Special Episode: Regulatory Roundup: October 2026
In this audio edition of the PerformLine Regulatory Compliance Roundup, Ashley Cianci covers October’s biggest stories: the FTC went all-in on price transparency, across retail, autos, search ads, and healthcare, California wrote fair-lending exams into law and its AI ad-disclosure rule is coming January 1st, the FTC is targeting fake reviews and impersonation, and eyeing platform liability, the CFPB is getting pulled in two directions while its director still waits and New York City’s click-to-cancel rule is now live.
Key Takeaways
- Pricing Transparency: The FTC brought pricing cases in retail, autos, search ads and healthcare. Ads that hide mandatory fees are deceptive, so lead with the all-in price.
- Fintech: The FTC began returning $15.8M to 2.1M Cleo AI users over its cash-advance ads. Make sure the benefit you advertise matches the product consumers actually get.
- California: AB 801 fair-lending exams and SB 1050 AI ad disclosures both start Jan. 1, 2027. Calibrate to the strictest standard, which is often a state one.
- Fake Reviews: The FTC is targeting fake reviews and impersonation, and is considering platform liability. Monitor partner claims and document that your reviews are genuine.
- CFPB pulled in two ways: A court ordered the CFPB to seek its funding, and the Bureau launched a debanking initiative. Plan for federal volatility and watch state and multistate enforcement.
- Click-to-cancel: NYC’s click-to-cancel rule took effect Oct. 1, and states are bringing small auto-renewal cases. Make canceling as easy as signing up everywhere.
Show Notes:
- Read the full October 2026 Regulatory Roundup: https://performline.com/blog-post/regulatory-compliance-roundup-10-28-26/
- Connect with Ashley Cianci: https://www.linkedin.com/in/ashley-cianci/
- Subscribe to PerformLine to stay connected to resources and updates: https://lp.performline.com/subscribe-to-performline
Subscribe to COMPLY: The Marketing Compliance Podcast
About COMPLY: The Marketing Compliance Podcast
The state of marketing compliance and regulation is evolving faster than ever. On the COMPLY Podcast, we sit down with the biggest names in marketing, compliance, regulations, and innovation as they share their playbooks to help you take your compliance practice to the next level.
This podcast is for informational and educational purposes only and does not constitute legal advice; consult your own compliance or legal counsel.
Episode Transcript:
Ashley Cianci:
Hey COMPLY Podcast listeners, and welcome back. I’m Ashley Cianci, and this is the audio edition of the PerformLine Regulatory Compliance Roundup — where we pull the regulatory news that actually matters for your marketing, cut the noise, and talk through why each story matters for your compliance program. Today I’m walking you through the October edition.
And here’s the shift I want you to notice this month. For the last couple of editions, the story was the states doing most of the enforcing while the federal agencies pulled back. This month, the FTC came roaring back — and it did it around one very simple idea that should be music to a compliance team’s ears: the price you advertise has to be the price people can actually pay. We’ve also got California writing fair-lending exams into law, the FTC going after fake reviews and impersonation, and a CFPB that’s honestly getting pulled in two different directions at once.
So grab your coffee, and let’s get into it. Everything I cover is in the full written Roundup on our blog at performline.com, with all the source links, and you can subscribe there to get it the day it drops.
Story number one: the FTC went all-in on price transparency — and I mean all-in, across four completely different industries in a matter of weeks.
Let me run through them, because the pattern is the point. On October 26th, the FTC and 20 states sued Dollar General, alleging it routinely charged customers more at the register than the shelf or advertised price — and that it had racked up tens of thousands of pricing complaints it allegedly didn’t fix. On October 8th, the FTC settled with an auto retailer, Greenway Auto Group, which it said advertised vehicle prices thousands of dollars below what buyers actually paid. The number here is wild: more than $3,350 over the advertised price, on average, in over 92% of transactions — through tacked-on “administrative,” “dealer,” and “processing” fees. The order now requires Greenway to make the actual total price the most prominent figure in its ads. And here’s the context: that’s the first group action following warning letters the FTC sent to 97 dealer groups earlier this year.
