Also: CFPB reiterates that nonbank fintechs maintain adequate data security safeguards