Key Aspects of Consumer Financial Protection Bureau's New Small Business Data Collection Rule

• Jurisdiction: United States,Federal
• Citation: Vol. 1 No. 4
• Publication year: 2023

[Page 313]

Tori K. Shinohara, Francis L. Doorley, and Kerri Elizabeth Webb ^*

In this article, the authors discuss the background of a final rule published by the Consumer Financial Protection Bureau implementing Section 1071 of the Dodd-Frank Act and spotlight some of the new rule's key requirements.

The U.S. Consumer Financial Protection Bureau (CFPB or the Bureau) has published its final rule implementing Section 1071 of the Dodd-Frank Act. ¹ The rule requires lenders to collect and report data about their small business lending activities, with the purpose of facilitating enforcement of fair lending laws with respect to women-owned, minority-owned, and small businesses. The 888-page rulemaking has been long-awaited by industry participants and advocacy groups. Indeed, the CFPB issued the rule just one day before its court-mandated deadline for finalization, and over 12 years after Congress passed the Dodd-Frank Act and directed the CFPB to implement small business data collection rules.

The final rule's requirements are extensive, and implementation may present a number of operational challenges. Covered institutions that are experienced with the Home Mortgage Disclosure Act's (HMDA) reporting requirements for mortgage loans may be better positioned to implement the small business data collection rule's requirements, although implementation likely will be a complicated, lengthy process for all covered institutions. The CFPB seems to recognize that implementing business processes, policies, and procedures to comply with the data collection rules will require significant time and resources, and the final rule sets forth a tiered implementation schedule based on the number of small business loans a lender originates.

Lenders will be required to start collecting the required data on various dates between October 24, 2024, and January 1, 2026.

[Page 314]

This article discusses the background of the final rule and spotlights some of the new rule's key requirements, including which institutions are covered, the data points institutions will be required to collect and report, and significant changes made to the final rule from the CFPB's 2021 proposed version of the rule.

Background

The origin of the small business data collection rule traces back to 2010 and the passage of the Dodd-Frank Act. Section 1071 of the Dodd-Frank Act amended the Equal Credit Opportunity Act (ECOA) to require creditors to collect, and report to the CFPB, certain information designed to effectuate federal fair lending laws with respect to women-owned, minority-owned, and small businesses. It was not clear at the time whether the Section 1071 data collection obligations were self-executing or if the CFPB was required to promulgate implementing regulations prior to the data collection requirements becoming effective. On April 11, 2011, the CFPB's general counsel issued the Bureau's first piece of industry guidance, indicating that obligations under Section 1071 would not take effect until the Bureau issued implementing regulations, which he indicated it would do "expeditiously." Despite this statement, however, the small business data collection rulemaking appeared only sporadically on the Bureau's regulatory agenda throughout the ensuing decade, each time without a proposed rule ever materializing.

The CFPB's delay in beginning the rulemaking process to implement Section 1071 did not go unnoticed by consumer advocacy groups. In 2019, two community groups and two individuals filed suit to compel the agency to carry out the required rulemaking. This suit culminated in a February 2020 settlement, under which the CFPB committed to a timeline for the 1071 rulemaking. In September 2021, the Bureau issued a proposed rule to implement Section 1071 of the Dodd-Frank Act. Approximately 2,100 comments were submitted in response to the proposed rule. And on March 30, 2023, the CFPB issued the final rule. Certain key aspects of the final rule are highlighted below.

[Page 315]

Key Terms and Definitions

What Types of Credit Transactions and Applications Are Covered?

A covered credit transaction under the final rule generally aligns with the existing definitions of "credit" and "business credit" under ECOA and its implementing regulation, Regulation B. Under ECOA and Regulation B, "credit" is defined as "the right granted by a creditor to an applicant to defer payment of a debt, incur debt and defer its payment, or purchase property or services and defer payment therefor." ² Under the final rule, covered business credit transactions include loans, lines of credit, credit cards, merchant cash advances, and credit products used for agricultural purposes. There are a number of excluded transaction types, including, but not limited to, trade credit, HMDA-reportable transactions, insurance premium financing, incidental credit, factoring, true leases, purchases of a credit transaction, purchases of an interest in a pool of credit transactions, and purchases of a partial interest in a credit transaction, such as a participation interest. Some of these exclusions—such as incidental and trade credit—mirror exclusions already found in Regulation B, while other exclusions are unique to the...