The bill increases transparency and stakeholder participation in CFPB data-deletion decisions, strengthening oversight and privacy protections, but may slow removal of sensitive data and raise compliance costs for firms and the agency.
Consumers will have stronger privacy protections because the CFPB must use notice-and-comment rulemaking before deleting or modifying data, increasing transparency about data-removal decisions.
Consumers and firms gain a formal opportunity to review and comment on proposed CFPB data deletions/modifications, improving stakeholder input and oversight of agency actions.
Consumers may face longer exposure of sensitive data because the notice-and-comment rulemaking process can delay the CFPB's ability to promptly remove or correct data.
Financial institutions (and the CFPB) will incur higher administrative and compliance costs due to the required rulemaking, which could divert agency resources from other enforcement activities.
Based on analysis of 2 sections of legislative text.
Requires the CFPB to complete notice-and-comment rulemaking describing and justifying any deletions or modifications of data under the specified ECOA provision.
Introduced April 10, 2025 by John Rose · Last progress April 10, 2025
Requires the Consumer Financial Protection Bureau to use notice-and-comment rulemaking before deleting or modifying certain consumer credit data under the Equal Credit Opportunity Act and to publish what changes it plans and how those changes protect privacy. Also gives the Act a short title; it does not appropriate funds or change substantive duties beyond the new rulemaking requirement.