IANAL, but this email might not have any force of law because the CFPB was created by COTUS by Dodd–Frank and its parent agency is the Federal Reserve. While it generally complies with OMB guidance, it doesn't necessarily form a legally-binding reporting structure.