CFPB Section 1071 and Your Business Line of Credit: What the New Data Rules Mean in 2026

Section 1071 of the Dodd-Frank Act is now active law. If you applied for a LOC at a major lender after July 2025, your application data will be reported publicly. U.S. lenders originate over $700 billion in small business loans and credit lines annually (SBA Office of Advocacy, 2025).

Until Section 1071, almost none was tracked in a standardized, publicly accessible way. Section 1071 changes LOC application questions, not approval odds. The demographic questions—race, sex, ethnicity—are legally required but cannot influence credit decisions.

Understanding why they exist and your rights removes unnecessary friction. This briefing covers the full implementation picture: what Section 1071 is, covered lenders, data collection, application changes, and 2026 implications.

For LOC qualification details, see our LOC qualification requirements guide.

What Is CFPB Section 1071 and Why Does It Exist?

Section 1071 requires financial institutions to collect and report small business credit data. It is a fair lending transparency law designed to identify discrimination.

Congress passed Dodd-Frank in 2010, but the CFPB took 13 years to finalize rules in March 2023. The delay reflected regulatory complexity in defining small business and covered transactions.

The lending gap Section 1071 targets is substantial. U.S. lenders originate $700+ billion annually in small business credit. Yet there was no standardized federal tracking system comparable to mortgage HMDA data.

Approximately 32 million small businesses operate in the U.S., and 43% sought financing recently (Federal Reserve SBCS, 2025). Without standardized data, regulators couldn't determine if access gaps reflected fundamentals or discrimination. Section 1071 closes that gap.

The CFPB estimates covered lenders will report 1.2 million applications annually when compliant. That data will be published publicly, creating the first comprehensive national lending picture.

Which Lenders Must Comply With Section 1071?

Coverage is determined by transaction volume over two preceding calendar years. The tier structure phases in compliance by lender size.

A "covered financial institution" is any entity that originated 100+ credit transactions over two years. Charter type doesn't determine coverage; transaction volume does.

Tier 1 and Tier 2 lenders cover approximately 85% of small business credit originations (CFPB Final Rule, 2023). Odds are high that major or mid-size institutions you interact with are compliant.

Approximately 620 online lenders and fintechs fall within Tier 1 or Tier 2 coverage. See our best business LOCs 2026 analysis for comparisons.

What Data Does Section 1071 Require Lenders to Collect From LOC Applicants?

Section 1071 requires lenders to collect 20 standardized data fields. Fields fall into two categories: application data and demographic data.

The regulation specifies 13 required fields plus 7 additional voluntary fields. Demographic data is legally classified as voluntary, meaning applicants can decline without consequence.

Required Application Data Fields (Lender-Collected)

Voluntary Demographic Fields (Applicant-Provided)

How Does Section 1071 Change the LOC Application Process?

Section 1071 adds a demographic disclosure section to LOC applications. This is the most visible operational change. Understanding their legal context eliminates confusion.

The demographic section appears as a boxed area labeled "Government Monitoring Information." It asks for race, sex, and ethnicity of principal owners with 25%+ ownership.

Lenders must inform applicants that demographic disclosure is voluntary and unused in credit decisions. Lenders must maintain a firewall where underwriters cannot access demographic data until after the decision (explicit regulatory requirement).

CFPB estimates compliance costs for Tier 1 lenders at $900K–$1.5M upfront. These costs are borne by lenders, not borrowers. Section 1071 creates no new fees for applicants.

HMDA mortgage data shows 82–88% of applicants provide demographic information. Section 1071 projects similar disclosure rates for small business applications.

Do Online Lenders and Credit Unions Have to Comply?

Yes, Section 1071 covers any financial institution meeting the transaction threshold. Charter-neutral coverage applies regardless of business model or branch type.

Credit unions above the 100-transaction threshold are fully covered. NCUA guidance applies, but underlying requirements are the same as banks. See our credit union LOC comparison.

Online lenders are covered if they meet the transaction threshold. CFPB estimates 620 online lenders fall within Tier 1 or Tier 2. This is substantial and includes most major platforms.

MCA providers are generally not covered because MCAs are purchases of receivables, not credit. However, if they also originate covered products above the threshold, those products are covered.

Some online lenders below 100 transactions remain exempt. This includes newer platforms, niche lenders, or those above the $5 million revenue threshold.

What Should Business Owners Know When Applying for a LOC in 2026?

The practical guidance for business owners is straightforward: new questions don't affect approval odds. Your demographic information is firewalled from underwriting. Denial reason requirements give you more transparency.

Demographic disclosure is your legal right. You can complete it fully, partially, or not. If you decline, the lender may record observed demographics per regulation without penalizing you.

The denial reason requirement is arguably the most useful change for applicants. Before Section 1071, lenders had inconsistent denial practices. The rule now requires up to four specific reasons, giving you actionable feedback.

CFPB projects Section 1071 data will create the first comprehensive national lending picture by mid-2027. That data will inform regulatory action, advocacy, and lender behavior for underserved segments.

For rejection patterns by lender type and industry, see our loan rejection statistics article. For Section 1071's broader regulatory context, see our 2026 LOC statistics briefing.

Frequently Asked Questions About CFPB Section 1071

Does Section 1071 affect my LOC approval chances?

No. Section 1071 is a data collection and transparency law. Lenders are explicitly prohibited from using demographic data in credit decisions. The firewall keeps demographic information separate from underwriting personnel.

Is demographic disclosure required under Section 1071?

Lenders must ask, but your response is voluntary. You can decline any or all information. If you decline, the lender may record observed demographics, but your refusal is documented and protected.

What is a "covered financial institution" under Section 1071?

Any entity that originated 100+ credit transactions to small businesses in two preceding years. This includes banks, credit unions, online lenders, and fintechs, regardless of charter type.

When did Section 1071 take effect?

The final rule was issued in March 2023. Tier 1 lenders were required to comply by July 18, 2025. Tier 2 and Tier 3 faced January 1, 2026 deadlines, though Tier 3 was delayed by litigation. First Tier 1 reporting opened May 1, 2026.

Does my small lender have to comply?

Only if your lender originated 100+ transactions in two preceding years. Many community banks and credit unions fall below this threshold. Lenders must inform applicants whether they collect Section 1071 data.

What happens with the data after collection?

Lenders submit data to the CFPB annually. The CFPB publishes it publicly with privacy protections. Regulators, researchers, and advocates use it to identify disparities in approval rates and credit access. The data becomes a permanent public record.