The Data the CFPB Drops—and the Data It Keeps
Once an application passes the 2026 Section 1071 coverage gates, a second question determines what the dataset can show: which facts will be attached to that application? This chapter compares the CFPB’s removed and retained data choices, then examines the changes to demographic questions and collection procedures. The goal is not to memorize regulatory fields. It is to understand the decision standard behind the reset: keep information that helps interpret the statutory core, and defer information whose launch-stage cost, ambiguity, privacy risk, or likely imprecision the Bureau now considers too high.
That standard produces an uneven result. The 2026 rule is not “statutory data only.” It keeps several discretionary fields that the CFPB views as useful scaffolding, while removing other discretionary fields that were also adopted in 2023. It also makes demographic collection less granular, gives applicants a more prominent right to refuse, and loosens some monitoring and timing requirements without eliminating the duty to request the data or the statutory firewall.
The CFPB removes context that is valuable but difficult to stabilize
The most important comparison is not between a long list and a short list. It is between kinds of information and the work required to make each kind meaningful. The 2026 rule removes five prominent discretionary categories—application method, application recipient, denial reasons, pricing, and number of workers. It also removes LGBTQI+-owned business status. The Bureau’s explanation is consistent across the categories: usefulness matters, but usefulness at the beginning of a new collection regime must be weighed against the way the field is produced, interpreted, and protected.
Application method and application recipient. The 2023 rule asked how an application arrived—through an in-person, telephone, online, or mail channel—and whether it came directly to the financial institution or indirectly through a third party. Those facts could help analysts study how businesses reach lenders, whether certain channels serve historically underserved firms, or whether an intermediary changes access. But the CFPB says many lenders do not already collect the information, and a single application can involve multiple interactions across several channels. A lender may also find it difficult to determine whether it received an application through a third party, especially when a dealer, broker, vendor, or affiliate is involved.
The problem is not that the questions have no conceivable value. It is that the answer may depend on an arbitrary choice about which interaction counts as the application’s method or recipient. A field intended to explain access can become a new source of inconsistency. The Bureau now judges that the likely analytical gain does not justify the complexity at the outset, while leaving open the possibility of reconsidering the fields after lenders have more experience with the rest of the regime.
Denial reasons. Denial reasons appear intuitively important. If applications from different groups are denied for different stated reasons, the information could help regulators and communities identify barriers to credit and help lenders evaluate their underwriting rules. The 2023 rule therefore included the field as a way to add context to the action-taken outcome.
The 2026 CFPB sees a narrower value. Applicants already can receive reasons for adverse action under Regulation B, and the categories in that existing process are similar to, but not identical with, the categories in the 2023 Section 1071 rule. The Bureau says the additional Section 1071 field may provide only marginal information relative to the action taken and other retained data. It also points to privacy and interpretation risks.