The Implications of the CFPB’s Proposed Rule on Data Brokers for Third Party Originators

The Consumer Financial Protection Bureau (CFPB) proposed a rule to classify data brokers as consumer reporting agencies under the Fair Credit Reporting Act (FCRA). If enacted, this rule will subject data brokers to stringent compliance requirements, including ensuring data accuracy, securing explicit consumer consent and restricting data use to permissible purposes. While these changes aim to enhance consumer protection, they could significantly impact third-party originators (TPOs) in the commercial finance sector.

Key Elements of the Proposed Rule

1. Data Accuracy Obligations: Data brokers will be required to ensure that all consumer information is accurate and up to date.
2. Explicit Consumer Consent: Brokers must obtain clear and explicit consent from consumers before sharing personal data.
3. Restricted Usage: Data can only be used for purposes explicitly allowed under the FCRA, such as credit underwriting.

These provisions would profoundly affect TPOs, who often rely on data brokers to source consumer information for underwriting, fraud prevention and customer acquisition.

Impacts on Third-Party Originators

Stricter Data Compliance Requirements

TPOs will face increased pressure to ensure that any data they source from brokers complies with FCRA standards. This means they must:

• Audit and validate the data provided by brokers to verify its accuracy.
• Ensure that brokers are compliant with new regulatory standards, adding another layer of due diligence to their processes.
• Maintain detailed documentation to demonstrate compliance in case of audits or investigations.

The heightened compliance requirements could strain resources, particularly for smaller originators with limited capacity for regulatory oversight.

Reduced Access to Consumer Data

The rule’s restriction on permissible uses of consumer data will limit the types of information available to TPOs. For example:

• Marketing and Predictive Analytics: Data previously used for targeted marketing campaigns or predictive analytics may no longer be accessible under the new rules.
• Risk Assessment: Originators might lose access to non-FCRA-compliant data sources that provided supplementary insights into borrower behavior.

This reduced access could hinder TPOs’ ability to identify and attract potential borrowers, forcing them to rework their acquisition and assessment strategies.

Operational and Cost Challenges

The new requirements will likely increase operational costs for TPOs. Compliance efforts might include:

• Enhanced Vendor Management: Originators must establish or upgrade vendor management frameworks to vet data brokers for compliance.
• Staff Training: Employees will need training to understand the implications of the FCRA and the new rule, particularly in data handling and consent verification.
• System Upgrades: TPOs may need to invest in technology to monitor and document compliance more effectively.

These added expenses could disproportionately affect smaller originators, who may lack the financial resources to absorb the costs.

Increased Liability Risks

The CFPB’s rule raises the stakes for TPOs regarding liability. Originators using non-compliant data, even inadvertently, could face penalties. This risk highlights the need for:

• Comprehensive data audits.
• Contractual protections with brokers to indemnify TPOs against compliance failures by the brokers.
• Clear internal protocols to ensure data usage aligns with the rule’s requirements.

Potential Shift in Business Models

With stricter regulations and limited data access, TPOs may need to rethink their business models. Possible adjustments include:

• Investing in Alternative Data Sources: Originators might explore partnerships with compliant data providers or develop in-house data collection and validation systems.
• Focusing on Transparency: By building trust with borrowers through clear and ethical data practices, TPOs could differentiate themselves in a competitive market.
• Leveraging Technology: TPOs may adopt advanced analytics tools to maximize the value of the limited data they can access under the new framework.

Opportunities Amid Challenges

Despite the hurdles, the proposed rule offers opportunities for TPOs willing to adapt:

• Enhanced Data Quality: Compliance with FCRA standards could lead to more accurate and reliable data, improving underwriting precision and reducing default risks.
• Competitive Differentiation: TPOs that proactively align with the new regulations can position themselves as trustworthy and compliant partners, attracting both lenders and consumers.
• Fraud Prevention: Stricter data controls may reduce fraud exposure, offering long-term benefits to originators and borrowers alike.

Preparing for the Regulatory Shift

To mitigate potential disruptions, TPOs should take proactive steps, including:

1. Conducting Data Audits: Assess current data sources to ensure compliance with FCRA standards.
2. Strengthening Vendor Relationships: Collaborate closely with data brokers to understand their compliance measures and negotiate updated contracts if necessary.
3. Investing in Compliance Infrastructure: Allocate resources to training, technology, and vendor management to prepare for the regulatory changes.
4. Monitoring Regulatory Developments: Stay informed about updates to the rule and engage in industry discussions to understand best practices for compliance.

Conclusion

The CFPB’s proposed rule represents a significant shift in the regulatory landscape for data brokers, with far-reaching implications for third-party originators in commercial finance. While the rule poses challenges in terms of compliance, cost and data access, it also offers an opportunity for TPOs to enhance their operational integrity and build stronger relationships with borrowers and lenders. By embracing these changes and prioritizing transparency and compliance, TPOs can navigate the evolving landscape and emerge as leaders in a more regulated market.