Skip to main content

State Regulators Enter into Consent Order with Equifax

Today, eight state financial regulators entered into a consent order with Equifax, Inc. The order addresses serious deficiencies in the company’s cybersecurity program that resulted in the breach of personal data of almost 150 million consumers last year. 

The consent order can be read here. Announcements from individual states: California, New York, North Carolina, Texas.

Key facts:

  • Financial regulators from eight states led the action. The states represented are: Alabama, California, Georgia, Maine, Massachusetts, New York, North Carolina and Texas. 

  • The consent order arose from a joint examination these regulators performed of the company.

  • In the consent order, Equifax agreed to dramatically improve how it protects personally identifiable information. The company will undertake a restructuring of its risk management processes, strengthening of internal controls and processes, and enhanced oversight by the Board of Directors on the information security program.

  • The corrective actions will apply to Equifax’s operations nationwide.

  • Compliance with the consent order will be subject to regulator approval. Follow-up reports are required from the company.

  • The consent order preserves the right of individual states to bring additional actions.

Recent Blog Posts

Blog post
Through CSBS Vision 2020, state regulators are implementing a series of initiatives to better harmonize the multistate regulatory experience for nonbanks, including fintechs
Feb 19, 2019
Blog post
States have a history of states working together to harmonize multistate regulation. The benefit: the efficiencies of a national system combined with the local accountability of regulated institutions.
Feb 18, 2019
Blog post
The community bank leverage ratio proposed by federal regulators would result in regulatory burden that exceeds any relief provided due to the proposed new prompt corrective action framework.
Feb 15, 2019
Blog post
Community banks are making structural changes as they fully embrace technology solutions. As technology solutions have become mission critical, technology-related roles are less likely to be a piece of someone’s job.
Feb 8, 2019