CFPB must now justify data changes in public—lenders gain input
H.R. 2885 — Bank Loan Privacy Act · Filed by John Rose (R-TN) · 2 cosponsors · Introduced Apr 10, 2025 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill requires the Consumer Financial Protection Bureau (CFPB) to issue a formal rule—with public notice and comment—before it deletes or modifies small business loan data. Currently, the CFPB can delete or modify such data at its discretion. The bill adds a procedural gate: the CFPB must publicly explain what data it plans to change and why those changes serve privacy interests before acting.
Why we flagged it
The bill does not change CFPB's substantive authority to delete or modify small business loan data; it adds a procedural requirement (notice-and-comment rulemaking) before the CFPB acts. This is a transparency and process measure, not a deregulation or substantive policy shift.
What the text implies
- The rulemaking requirement may slow CFPB data-governance decisions, creating de facto delays in privacy-protective data modifications if the CFPB determines deletions/modifications serve privacy interests.
- Public notice-and-comment creates an opportunity for lenders and small businesses to lobby against data deletions the CFPB proposes, potentially weakening data-governance outcomes.
The full analysis lists 3 implications of this text.
Who stands to gain
small business lenders; community banks; fintech lenders