It kept going. On October 2nd, the FTC — with the Utah and Nevada attorneys general — sued the contact-lens retailer Lens.com over prices it advertised in search ads and on its site that consumers allegedly couldn’t actually get. And on October 5th, Chairman Ferguson sent letters to 24 of the largest healthcare companies in the country, warning them to give patients accurate pricing. Retail, autos, search ads, healthcare — four industries, one message.
So why does this matter to you? Because price transparency is now a durable, cross-sector FTC priority, and the throughline runs straight into financial services. The agency’s theory is the same whether it’s a car, a box of contacts, or a hospital bill: an advertised price that leaves out mandatory fees, or that almost nobody can actually get, is deceptive. Map that onto what we do — rate promotions, “as low as” offers, fee schedules. If a meaningful chunk of your consumers can’t get the advertised rate or price once the mandatory charges are added in, that’s exposure. And watch the mechanics the FTC is using: it’s teaming up with state AGs, it’s moving from warning letters to actual cases when the conduct continues, and it wants the all-in total to be the most prominent number. So my advice: audit your advertised prices and rates against what people truly pay, and make that all-in figure the one you lead with.
And that brings me to this edition’s Significant Stat: $15.8 million.
That’s how much the FTC started returning — to roughly 2.1 million consumers — over deceptive marketing by the fintech cash-advance app Cleo AI, with payments going out starting the week of October 27th. The FTC alleged that Cleo advertised access to “hundreds of dollars” in instant cash advances that almost nobody actually received, that the expedited advances often showed up late, and that cancellation was difficult. Cleo settled for $17 million while denying wrongdoing. I flag it because it’s the cleanest example this month of deceptive-marketing enforcement hitting a fintech directly — the advertised benefit didn’t match the real product.
Story number two: California keeps building its own consumer-finance and marketing regime — completely independent of whatever’s happening at the federal level.
On September 30th, Governor Newsom signed AB 801, the California Fair Lending Examination Act. Starting January 1st, 2027, it directs the state’s DFPI to examine state-chartered banks and credit unions that meet HMDA reporting thresholds — at least once every four years — plus licensed mortgage lenders and servicers, for compliance with federal and California fair-lending laws. That’s ECOA, the Fair Housing Act, the Unruh Civil Rights Act, and California’s Holden Act.
And that lands right next to SB 1050 — the AI synthetic-performer ad disclosure law we talked about last edition. That was signed September 16th, and it also takes effect January 1st, 2027, requiring a clear disclosure when an ad prominently features a realistic AI-generated performer. One more signal worth noting: on October 14th, a coalition of eight state attorneys general filed coordinated suits against OpenAI, applying consumer-protection deception theories to claims about an AI product’s safety.
Why it matters: this is the split-screen of 2026. The federal fair-lending posture has softened — the CFPB has stepped back from disparate-impact enforcement — and California just did the exact opposite, writing recurring fair-lending exams into law. So if you lend in California, that means scheduled, affirmative scrutiny of your lending and the marketing behind it, against both federal and state standards, no matter what mood the federal agencies are in. And with SB 1050’s AI-disclosure rule taking effect the same day, January 1st, 2027 is now a real compliance date for anyone marketing lending products in the state. Zoom out, and those OpenAI suits tell you state AGs increasingly see AI claims as just… advertising claims, subject to deception law. So calibrate your fair-lending and your AI-disclosure practices to the strictest applicable standard — which, more and more, is a state one.
Story number three: the FTC also went after a different kind of deception this month — the kind that’s about manufactured trust. Fake reviews and impersonation.
On October 22nd, the FTC sued the operators of a government-impersonation scheme that, according to the complaint, posed as official passport and immigration services — using deceptive ads, misleading promises, and fake positive reviews to look legitimate and pull consumers in. And fake reviews showed up as a tool in other actions this month too, as the agency kept leaning on its Reviews and Testimonials Rule.
And then the FTC moved to widen the net. On September 24th, it asked for public comment on whether to expand its Rule on the Impersonation of Government and Businesses to cover the role online platforms play in promoting impersonation scams — think fraudulent ads and listings that impersonate real companies or agencies. Now, that’s an early rulemaking step, not a final rule — but the direction is pointed: push responsibility up the chain to the platforms distributing the deceptive content.
