Unknown Sponsor Bank
In June 2025, the Consumer Financial Protection Bureau (CFPB) rolled back certain UDAAP (Unfair, Deceptive, or Abusive Acts or Practices) oversight provisions, reducing some regulatory burdens on fintech firms and their bank partners. The rollback represents a shift in the CFPB's supervisory posture and may ease compliance requirements for some BaaS arrangements. However, the source notes that core risks persist despite the reduced oversight, suggesting that banks should not relax their compliance programs. The change is part of a broader 2025 regulatory recalibration that includes both tightening (enforcement actions) and loosening (UDAAP rollback) of oversight depending on the area of regulation.
Verified from source: The CFPB withdrew 67 pieces of guidance in May 2025, revising the UDAAP framework, reducing fintech and crypto oversight, and rolling back various consumer protection guidelines. While federal guidance was withdrawn, consumer protection laws remain enforceable through courts, state attorneys general, and private litigation.
- Reduced UDAAP oversight may lower compliance costs for some BaaS models
- Banks should not reduce UDAAP compliance programs as core consumer protection risks remain
- May create a gap between reduced federal oversight and continuing state-level enforcement