The CFPB Just Slimmed Down Its Small-Business Lending Rule — What Owners Should Know
The CFPB's final Section 1071 rule narrows what lenders must collect, exempts more products, and pushes compliance to 2028. What it means if you borrow for your business.
On May 1, the Consumer Financial Protection Bureau published its revised Section 1071 small-business lending rule in the Federal Register — a substantially leaner version of the regulation it first finalized in 2023. For small-business owners and the lenders who serve them, it changes what data gets collected when you apply for credit, which loans are covered at all, and when any of it takes effect.
What Section 1071 is
Section 1071 of the Dodd-Frank Act directs the CFPB to require lenders to collect and report data on small-business credit applications — including demographic information about the business owner — the way mortgage lenders already report data under the Home Mortgage Disclosure Act. The stated purpose is to surface lending patterns and fair-lending concerns in small-business credit, a corner of the market where far less data has historically existed.
What changed in the 2026 rule
The revised rule narrows the original framework in three notable ways. First, it shrinks the list of data points lenders must collect, focusing on the points the statute explicitly requires plus a smaller set of discretionary ones, rather than the broader collection the 2023 version demanded. Second, it narrows coverage: merchant cash advances, agricultural lending, and small-dollar loans are now excluded from the definition of a covered credit transaction. The Bureau reasoned that the earlier rule swept in products like merchant cash advances without accounting for how differently they work. Third, the timeline moved. The rule becomes effective June 30, 2026, but the actual compliance date — when lenders meeting the origination threshold must begin collecting data — is January 1, 2028, with first reports due in 2029.
As before, an applicant can decline to provide any or all demographic information, and the lender must still process the application.
What it means for you as a borrower
If you run a small business and apply for credit, the practical effect is modest in the near term and depends on your lender. Larger lenders that cross the origination threshold will eventually ask a slimmer set of questions than the 2023 rule contemplated, and not until 2028. Several products you might use — a merchant cash advance, an agricultural loan, a small-dollar loan — now sit outside the data-collection regime entirely.
The bigger picture is that fair-lending data collection in small-business credit is moving forward, but more slowly and narrowly than originally drawn. The Bureau itself frames Section 1071 as a multi-decade project — a foundation rather than an endpoint — and notes that litigation over the rule continues, so the details could shift again.
The practical move
Rules aside, the thing that actually determines whether you get approved and at what rate is your business and personal credit profile. Before you apply for any business financing, it is worth knowing where you stand and tightening the obvious weak spots. Our credit score guide walks through what moves the number and how fast, and our financial guide for small-business owners covers separating business and personal finances, which is one of the first things a lender looks at. Strong fundamentals matter far more to your loan terms than any single regulatory change.