CFPB Report: 2017-SR-C-011 May 15, 2017
We assessed how well the CFPB's Office of Enforcement safeguards confidential information about the people, businesses, and investigative activities involved in its enforcement cases.
The Office of Enforcement did not timely restrict access to confidential information for reassigned or transferred personnel. In addition, the office's labeling and storage standards were inconsistently followed and its naming conventions for investigative files were inconsistent, which could increase the risk of unauthorized disclosures. During our fieldwork, the office took steps to improve its approach to restricting access.
Our report contains recommendations to address these findings.
