Blog Post

A Proposed Rule Eleven Years in the Making

Michael Christians • September 1, 2021

On September 1st, the Consumer Financial Protection Bureau (CFPB) issued a proposed rule to implement the small business data collection requirements found in Section 1071 of the Dodd-Frank Act. By way of reminder, the Dodd-Frank Act was signed into law on July 21, 2010.


Under the proposed rule, the data collection requirements would apply to any financial institution that originated at least 25 covered transactions to small businesses in each of the two preceding calendar years. The rule defines a covered transaction as an extension of credit primarily for a business, commercial or agricultural purpose. In addition, the rule defines a small business as one that had $5 million or less in gross annual revenue during its preceding fiscal year.


The proposal would require covered financial institutions to collect and report the following data in connection with applications for small business credit:

  • Unique identifier for the loan or application
  • Application date
  • Application method
  • Application recipient
  • Credit type
  • Credit purpose
  • Amount applied for
  • Amount approved or originated
  • Action taken
  • Action taken date
  • Denial reasons (if applicable)
  • Pricing information
  • The following information about the small business applicant -
  • Census tract where its principal office is located
  • Gross annual revenue
  • NAICS code
  • Number of employees
  • Length of time in operation
  • Whether the business is minority-owned or women-owned
  • Number of principal owners
  • Ethnicity, race and sex of principal owners


Under the rule, covered financial institutions would collect this information over the course of a calendar year with submission to the CFPB not later than June 1st of the following year. Information would then be made publicly available following certain modifications to protect applicant privacy.


If finalized as proposed, compliance with the rule's requirements would be mandatory 18 months following its publication in the Federal Register.

Share this post

Share by: