The US Consumer Financial Protection Bureau reverses course on data privacy and digital payment oversight
While proponents believe this will benefit the financial industry and promote innovation, critics express concern over the potential risks to consumer rights and data privacy.

The US Consumer Financial Protection Bureau (CFPB) announced the withdrawal of several significant regulatory proposals introduced during the Biden administration. These proposals aimed to enhance consumer protections in areas such as data privacy, digital payments, and financial product disclosures. The decision reflects a broader shift in regulatory philosophy under the new administration, focusing on deregulation and reduced federal oversight.
One of the key proposals rescinded was a rule that sought to classify data brokers as consumer reporting agencies under the Fair Credit Reporting Act (FCRA). This classification would have subjected data brokers to stricter regulations, including requirements to obtain consumer consent before collecting and selling personal information. Data brokers operate by aggregating and selling consumer data, such as income, credit history, and location information, often without individuals’ knowledge. Critics argue that this practice can lead to privacy invasions, identity theft, and national security risks, especially when sensitive data about military personnel is involved.
Acting CFPB Director Russell Vought stated that the proposal did not align with the bureau’s current interpretation of the FCRA and that numerous public comments raised concerns about the rule’s legal foundation.
The CFPB also withdrew proposals aimed at extending consumer protections to emerging digital payment platforms, including cryptocurrencies. These proposals are intended to establish regulatory frameworks to safeguard consumers engaging with new financial technologies. The withdrawal indicates a move away from proactive regulation of digital financial services, potentially leaving consumers with fewer protections in this rapidly evolving sector.
Another rescinded proposal targeted the use of certain terms and conditions in the fine print of consumer financial products. The rule aimed to prohibit clauses that could limit consumer rights, such as mandatory arbitration agreements or waivers of legal recourse. By withdrawing this proposal, the CFPB reduces its role in scrutinising contractual terms that may disadvantage consumers.
In addition to these specific withdrawals, the CFPB announced the rescission of 67 guidance documents issued since its inception in 2011. These documents provided interpretations and policy statements on various consumer protection laws. The bureau justified the move by stating a desire to issue guidance only when necessary to reduce compliance burdens and to minimise overlap with other regulatory agencies.
This action is part of a larger effort by the Trump administration to scale back the CFPB’s regulatory activities.
The withdrawal of these proposals has sparked criticism from consumer advocacy groups. Organisations like Consumer Reports argue that eliminating the data broker rule leaves consumers vulnerable to scams and identity theft. Similarly, the lack of oversight on digital payment technologies and financial product disclosures may expose consumers to unfair practices without adequate recourse.
Supporters of the rollbacks, including industry groups, contend that the rescinded rules imposed undue compliance burdens and exceeded the CFPB’s statutory authority. They argue that reducing regulatory constraints will foster innovation and efficiency within the financial sector.