PROTECTED Act
- Sponsor
- Sen. Britt, Katie Boyd [R-AL]
- Committees
- Banking, Housing, and Urban Affairs Committee (primary)
- Last action
- Jul 17, 2025
Bottom line
This bill aims to reduce the regulatory burden on financial institutions by streamlining small business loan data collection under ECOA, while also enhancing applicant privacy and clarifying compliance standards.
What it actually does
This bill amends the Equal Credit Opportunity Act (ECOA) to significantly alter small business loan data collection requirements for financial institutions. It modifies how financial institutions can inform applicants about data collection, removes certain data points (race, sex, national origin, number of principals, application method) from mandatory collection, and prohibits institutions from inferring applicant information. The bill also establishes a safe harbor period and delays the effective date of these requirements until after a cost-benefit analysis is completed by the Bureau of Consumer Financial Protection (BCFP).
Proponents argue
Proponents argue that the bill reduces unnecessary regulatory burdens on financial institutions, particularly by eliminating the collection of sensitive demographic data that may not be directly relevant to credit decisions and could raise privacy concerns. They contend it empowers communities by allowing financial institutions to focus more on lending and less on extensive data reporting, ensuring that compliance is based on actual applicant-provided information rather than inferences. The delayed effective date and safe harbor provide necessary time for institutions to adapt and for the Bureau to conduct proper analysis.
Opponents contend
Opponents might argue that removing demographic data points like race, sex, and national origin could hinder efforts to identify and address discriminatory lending practices against protected classes in small business financing. They may contend that such data is crucial for oversight and ensuring equitable access to credit, and that reducing collection requirements could obscure systemic biases. Critics might also express concern that the bill's exemptions for certain financial institutions and the delayed effective date could create loopholes or prolong the implementation of important consumer protections.
The bill is short and relatively easy to read, allowing ample time for a thorough review of its provisions.
Section 2(1), amending ECOA Section 704B(c)
Clarified Applicant Data Collection Notification
This provision allows financial institutions to explicitly inform small business loan applicants that the Bureau of Consumer Financial Protection (BCFP) requires them to collect and report certain information, that providing this information is voluntary, and that it will not impact their credit application evaluation. This aims to increase transparency for applicants and clarify the institution's role in the data collection process.
Supporters argue
Supporters argue this provision enhances transparency and trust between financial institutions and applicants, ensuring applicants understand their rights regarding data provision without fear of reprisal. It also clarifies the regulatory mandate for institutions.
Critics contend
No specific opposition is typically raised against this provision as it primarily aims to improve communication and transparency, which are generally viewed positively.
Tradeoffs
This provision balances the need for regulatory data collection with applicant privacy concerns and the desire for clear communication.
Section 2(2)(A), amending ECOA Section 704B(e)(2)
Streamlined Data Collection Requirements
This provision removes the requirement for financial institutions to collect and maintain data on an applicant's race, sex, national origin, the number of principals in the business, and the method by which the application was submitted. This significantly narrows the scope of demographic and operational data that must be reported to the BCFP.
Section 2(2)(C), adding new ECOA Section 704B(e)(5)
Restriction on Non-Applicant Provided Data
This new paragraph explicitly prohibits financial institutions from compiling or maintaining information about an applicant's demographics (as described in subsection (b)) if that information was determined through visual observation or any other method other than being directly provided by the applicant. This ensures that only self-identified data is used for reporting.
Section 2(2)(C), adding new ECOA Section 704B(e)(7) and (e)(8)
Compliance Safe Harbor and Implementation Delay
This provision establishes a two-year safe harbor period during which the BCFP cannot enforce compliance with the new requirements, starting from the effective date. The effective date itself is delayed until three years after the BCFP completes a cost-benefit analysis under the Regulatory Flexibility Act and Paperwork Reduction Act. This provides significant lead time for implementation and regulatory assessment.
Section 2(2)(C), adding new ECOA Section 704B(e)(9)
Scope of Applicability Definitions
This section defines which financial institutions are subject to these data collection requirements and what constitutes a 'small business' for the purpose of the Act. Covered institutions must have originated at least 2,500 small business credit transactions in the preceding two years, but excludes those with less than $10 billion in assets, Farm Credit System institutions, Community Development Financial Institutions (CDFIs), and equipment/vehicle financing lenders. A 'small business' is defined as an entity with gross annual revenues of not more than $1,000,000 in the preceding fiscal year.
Requires the Bureau to issue rules, after notice and comment, describing any modifications or deletions to collected data and how such actions advance a privacy interest, before making such changes.
Section 2(2)(B)(ii), adding new ECOA Section 704B(e)(4)(B)
Why it matters:This is standard legislative practice to amend existing code sections. However, it adds a significant procedural hurdle for the BCFP.
Case for: Supporters would argue this ensures transparency and public accountability for any BCFP actions related to data privacy, preventing arbitrary data manipulation and ensuring privacy interests are genuinely served.
Case against: Opponents might argue this adds an unnecessary bureaucratic layer, potentially slowing down the BCFP's ability to adapt data handling practices quickly in response to evolving privacy concerns or technological changes.
Estimated impact: Procedural impact on BCFP, potentially increasing time and resources needed for data management decisions.
States that the percentage of applicants providing information may not be used as a factor in determining a financial institution's compliance with data collection requirements.
Section 2(2)(C), adding new ECOA Section 704B(e)(6)
Why it matters:This is standard placement for a specific compliance rule within a larger set of amendments.
Case for: Proponents would argue this protects financial institutions from being penalized for low response rates when applicants voluntarily decline to provide information, ensuring that institutions are not implicitly pressured to coerce data.
Case against: Opponents might argue that a very low response rate could indicate a failure by the institution to properly inform applicants or create an environment where applicants feel discouraged from providing data, and thus it should be a factor in compliance.
Estimated impact: Reduces potential compliance risk for financial institutions related to applicant non-response.