A partner at Alston & Bird said the bureau’s orders to six tech firms operating payment systems may have violated the Paperwork Reduction Act. The rule requires months of public outreach and OMB approval before information collection requests can be sent.