At a White House roundtable, the US Consumer Financial Protection Bureau touts Fair Credit Reporting Act rules to crack down on harmful data broker practices
like payment history or criminal history — as a consumer report under the FCRA. That would trigger new accountability requirements. Tonya Riley / @tonyajoriley : The 2nd proposed rule would clarify extent to which credit header data is a consumer report “reducing the ability of companies to impermissibly disclose sensitive contact information that can be used to identify people who don't wish to be contacted, like domestic violence Rohit Chopra / @chopracfpb : Today, the @CFPB is launching a rulemaking to address business practices used by data brokers in the surveillance industry to power artificial intelligence and monetize our data. https://www.consumerfinance.gov/ ... Rohit Chopra / @chopracfpb : Data brokers control our most personal information and sell it to anyone that's willing to pay for someone's every intimate detail, including scammers. With artificial intelligence, there are even more financial incentives to snoop. Rohit Chopra / @chopracfpb : The @CFPB will be considering rules that will apply the safeguards of the Fair Credit Reporting Act to firms that traffic our data used to make big decisions about our lives. Rohit Chopra / @chopracfpb : Right now, data brokers operate with little accountability. Many of these firms use this data to feed “artificial intelligence” that makes decisions about our daily lives. @alfredwkng : The CFPB's director Rohit Chopra will be discussing this proposal at a White House event on data brokers at 2 p.m. today — the first time the Biden administration has directly addressed data brokers. [image] Julia Angwin / @juliaangwin : Important first step in curtailing the unfettered commercial market for personal data! Also @alfredwkng too humble to note his own seminal reporting on data brokers: https://themarkup.org/...
Context & Ripple Effects
This rulemaking extends the CFPB’s broader scrutiny of consumer-data practices, following its investigation into major platforms’ consumer-data practices. It frames data brokers’ handling of payment, criminal-history and contact data as a consumer-finance issue rather than solely a general privacy question.
The effort remained part of an unsettled policy arc: the CFPB later proposed tighter limits on data-broker sales of sensitive information, then canceled that later plan. That sequence makes this 2023 move important as an early attempt to use existing FCRA authority rather than a new federal privacy statute.
First-order effects
- Data brokers could face FCRA accountability requirements when they compile or disclose information treated as a consumer report, increasing compliance and legal exposure if the proposal is adopted.
- Clarifying that credit-header data can be a consumer report would narrow brokers’ ability to distribute sensitive contact information that can identify people seeking not to be contacted.
Second-order effects
- Companies that buy brokered data for marketing, screening or related uses would need to reassess whether their data sources and downstream uses trigger consumer-report obligations.
- The proposal puts competitive pressure on data intermediaries to distinguish permissible data products from products that depend on sensitive identity and contact information.
Third-order effects
- The episode points to regulators testing sector-specific laws as a way to govern data markets where comprehensive privacy rules are absent or uncertain.
- If this approach persists, access to sensitive consumer data may increasingly depend on demonstrable permission, purpose limits and accountability—not merely on whether information is publicly obtainable.
The trend: Consumer-finance regulators are recasting parts of the data-broker economy as a regulated consumer-reporting market, though the later reversal shows that this path is politically fragile.