View Rule

In recent years, the availability of consumer financial account data in electronic form, often in real time or near real time, has helped consumers understand their finances and make better-informed financial decisions in a variety of ways.  At the same time, the means by which data is accessed, transmitted, stored, and used can implicate significant privacy, security, and other consumer protection concerns.  Section 1033 of the Dodd-Frank Act provides that subject to rules prescribed by the Bureau, covered persons shall make available to consumers upon request transaction data and other information concerning a consumer financial product or service that the consumer obtains from a covered person. Section 1033 also states that the Bureau shall prescribe by rule standards to promote the development and use of standardized formats for information made available to consumers.  In November 2016, the Bureau issued a Request for Information seeking comment from the public to better understand the consumer benefits and risks associated with market developments that rely on access to consumer financial account and account-related information.  In October 2017, the Bureau issued Consumer Protection Principles for Consumer-Authorized Financial Data Sharing and Aggregation to express the Bureau’s vision for the data aggregation market.  The Bureau hosted a symposium on consumer authorized financial data sharing in February 2020.  As the Bureau continues to monitor market developments, the Bureau will evaluate possible policy responses to issues identified, including potential rulemaking, guidance, policy statements, or other activities.  Possible topics for consideration might include specific acts or practices and consumer disclosures.  In addition, the Bureau will consider whether clarifications or adjustments are necessary with respect to existing regulatory structures that may be implicated by current and potential developments in this area.