A notable uptick in unresolved recommendations connected to data security upgrades, submitted to the Consumer Financial Protection Bureau (CFPB) by the Federal Reserve Board’s Office of Inspector General (OIG), were reported for 2025, according to new data published by the central bank’s internal watchdog agency.
In addition to overseeing the U.S. central bank, the OIG audits the CFPB, which derives most of its funding from the Fed.
After closing 19 of 27 recommendations made by the OIG in 2024, leaving eight open, the CFPB closed just three of the 19 recommendations made last year. Only recommendations left open for six months or longer are reported by the Fed's OIG, it says, because “some recommendations may require complex corrective act...



