds to determine whether a financial institution is required to comply with Regulation C.[vi] 

If your internal auditor plans to review your procedures and internal controls, I suggest you let them know that Regulation C requires an institution to record the data about a covered loan or application on a Loan Application Register (LAR), hereinafter "HMDA-LAR," within 30 calendar days after the end of the calendar quarter in which the financial institution takes final action on the covered loan or application.[vii] An institution is not required to record all its HMDA data for a quarter on a single HMDA-LAR. Rather, it may record data on a single HMDA-LAR or may record data on one or more HMDA-LARs for different branches or different loan types (such as home purchase loans, home improvement loans, or loans on multifamily dwellings). State or federal regulations may require an institution to record its data on a HMDA-LAR more frequently. 

Depending on various criteria, under Regulation C, an institution must submit its annual HMDA-LAR in electronic format to its appropriate federal supervisory agency by March 1 of the year following the calendar year for which the data are collected.[viii] Certain institutions must file their HMDA-LAR quarterly and annually,[ix] where the institution reported at least 60,000 originated covered loans and applications (combined) for the preceding calendar year. 

Guidelines for Procedures and Internal Controls 

for HMDA Recording and Reporting 

I will provide a list of some procedures and internal controls to ensure compliance with HMDA and Regulation C. The list is not meant to be comprehensive. 

·       Whether the individual assigned responsibility for the institution's compliance with HMDA and Regulation C possesses an adequate level of knowledge and has established a method for staying abreast of changes to laws and regulations. 

·       If the institution ensures that individuals assigned compliance responsibilities receive adequate training to ensure compliance with the requirements of the regulation. 

·       Whether the individuals assigned responsibility for the institution's compliance with HMDA and Regulation C know whom to contact, at the financial institution or their supervisory agency, if they have questions not answered by the written materials. 

·       If the institution has established and implemented adequate controls to ensure separation of duties exists (i.e., data entry, review, oversight, and approval). 

·       Any internal reports or records documenting policy and procedure revisions and any informal self-assessment of the institution's compliance with the regulation. 

·       If the institution offers preapprovals, whether the institution's preapproval program meets the specifications detailed in the HMDA regulation. If so, whether the institution's policies and procedures provide adequate guidance for reporting preapproval requests that are approved or denied in accordance with the regulation. 

·       Whether the institution's policies and procedures address the reporting of (1) non-dwelling secured loans that are originated in whole or in part for home improvement and classified as such by the institution, and (2) dwelling-secured loans that are originated in whole or in part for home improvement, whether or not classified as such. 

·       Whether the institution established a method for determining and reporting the lien status for all originated loans and applications. 

·       Whether the institution's policies and procedures contain guidance for collecting ethnicity, race, and sex for all loan applications, including applications made by telephone, mail, and Internet. 

·       Whether the institution's policies and procedures address the collection of the rate spread (the difference between the APR and the average prime offer rate for a comparable transaction as of the date the interest rate is set) and whether the institution has established a system for tracking rate lock dates and calculating the rate spread. 

·       Whether the institution's policies and procedures address determining if a loan is subject to the Home Ownership and Equity Protection Act and the reporting of applications involving manufactured home loans. 

·       Whether the HMDA-LAR is updated within 30 days after the end of each calendar quarter. 

·       Whether data are collected at all branches, and if so, whether the appropriate personnel are sufficiently trained to ensure that all branches are reporting data under the same guidelines. 

·       Whether the institution's loan officers, including loan officers in the commercial loan department who may handle loan applications reportable under HMDA (including loans and applications for multifamily or mixed-use properties and small business refinances secured by residential real estate), are informed of the reporting requirements necessary to assemble the information. 

·       Whether the Board of Directors has established an independent review of the policies, procedures, and HMDA data to ensure compliance and accuracy and is advised each year of the accuracy and timeliness of the financial institution's data submissions. 

·       What procedures the institution has put in place to comply with the requirement to submit data in machine-readable form, and whether the institution has some mechanism in place to ensure the accuracy of the data that are submitted in machine-readable form. 

·       Whether the institution's loan officers are familiar with the disclosure, reporting, and retention requirements associated with the loan application registers and the FFIEC public disclosure statements. 

·       Whether the institution's loan officers are familiar with the disclosure statements that will be produced from the data. 

·       Whether the institution's loan officers and affected staff know that civil money penalties may be imposed when an institution has submitted erroneous data and has not established adequate procedures to ensure the accuracy of the data. 

·       Whether the institution's loan officers and affected staff know that correction and resubmission of erroneous data may be required when data are incorrectly reported for at least 5 percent of the loan application records. 

Jonathan Foxx, Ph.D., MBA
Chairman & Managing Director
Lenders Compliance Group

[i] 12 CFR Part 1003

[ii] Home Mortgage Disclosure Act (HMDA), Consumer Financial Protection Bureau, September 2021. Also see 12 USC 2801–2810.

[iii] 15 USC 1691–1691f, 42 USC 3605, a nd 12 CFR 1002

[iv] 12 USC 2901–2908, and 12 CFR 25, 195, 228, and 345

[v] 12 CFR 1003.2(g)

[vi] HMDA Data Collection and Reporting: Keys to an Effective Program, Consumer Compliance Outlook, Fourth Issue 2020, published by the Philadelphia FRB, provides a good overview of coverage tests and thresholds, among other things.

[vii] 12 CFR 1003.4(f)

[viii] 12 CFR 1003.5(a)(1)(i)

[ix] Effective January 1, 2020.