Required Rulemaking on Personal Financial Data Rights

Document Headings Document headings vary by document type but may contain the following: the agency or agencies that issued and signed a document the number of the CFR title and the number of each part the document amends, proposes to amend, or is directly related to the agency docket number / agency internal file number the RIN which identifies each regulatory action listed in the Unified Agenda of Federal Regulatory and Deregulatory Actions See the Document Drafting Handbook for more details. Consumer Financial Protection Bureau 12 CFR Parts 1001 and 1033 [Docket No. CFPB-2023-0052] RIN 3170-AA78 ( printed page 90838) AGENCY: Consumer Financial Protection Bureau. ACTION: Final rule. SUMMARY: The Consumer Financial Protection Bureau (CFPB) is issuing a final rule to carry out the personal financial data rights established by the Consumer Financial Protection Act of 2010 (CFPA). The final rule requires banks, credit unions, and other financial service providers to make consumers' data available upon request to consumers and authorized third parties in a secure and reliable manner; defines obligations for third parties accessing consumers' data, including important privacy protections; and promotes fair, open, and inclusive industry standards. DATES: This final rule is effective January 17, 2025. Compliance dates: Data providers must comply with the requirements in 12 CFR part 1033, subparts B and C beginning April 1, 2026; April 1, 2027; April 1, 2028; April 1, 2029; or April 1, 2030, pursuant to the criteria set forth in § 1033.121(c). FOR FURTHER INFORMATION CONTACT: George Karithanom, Regulatory Implementation and Guidance Program Analyst, Office of Regulations, at 202-435-7700 or https://reginquiries.consumerfinance.gov/​ . If you require this document in an alternative electronic format, please contact CFPB_Accessibility@cfpb.gov . SUPPLEMENTARY INFORMATION: Table of Contents Abbreviations and Acronyms I. Overview A. Summary of the Final Rule …