What changed between these versions
A complete substitute amendment. V2 fundamentally restructures the compliance framework for small business lending data collection, introducing new applicant protections, explicit exemptions for small financial institutions, and a revised compliance timeline. It also removes certain data points and privacy provisions from the original act, making it effectively a different bill from v1.
Overview
Extensive changes throughout the bill, impacting multiple subsections of the Equal Credit Opportunity Act. · V2 significantly restructures the data collection requirements, narrows the scope of institutions subject to the rules, clarifies applicant rights, and delays the effective compliance date, representing a fundamental shift in approach.
V2 fundamentally reworks the compliance regime for small business lending data collection. It introduces new requirements for financial institutions to inform applicants about data collection and their rights, while also providing explicit exemptions for small financial institutions based on asset size or transaction volume. The bill also removes several data points previously required for collection and deletes an entire subsection related to data privacy, alongside establishing a new, later compliance date and safe harbor period for the entire section.
Major additions
V2 adds a requirement for financial institutions to inform applicants in writing that the Bureau of Consumer Financial Protection requires them to collect and report certain information, that the applicant is not required to provide it, and that their response will not affect the credit evaluation.
This addition significantly enhances applicant awareness and autonomy regarding data submission, potentially impacting response rates and the completeness of collected data. It shifts the burden of informing applicants directly onto financial institutions.
V2 mandates the Director of the Bureau of Consumer Financial Protection to establish a model form for providing the information required under paragraph (1). This form must be in plain English and, to the extent practicable, no longer than a single page.
This ensures standardization and clarity in applicant disclosures, aiming to make the information accessible and easy to understand for small business applicants. It imposes a new administrative task on the Bureau.
V2 adds a prohibition preventing financial institutions from compiling and maintaining information described under subsection (b) that was determined by the financial institution using visual observation or any other manner other than being provided by an applicant.
This explicitly restricts how financial institutions can collect certain demographic data, ensuring that such information is self-reported by applicants. This could reduce potential biases or inaccuracies from observational data collection and reinforces applicant control over their data.
V2 introduces an exemption for small financial institutions from the data collection requirements. An institution is exempt if it originated less than 2,500 credit transactions for small businesses in each of the two previous calendar years OR has less than $10,000,000,000 in assets.
This significantly broadens the scope of exemptions for smaller lenders compared to v1's approach, reducing the regulatory burden on a substantial number of financial institutions. It provides two distinct criteria for exemption, offering flexibility.
V2 adds a provision stating that the percentage of applicants providing information described under subsection (b) may not be used as a factor in determining whether a financial institution is in compliance with the requirements of this section.
This protects financial institutions from being penalized for low applicant response rates to voluntary data collection, shifting the focus of compliance away from applicant participation metrics. It aims to prevent institutions from coercing applicants to provide data.
Deletions
V1 provided a specific 3-year compliance period and a subsequent 2-year safe harbor period for financial institutions to comply with the 'covered rule' (88 Fed. Reg. 35150, published May 31, 2023).
The deletion removes the specific compliance timeline and safe harbor tied to a particular CFPB final rule. This specific, time-bound relief for a single rule is replaced by a broader, later compliance date for the entire section 704B in v2, fundamentally altering the regulatory timeline and scope of relief.
V1 defined 'covered rule' as the final rule of the Bureau titled 'Small Business Lending Under the Equal Credit Opportunity Act (Regulation B)' (88 Fed. Reg. 35150, published May 31, 2023).
The deletion of this definition is a direct consequence of removing the specific compliance provisions for that rule. It signifies a shift from addressing a single, existing rule to establishing a new, broader framework for compliance with Section 704B itself.
V1 implicitly retained ECOA Section 704B(d), which outlines privacy and confidentiality requirements for collected data, including restrictions on public disclosure of personally identifiable information.
The complete striking of subsection (d) removes the statutory privacy and confidentiality protections for collected small business lending data. This could have significant implications for the handling and potential public release of sensitive business and demographic information, increasing the risk of data exposure.
V1 redefined 'financial institution' to mean any entity engaging in financial activity that, in each of the previous 2 calendar years, originated not less than 500 credit transactions for small businesses.
The deletion of this specific definition means that the definition of 'financial institution' reverts to the broader definition in the underlying ECOA, which does not include a minimum transaction threshold. This change, however, is offset by the introduction of a new, more comprehensive exemption for small financial institutions in v2, shifting the mechanism for limiting scope.
