The recent data breach disclosure by Equifax raised an outcry from consumer advocates trying to link the data breach to the Consumer Financial Protection Bureau’s (CFPB) final arbitration rule. They are portraying this cybersecurity incident as a prime example of why class actions are needed to protect consumers, hoping to persuade the U.S. Senate not to repeal the rule under the Congressional Review Act. The CFPB rule bars financial services companies from including class action waivers in consumer arbitration agreements beginning on March 19, 2018.
The Senate should disregard their arguments. While the CFPB arbitration rule covers some credit reporting company activities, it does not appear to cover data breaches such as this one. Therefore, the Equifax data breach has nothing to do with the CFPB arbitration rule. In any event, the issue appears to be moot, since according to published reports Equifax has stated that it will not seek to apply its on-line arbitration clause and class action waiver to claims based on the data breach itself.
Consumer advocates have also criticized Equifax for purportedly requiring consumers who may have been affected by the data breach and who want to sign up for the company’s offer to provide free credit protection services to agree to arbitrate claims from those services (unless they exercise their right to opt out of the arbitration clause), but Equifax has made clear that its arbitration clause and class action waiver will not apply to this cybersecurity event. But lost in the hubbub is the fact that claims of this nature would appear to be inherently individualized and not susceptible to class action treatment since the facts pertinent to each consumer’s account presumably will be unique.
Ultimately, this incident exemplifies why the Senate should vote to repeal the CFPB arbitration rule. The CFPB, the Federal Trade Commission and state attorneys general (most notably Attorney General Schneiderman of New York) got involved almost immediately and will advocate on behalf of consumers more efficiently and effectively than class action lawsuits, without siphoning off a hefty attorneys’ fee if they prevail.