Understanding the New FTC Rules on Financial Institutions (And Why It Matters for Your Business)

In recent updates, the FTC has expanded its definition of which businesses qualify as “financial institutions,” with new rules that may affect many businesses beyond traditional banks or lenders. This change means that if your business handles consumer transactions, credit, or even certain types of advising, you may need to meet additional compliance requirements to protect consumer information. Here’s a quick breakdown of who now falls under this “financial institution” umbrella—and how it could impact your operations.

Does Your Business Qualify as a Financial Institution?

Under these new rules, a wide variety of businesses could now be classified as financial institutions. Even if you don’t think of your business as one, it’s worth checking. Here’s a straightforward list to see if your business fits into one of these newly included categories:

1. Retailers with In-House Credit Cards: If your business issues its own credit cards directly to consumers, you’re considered a financial institution under FTC guidelines.
2. Automobile Dealerships with Long-Term Leasing: Dealerships that lease vehicles for over 90 days (non-operating leases) are also included.
3. Property or Real Estate Appraisers: Those providing valuations on properties are now on the list.
4. Career Counselors for Financial Sectors: If you specialize in career counseling for individuals working in or transitioning from financial organizations, you’re covered by these new rules.
5. Check Printers: Businesses that print and sell checks for consumers are now also considered financial institutions.
6. Money Transfer Services: If your business frequently wires money to and from consumers, you fall under the FTC’s expanded definition.
7. Check Cashing Services: Check cashing businesses are also covered.
8. Tax Preparation and Accounting Services: If your business prepares income tax returns, you’re part of this expanded group.
9. Real Estate Settlement Services: Entities providing settlement services for real estate transactions are now under this classification.
10. Mortgage Brokers: Any company involved in mortgage brokering is also considered a financial institution.
11. Investment Advisory Companies: Companies providing investment advice and management now fit within these guidelines.
12. Finders: If your business connects buyers and sellers for any product or service, you’re included in this group.

Why These Changes Matter

Expanding the definition of financial institutions means that businesses in these categories now need to meet certain compliance standards to protect consumer information. This includes adhering to the updated FTC Safeguards Rule, which provides guidelines on how businesses should secure their customer data to prevent breaches and misuse.

For more in-depth details on these requirements, you can check out the FTC’s official resource: FTC Safeguards Rule: What Your Business Needs to Know.

Cyber Insurance Policies and Compliance

If your business has a cyber insurance policy, it’s crucial to ensure you’re meeting all requirements, especially in light of these new classifications. Cyber insurance providers often require annual applications to remain valid, and if these aren’t filled out correctly or if compliance isn’t met, insurers can deny a claim. This means more than just filling out paperwork—it’s about ensuring that your business practices align with industry regulations.

Let’s Review Together

If you’d like, we can discuss your cyber insurance application and overall compliance during our meeting on Wednesday. Staying ahead of these changes and ensuring everything is in order can help you avoid unexpected issues in the future.

Understanding and aligning with these FTC updates can protect both your business and your customers, helping you stay secure in an increasingly complex regulatory environment.