Yes, I did see that. Would you consider the authorization as covering varying amounts if the loan payment authorization agreement says "amount due", rather than a dollar amount in the payment amount field? In reading the Official Staff Commentary for 1005.10(d) I am not sure it satisfies the requirement. Below is the staff commentary...
1. Range. A financial institution or designated payee that elects to offer the consumer a specified range of amounts for debiting (in lieu of providing the notice of transfers varying in amount) must provide an acceptable range that could be anticipated by the consumer. For example, if the transfer is for payment of a gas bill, an appropriate range might be based on the highest bill in winter and the lowest bill in summer.
2. Transfers to an account of the consumer held at another institution. A financial institution need not provide a consumer the option of receiving notice with each varying transfer, and may instead provide notice only when a debit to an account of the consumer falls outside a specified range or differs by more than a specified amount from the most recent transfer, if the funds are transferred and credited to an account of the consumer held at another financial institution. The specified range or amount, however, must be one that reasonably could be anticipated by the consumer, and the institution must notify the consumer of the range or amount at the time the consumer provides authorization for the preauthorized transfers. For example, if the transfer is for payment of interest for a fixed-rate certificate of deposit account, an appropriate range might be based on a month containing 28 days and a month containing 31 days.
* My opinion is not necessarily that of my employer.