Consumer Financial Protection Bureau (CFPB)

The Consumer Financial Protection Bureau (CFPB) is an independent federal regulatory agency within the Federal Reserve System. It was established by Title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act, signed into law on July 21, 2010, and became operational on July 21, 2011.

The bureau's mandate covers rulemaking, supervision, and enforcement for consumer financial products and services. It has direct supervisory authority over banks, credit unions, and thrifts with more than $10 billion in assets, as well as nonbank entities in mortgage lending, private student lending, and payday lending. For smaller institutions, it coordinates with prudential regulators (OCC, FDIC, Federal Reserve, NCUA) but does not conduct direct examinations.

In the small-business lending context, the CFPB finalized its implementing rule for Section 1071 of the Equal Credit Opportunity Act in 2023, which requires lenders to collect and report data on small-business loan applications, including demographic information designed to identify potential discrimination. The scope and implementation of that rule remain in flux as of early 2026, with a proposed November 2025 amendment that would significantly narrow coverage.

The CFPB is the primary federal regulator with authority over nonbank financial companies that serve small businesses, including merchant cash advance providers, online lenders, and fintech platforms. Before the CFPB's creation, these entities operated with minimal federal oversight because they are not depository institutions and therefore fall outside the jurisdiction of banking regulators like the OCC and FDIC.

For borrowers using traditional bank products like SBA 7(a) loans or business lines of credit, the CFPB is one layer in a multi-regulator system. But for borrowers using alternative commercial financing products, the CFPB's enforcement posture directly determines how much federal protection they have. When the bureau is active, it can bring enforcement actions against predatory practices in products like revenue-based financing and high-cost merchant cash advances. When it is not, borrowers in states without their own commercial financing disclosure laws may have limited recourse.

The bureau's stance also affects transparency in lending markets. Section 1071 data collection, if fully implemented, would create the first comprehensive dataset on small-business credit access by borrower demographics, giving policymakers and researchers visibility into approval disparities across lender types and geographies.

Assuming the CFPB regulates all business lending. The CFPB's authority covers "consumer financial products and services." Its jurisdiction over purely commercial transactions (business-to-business lending with no consumer element) is narrower than its consumer authority. Section 1071 data collection applies to small-business lending, but the bureau's enforcement powers in commercial contexts depend on the specific legal theory and product involved. A commercial term loan to an established corporation, for example, falls well outside the CFPB's typical enforcement scope.

Confusing CFPB oversight with banking regulation. The CFPB does not replace the OCC, FDIC, or Federal Reserve as bank regulators. It operates alongside them with a specific consumer protection mandate. Banks with less than $10 billion in assets are primarily supervised by their prudential regulator, not the CFPB, though the CFPB's rules still apply to them.

Treating CFPB enforcement posture as static. The bureau's enforcement priorities, staffing levels, and regulatory philosophy shift significantly across administrations. A borrower or lender who calibrates compliance obligations based on one administration's approach may find those obligations enforced very differently under the next. Business owners should evaluate the contractual terms of any financing product on their own merits, using resources like structured offer evaluation frameworks, rather than relying on the assumption that a federal regulator will intervene if terms are unfavorable.