V1 implicitly retained the requirement to collect data points related to the ethnicity, race, and sex of the principal owners of the small business, as specified in ECOA Section 704B(e)(2)(C), (G), and (H).
The deletion of these specific data points means financial institutions are no longer required to collect information on the ethnicity, race, and sex of principal owners. This significantly reduces the granularity of demographic data collected, potentially impacting the ability to analyze lending disparities based on these categories.
Modifications
Financial institutions are granted a much longer and broader delay in compliance, applying to all aspects of Section 704B rather than just a single rule. This significantly postpones the implementation of data collection requirements and provides a longer period of non-enforcement for a wider range of obligations, reducing immediate regulatory pressure.
Before
V1 established a 3-year compliance period and a 2-year safe harbor specifically for a 'covered rule' (88 Fed. Reg. 35150) related to small business lending data collection.
After
V2 replaces this with a new 'Initial compliance date' provision, stating that the Bureau may not require compliance with Section 704B, or any rule issued under it, until June 1, 2031, followed by a 2-year safe harbor period where compliance is not enforced.
The scope of entities considered 'small businesses' for the purpose of data collection remains consistent with v1's proposed change, limiting the data collection to businesses below the $1 million revenue threshold. This ensures that the data collection burden is focused on smaller entities as defined by this specific revenue cap.
Before
V1 defined 'small business' as any entity with gross annual revenues of $1,000,000 or less in the most recently completed fiscal year.
After
V2 retains the exact same definition for 'small business': any entity with gross annual revenues of $1,000,000 or less in the most recently completed fiscal year.
Scope
Fundamental restructuring — Changes are scattered throughout Section 2 of the bill, impacting multiple subsections of the Equal Credit Opportunity Act (ECOA) Section 704B, including (c), (d), (e) (redesignated to d), (g) (redesignated to f), and (h) (redesignated to g). — V2 represents a significant change in policy direction. While both versions aim to modify small business lending data collection, v2 shifts from providing specific relief for an existing rule to a comprehensive restructuring of the entire data collection framework, including new exemptions, applicant protections, and a substantially delayed, broader compliance timeline. — The changes in v2 interact significantly with existing provisions of ECOA Section 704B. The deletion of subsection (d) removes existing privacy protections. The new exemptions and compliance dates directly override or modify the applicability of the entire data collection mandate. The new applicant disclosure requirements and prohibition on observational data collection add new layers of regulatory obligation and protection.
Impact analysis
Financial institutions (lenders)
Generally beneficial in terms of reduced regulatory burden and extended compliance timelines for many, but introduces new procedural requirements for those still covered.
V1 provided a specific compliance delay and safe harbor for a single CFPB rule and narrowed the definition of 'financial institution' to those originating at least 500 small business loans. V2 removes the specific rule-based relief and instead provides a much broader and later compliance date (June 1, 2031) and safe harbor for the entire Section 704B. Crucially, v2 introduces explicit exemptions for institutions originating less than 2,500 small business credit transactions OR having less than $10 billion in assets, and adds new requirements for applicant disclosures and prohibitions on data collection methods.
Small business loan applicants
Beneficial, as it increases transparency and protects applicant privacy and autonomy.
V1 did not explicitly address applicant rights regarding data collection. V2 adds new requirements for financial institutions to inform applicants that data collection is mandated by the Bureau, that providing the information is voluntary, and that it will not affect their credit application. It also prohibits financial institutions from collecting certain data through visual observation.
Bureau of Consumer Financial Protection (CFPB)
Detrimental to its immediate enforcement capabilities, but assigns a new responsibility for form development.
V1's amendments would have impacted the CFPB's enforcement timeline for a specific rule. V2 significantly delays the CFPB's ability to enforce compliance with the entire Section 704B until June 1, 2031, with a further 2-year non-enforcement period. V2 also imposes a new requirement on the CFPB to establish a model form for applicant disclosures.
Researchers and policymakers relying on small business lending data
Detrimental, as it reduces the scope and availability of granular data for analysis of lending equity and trends.
V1 implicitly retained the collection of certain demographic data points (ethnicity, race, sex of principal owners) and privacy provisions. V2 explicitly removes the requirement to collect these specific demographic data points and entirely deletes the subsection related to privacy and confidentiality of collected data. It also delays the overall data collection implementation.