Entities supervised by the CFPB have “flexibility” to allow appropriate risk management of the relationships they have with third-party service providers. CFPB provided this clarification in a recent update to its guidance on third-party service provider risk management. Read the Guidance