CFPB’s New Personal Financial Data Rights Rule Spurs Debate

Snapshot: The Consumer Financial Protection Bureau (CFPB) has finalized a rule aimed at facilitating open banking in the U.S. by allowing consumers to share financial data between institutions freely, enhancing choice and competition in the financial services market.

While some industry voices, particularly from fintech firms and consumer advocacy groups, support the rule as a way to boost financial inclusion, traditional banks and financial institutions have voiced concerns over privacy risks, data security, and the high costs of compliance. The rule limits data sharing to one year unless explicitly reauthorized and targets risky practices like screen scraping and bait-and-switch data harvesting. 

Under the rule, the largest financial providers must comply by April 2026, while smaller institutions have until April 2030. 

Response from the Consumer Bankers Association criticized the CFPB for exceeding its authority, arguing that the rule inadequately reflects industry feedback and real-world market conditions. Some fintech leaders, however, praised the rule for setting the stage for a data-driven, transparent lending environment. This update to Section 1033 of the Dodd-Frank Act may be the first in a series, with more rules potentially covering additional financial products and services in the future.

Key Quote: “This final rule severely misses the mark as it failed to incorporate much of the critical feedback provided by industry through the comment period, This has created an even less durable final rule that does not reflect market, technological, and practical realities.” Lindsey Johnson, President, Consumer Bankers Association.

Full story: CFPB - Housingwire