Advertising, Consumer Protection, and Privacy Our People

(pdf)

Rule finalizes many provisions of the proposed rule, imposing new privacy and security obligations directly on business associates and modifying the definition of "breach" and the required factors to be considered in a risk assessment.

Rule lists criteria that lenders must consider in determining whether a prospective borrower has the ability to repay a loan and defines Dodd-Frank's concept of a "qualified mortgage."