Reports & Testimonies

Share This:

Recommendations Database

GAO’s recommendations database contains report recommendations that still need to be addressed. GAO’s priority recommendations are those that we believe warrant priority attention. We sent letters to the heads of key departments and agencies, urging them to continue focusing on these issues. Below you can search only priority recommendations, or search all recommendations.

Our recommendations help congressional and agency leaders prepare for appropriations and oversight activities, as well as help improve government operations. Moreover, when implemented, some of our priority recommendations can save large amounts of money, help Congress make decisions on major issues, and substantially improve or transform major government programs or agencies, among other benefits.

As of October 25, 2020, there are 4812 open recommendations, of which 473 are priority recommendations. Recommendations remain open until they are designated as Closed-implemented or Closed-not implemented.

Browse or Search Open Recommendations

Priority recommendations only All recommendations

Browse

Search

Have a Question about a Recommendation?

For questions about a specific recommendation, contact the person or office listed with the recommendation.
For general information about recommendations, contact GAO's Audit Policy and Quality Assurance office at (202) 512-6100 or apqa@gao.gov.

« Back to Results List Sort by

Results:

Subject Term: "Consumer protection laws"

2 publications with a total of 5 open recommendations

Download these results in CSV format or XLSX format.

Consumer Reporting Agencies: CFPB Should Define Its Supervisory Expectations
GAO-19-459, Jul 16, 2019

Director: Anna Maria Ortiz
Phone: (202) 512-8678

2 open recommendations

Display

Recommendation: The Director of CFPB should communicate to CRAs its expectations regarding reasonable procedures for assuring maximum possible accuracy of consumer report information. (Recommendation 1)

Agency: Consumer Financial Protection Bureau
Status: Open

Comments: In a January 2020 update, CFPB reemphasized statements made in its comment letter, including its expectation for CRAs to fully comply with applicable federal consumer financial laws and the role of case law in providing guidance to CRAs. CFPB additionally noted that its publicly available examination procedures discuss factors that CFPB will consider in evaluating compliance with the reasonableness standard under the Fair Credit Reporting Act (FCRA). CFPB stated that since publication of the report, it has taken actions to convey expectations to CRAs, including holding a joint workshop with FTC in December 2019 on consumer reporting accuracy and publishing a Supervisory Highlights special edition focused on consumer reporting. More direct communication of CFPB's expectations can provide CRAs with clearer information on what actions might constitute a FCRA violation and how CRAs should comply with the reasonableness standard. We maintain that providing additional information to CRAs about its expectations for key FCRA requirements could help CFPB to promote consistency and transparency in its supervisory approach and that the recommendation should be addressed.

Recommendation: The Director of CFPB should communicate to CRAs its expectations regarding reasonable investigations of consumer disputes. (Recommendation 2)

Agency: Consumer Financial Protection Bureau
Status: Open

Comments: In a January 2020 update, CFPB restated the requirements for a reasonable investigation under the Fair Credit Reporting Act (FCRA) and noted that court cases have articulated what qualifies as a reasonable investigation. CFPB also noted that a 2011 FTC report summarizes how the courts and FTC have interpreted these obligations, and that CFPB issued a bulletin on reasonable investigations in September 2013. CFPB stated that it has and will continue to communicate its expectations to CRAs regarding applicable provisions of FCRA. We maintain that providing additional information to CRAs about its expectations for key FCRA requirements could help CFPB to promote consistency and transparency in its supervisory approach and that the recommendation should be addressed.

Consumer Data Protection: Actions Needed to Strengthen Oversight of Consumer Reporting Agencies
GAO-19-196, Feb 21, 2019

Director: Michael Clements
Phone: (202) 512-8678

3 open recommendations

Display

Recommendation: The Director of CFPB should identify additional sources of information, such as through registering CRAs or leveraging state information, that would help ensure the agency is tracking all CRAs that meet the larger participant threshold. (Recommendation 1)

Agency: Consumer Financial Protection Bureau
Status: Open

Comments: In July 2020, CFPB staff noted that they have reviewed state CRA registration information available to them, are working to obtain additional state registration information, and are exploring additional ways to leverage the information. GAO will continue to monitor CFPB's progress in leveraging additional sources of information that would help identify larger participant CRAs.

Recommendation: The Director of CFPB should assess whether its process for prioritizing CRA examinations sufficiently incorporates the data security risks CRAs pose to consumers, and take any needed steps identified by the assessment to more sufficiently incorporate these risks. (Recommendation 2)

Agency: Consumer Financial Protection Bureau
Status: Open

Comments: In July 2020, CFPB staff noted that they were assessing whether, and if so, how and when, to incorporate data security risks into their supervisory prioritization. As part of that evaluation, CFPB is assessing whether those processes should incorporate data security risks CRAs pose to consumers in light of the agency's statutory authorities, supervisory responsibilities, and resources. GAO will continue monitoring CFPB's assessment of prioritization of CRA data security risks.

Recommendation: Congress should consider providing the Federal Trade Commission with civil penalty authority for the privacy and safeguarding provisions of the Gramm-Leach-Bliley Act to help ensure that the agency has the tools it needs to most effectively act against data privacy and security violations. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: As of July 2020, Congress has not passed legislation to provide FTC with civil penalty authority for the privacy and safeguarding provisions of the Gramm-Leach-Bliley Act.