CFPB has recorded no new enforcement action in 360 days, and says it currently cannot lawfully draw more funds