Company: FCNCB
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0000798941-25-000010
Chunk: 105

Company: FIRST CITIZENS BANCSHARES INC /DE/
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1
Chunk 105
---
 products and service, and to take supervisory and enforcement action against financial services companies under the agency’s jurisdiction that fail to comply with federal consumer financial laws. Enforcement actions may include imposition of substantial monetary penalties and nonmonetary requirements. In recent years, the CFPB has been focused on enforcement actions and rulemakings aimed at eliminating or restricting a number of fees assessed by financial institutions such as overdraft and non-sufficient funds (“NSF”) fees as well as other transaction- and account management-related fees deemed by the CFPB to be “junk fees.” In response to this and other legislative and regulatory scrutiny, in January 2022, we announced an elimination of NSF fees and a decrease in overdraft fees. On December 12, 2024, the CFPB adopted its final overdraft rule, which requires institutions with more than $10 billion in assets to (i) cap their overdraft fee at $5, (ii) cap their fee at an amount that covers costs and losses, or (iii) treat overdraft lending the same as other loans and comply with the standard legal and regulatory requirements that govern other consumer loans, like credit cards, with account disclosures, periodic statements, and autopay options. The compliance date for the rule is October 1, 2025. On December 16, 2024, several trade groups filed a lawsuit in federal court against the CFPB challenging the statutory authority of the agency to adopt the rule. On February 8, 2025, the acting director of the CFPB issued a notice to staff to cease all supervision and examination activity. We continue to monitor the impacts of the change in political environment on the CFPB as a result of the Trump administration and makeup of Congress, the status of the lawsuit, and prepare for compliance with the rule. 

FCB, as a state-chartered bank, is also subject to state consumer protection laws in the states in which it operates, and the Dodd-Frank Act enhanced the ability of state attorneys general to enforce federal consumer protection laws.

Privacy, Data Protection, and Cybersecurity

BancShares is subject to a number of federal, state, local and foreign laws and regulations relating to consumer privacy and data protection. These laws include certain portions of the GLBA, the federal banking agencies’ Computer-Security Incident Notification rule (the “36 Hour Rule”), the SEC’s item for cybersecurity incidents Current Report on Form 8-K (“Cybersecurity Form 8-K Item”), the California Consumer Privacy