On December 16, the Consumer Financial Protection Bureau (CFPB) issued orders to five companies offering buy now, pay later (BNPL) products. BNPL programs are designed to allow consumers to purchase goods and to defer payment over a short term with little to no interest, but with the potential for fees in the event of nonpayment. The CFPB noted that BNPL saw “explosive growth” through the holiday shopping period.

In connection with its duty to monitor consumer financial markets, the CFPB can require market participants to submit information to inform its monitoring. In its release, the CFPB noted that its inquiry focuses on the following topics:

• Potential accumulation of debt by BNPL users;
• Potential applicability or non-applicability of a range of consumer financial protection laws; and
• Data collection, behavioral targeting, and data monetization practices of BNPL providers.

However, the order goes more in-depth. The 20 questions included with the order are broken down into the following categories:

1. Description of Products
2. Business Model/Metrics
   1. Total transactions initiated and unique users
   2. Minimum, maximum, and median number of installments on transactions
   3. The number of participants and the amounts of specific numbers of transactions
   4. Company financial information, including merchandise volume among certain types of goods and/or services, and customer payment option information
   5. Underwriting practices
   6. Fee practices, including fees charged to consumers and merchants
   7. Participating merchant vetting
   8. Virtual card usage
3. Loan Performance Metrics
   1. Any use of third-party servicers
   2. Credit reporting, including information on loan stacking
   3. Returns and refunds
   4. Delinquencies, charge-offs, and payment extensions
   5. Defaults and collections
4. Consumer Protections
   1. Disclosure practices, including disclosures given in user agreements and in the user experience
   2. State licensing practices
5. User Contacts and Demographics
   1. Number of users contacting the provider about items, such as credit reporting complaints and difficulty modifying payment amounts or dates
   2. Age, gender, and income information for users generally, users that default, and consumers that are declined BNPL products
6. Data Harvesting
   1. Types of data collected, including specific data field information and each data field’s purpose for collection
7. Data Monetization
   1. The use of data for cross-selling purposes, targeted advertising, or third-party sharing, and the specifics of the data used

It’s safe to say BNPL is firmly within the view of both regulators and legislators. These orders follow last month’s hearing before the House Financial Services Committee’s Task Force on Financial Technology, where panelists were asked in-depth questions about BNPL products and practices. For more information on this hearing, please see our blog post here.