On March 15, 2025, Kentucky Governor Andy Beshear signed into law HB 473. The bill amends the Kentucky Consumer Data Protection Act (“KCDPA”) to exempt from the law’s application (1) information collected by health care providers acting as covered entities under HIPAA that maintain protected health information in accordance with HIPAA; and (2) information maintained in limited data sets by HIPAA covered entities in accordance with HIPAA’s relevant requirements. The KCDPA as amended will go into effect on January 1, 2026.
The Washington State Attorney General’s (AG) Office filed a lawsuit against Renton Collections Inc., accusing the company of violating Washington’s Collection Agency Act by failing to include certain disclosures in their collection letters to debtors.
Saying that the CFPB’s consideration of returning funds to the Federal Reserve is not a sign that the Trump Administration intends to abolish the bureau, a federal judge has refused to issue a preliminary injunction stopping those transfers.
The Office of the Comptroller of the Currency (OCC) has established a new Digitalization page on its website—www.occ.gov—dedicated to resources to help community banks1 meet their digitalization objectives.
On March 7, the Community Financial Services Association of America (CFSA) and the Consumer Service Alliance of Texas filed a petition for a writ of certiorari with the U.S. Supreme Court seeking to overturn a decision by the U.S. Court of Appeals for the Fifth Circuit. The Fifth Circuit held that in order to obtain judicial relief, a party challenging governmental action taken by an individual who remained in office against the President’s wishes due to an unconstitutional removal restriction must show that a hypothetical replacement officer would have taken a different action. The petitioners argue that this standard is unreasonably burdensome and inconsistent with the Supreme Court’s decision in Collins v. Yellen.
.jpg)
.jpg)