Why it matters: two things for financial marketers. First, fake or incentivized reviews and false affiliation claims are an active enforcement priority right now, and the Reviews and Testimonials Rule gives the FTC a direct tool. So if your brand, your affiliates, or your lead-gen partners are seeding or buying reviews — or implying endorsements and affiliations that don’t actually exist — that is squarely in scope. Second, that proposed platform expansion is the “enabler liability” theme coming back around — the same principle behind those payment-processor cases we talked about, now aimed at the platforms that distribute ads. Which raises the stakes for anyone marketing through them. So the move here is to monitor what’s being said under your name and by your partners across every channel, and keep the documentation that shows your reviews and endorsements are genuine.
Story number four: the CFPB. And this month, the Bureau is genuinely getting pulled in two directions at once.
On September 25th, a federal court in Oregon — in a case brought by California Attorney General Rob Bonta and a coalition of 22 attorneys general — ruled that the CFPB’s acting director, Mark Paoletta, must request the funding the Bureau is entitled to draw from the Federal Reserve. The court found that refusing to draw those funds was unlawful. So you’ve got a court pushing to keep the Bureau funded and functional — even as its own leadership is working to shrink it. Then, on October 14th, the CFPB announced a new initiative to address “debanking” — consumer harm the OCC said it found at the nine largest national banks, where access was allegedly denied or restricted based on political or religious beliefs, or lawful business activity.
And the leadership question still isn’t settled. Brian Johnson — Trump’s nominee for permanent director — cleared the Senate Banking Committee back in September, but he still has not been confirmed by the full Senate, and a floor vote isn’t expected until after the midterms. Meanwhile, that revised Section 1033 open banking proposal is still sitting under White House review, unpublished.
Why it matters: the Bureau is being steered by courts and other agencies about as much as by its own leadership right now, which makes its near-term direction genuinely hard to predict. I’d keep a close eye on that debanking initiative — it’s a rare case of this CFPB leaning into a new consumer-facing issue, and it could touch account marketing, eligibility, and customer communications at large banks. For planning, assume continued federal volatility, and keep your attention on the state and multistate activity that’s been driving most of the real enforcement all year. And watch for that open banking proposal — whenever it finally publishes, the comment window is going to matter to nearly every bank and fintech.
And that brings me to our “On the Radar” item. This month it’s a deadline that’s already here: New York City’s click-to-cancel rule took effect October 1st, and the city’s consumer agency is now taking complaints.
It’s the first municipal click-to-cancel mandate in the country, and the rule is simple: any auto-renewal or continuous-service subscription offered to New York City consumers has to be cancellable through the same method the consumer used to sign up. Penalties start at $525 per violation and go up from there for repeat violations. And the states are enforcing right alongside it — on October 14th, Vermont’s attorney general settled with UniFirst for $60,000 over its auto-renewal law. Small dollar figure, but a clear signal that even modest cases are getting brought.
Why it matters: subscription and auto-renewal compliance keeps fragmenting — down to the state, and now the city level — and the standards aren’t uniform. If you run any recurring-billing offer with New York City subscribers, October 1st was a hard deadline, and the standard is simple to state: your cancellation path has to be as easy as your sign-up path. So map your enrollment and cancellation flows against every jurisdiction where you’ve got subscribers, design to the strictest standard, and honestly, just make “as easy to cancel as it is to sign up” your baseline everywhere. That’s where all of this is heading.
And that’s this edition of the Regulatory Roundup. Quick recap: the FTC went all-in on price transparency, across retail, autos, search ads, and healthcare — so make sure your advertised price is the real price. California wrote fair-lending exams into law and its AI ad-disclosure rule is coming January 1st. The FTC is targeting fake reviews and impersonation, and eyeing platform liability. The CFPB is getting pulled in two directions while its director still waits. And New York City’s click-to-cancel rule is now live.
If any of these hit home for your program, the full written Roundup — with every source link — is on our blog at performline.com, and I’d really encourage you to subscribe so you never miss an edition. You can also follow PerformLine on LinkedIn for news and content in between editions. And if there’s a story you think we should cover, or you’ve got feedback on this audio format, I want to hear it — reach out at performline.com or connect with me on LinkedIn.
Thanks so much for listening, and I’ll see you at the next edition of the Roundup.