CFPB proposes new rule to regulate expansive data broker industry | CyberScoop<\/title> <meta name=\"description\" content=\"The CFPB's proposed rule to regulate data brokers under the Fair Credit Reporting Act aims to enhance privacy by holding brokers accountable.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/cfpb-data-broker-regulation-fcra-privacy-protection\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"CFPB proposes new rule to regulate expansive data broker industry\"> <meta property=\"og:description\" content=\"The CFPB's proposed rule to regulate data brokers under the Fair Credit Reporting Act aims to enhance privacy by holding brokers accountable.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/cfpb-data-broker-regulation-fcra-privacy-protection\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2024-12-03T10:00:00+00:00\"> <meta property=\"article:modified_time\" content=\"2024-12-02T23:28:16+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg\"> <meta property=\"og:image:width\" content=\"8660\"> <meta property=\"og:image:height\" content=\"5774\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Greg Otto\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@gregotto\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1732206022g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1730999764g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1732010462g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=ddc036fa194c40cf406f\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/82775\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.7.1\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=82775\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcfpb-data-broker-regulation-fcra-privacy-protection%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fcfpb-data-broker-regulation-fcra-privacy-protection%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-82775 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/cfpb-data-broker-regulation-fcra-privacy-protection\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \">\n<div class=\"single-article__header-content\" readability=\"31.06640625\">  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/82775\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"427\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry.jpg?resize=640%2C427&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg 8660w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=2048,1365 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=505,337 505w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=1012,675 1012w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-2.jpg?resize=1264,843 1264w\" sizes=\"(max-width: 1012px) 100vw, 1012px\"><figcaption> The entrance to the Consumer Financial Protection Bureau (CFPB) headquarters building is seen on August 18, 2024, in Washington, DC. (Photo by J. David Ake\/Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"51.058973873533\"><body readability=\"104.08202705604\"><\/p>\n<p>In an era where personal data is increasingly commodified, the Consumer Financial Protection Bureau (CFPB) is attempting to regulate the sprawling industry of data brokers. A newly proposed rule released Tuesday aims to put data brokers in line with the Fair Credit Reporting Act (FCRA), ensuring accountability and consumer privacy amid widespread security issues.<\/p>\n<p>Initially established in 1970, the FCRA was one of the first pieces of legislation aimed at protecting consumer privacy. The proposed changes by the CFPB intend to broaden the law to include data brokers, holding them to the same standards as traditional consumer reporting agencies such as Equifax, Experian, and TransUnion.<\/p>\n<p>The CFPB\u2019s proposed rule redefines consumer reports to encompass any broker that obtains personal data related to credit and financial assessment. The brokers would be required to demonstrate a \u201cpermissible purpose\u201d for sharing consumer information, limiting the use of consumer data for marketing purposes unless explicit consumer consent is granted.<\/p>\n<p>Furthermore, the proposed rule mandates clear disclosure to the public concerning the use of their data, ensuring individuals can provide informed consent or withdraw it if they so choose. This aims to close current loopholes that allow for vague data-sharing authorizations.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>\u201cThese changes reflect a widespread consensus that current privacy protections are inadequate,\u201d CFPB Director Rohit Chopra said in a call with reporters. \u201cToday\u2019s proposed rule is a major step forward to ensure that companies trafficking in Americans\u2019 most sensitive information face real consequences for violating long-standing law and for putting people and our country at risk.\u201d<\/p>\n<p>Data brokers collect information from a wide array of sources \u2014 such as retail transactions, online behaviors, and publicly available records \u2014 to compile extensive profiles on individuals, aggregating information on financial standings, health statuses, and lifestyle choices, among others. The industry has grown significantly, leveraging advancements in technology to not only amass but also potentially re-identify de-identified data, raising both privacy and ethical concerns.<\/p>\n<p>The collected data is predominantly used to generate detailed consumer reports, which are then purchased by companies in sectors like credit, insurance, and real estate to inform business decisions. However, the practice has frequently been criticized for operating in the shadows, often without the explicit consent of the individuals whose data is being used.<\/p>\n<p>Alarmingly, these data sets are also susceptible to misuse. Scammers and identity thieves access this data to exploit the vulnerable, targeting individuals for identity theft, financial fraud, or scams. Moreover, national security risks loom large, as adversaries could potentially acquire sensitive data about U.S. military personnel and government employees, potentially compromising security operations.<\/p>\n<p>Last week, Wired published an article that examined how more than 3 billion phone coordinates <a href=\"https:\/\/www.wired.com\/story\/phone-data-us-soldiers-spies-nuclear-germany\/\">collected by a U.S. data broker<\/a> exposed the detailed movements of U.S. military and intelligence workers in Germany.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Earlier this year, a breach at data broker National Public Data compromised 2.9 billion records, including full names, addresses, birth dates, phone numbers, and Social Security numbers. The stolen data spans at least three decades and was being sold on the cybercrime underground with server credentials for $3.5 million. In October, the Federal Police of Brazil <a href=\"https:\/\/cyberscoop.com\/national-public-data-usdod-data-breach-arrested\/\">arrested a person allegedly responsible<\/a> for the breach. <\/p>\n<p>If implemented, the rule could instigate sweeping changes across the data-broker landscape, potentially curbing the unauthorized distribution of sensitive consumer data while enhancing privacy protections. However, the agency\u2019s future is unclear in President-elect Donald Trump\u2019s forthcoming administration. Last week, Elon Musk <a href=\"https:\/\/x.com\/elonmusk\/status\/1861644897490751865\">posted on social media<\/a> that he wants to \u201cdelete\u201d the CFPB as part of his effort under the new <a href=\"https:\/\/fedscoop.com\/trump-wants-a-doge-an-obama-era-tech-official-has-some-tips\/\">Department of Government Efficiency<\/a>. Trump has tasked Musk and tech entrepreneur Vivek Ramaswamy to use the newly formed office to eliminate government spending. <\/p>\n<p>Despite the focus, a CFPB official said they believe the rules can survive in the new administration. <\/p>\n<p>\u201cI think there\u2019s a broad bipartisan recognition that data brokers pose real dangers, both to Americans\u2019 privacy and to national security,\u201d a CFPB official said during the call. \u201cThis is an issue that unites a broad array of voices, and so we think that means that concern about this issue will not disappear.\u201d<\/p>\n<p> <\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.6778846153846\">\n<div class=\"author-card\" readability=\"14\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry-1.jpg?w=640&ssl=1\" alt=\"Greg Otto\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Greg Otto<\/h4>\n<p> Greg Otto is Editor-in-Chief of CyberScoop, overseeing all editorial content for the website. Greg has led cybersecurity coverage that has won various awards, including accolades from the Society of Professional Journalists and the American Society of Business Publication Editors. Prior to joining Scoop News Group, Greg worked for the Washington Business Journal, U.S. News & World Report and WTOP Radio. He has a degree in broadcast journalism from Temple University. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/cfpb-data-broker-regulation-fcra-privacy-protection\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>CFPB proposes new rule to regulate expansive data broker industry<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3056,771,3239,3240,679,117,439,268,288],"tags":[3062,772,3241,3242,680,119,443,274,294],"class_list":["post-6463","post","type-post","status-publish","format-standard","hentry","category-consumer-financial-protection-bureau","category-data-brokers","category-department-of-government-efficency","category-fair-credit-reporting-act","category-financial","category-government","category-policy","category-privacy","category-threats","tag-consumer-financial-protection-bureau","tag-data-brokers","tag-department-of-government-efficency","tag-fair-credit-reporting-act","tag-financial","tag-government","tag-policy","tag-privacy","tag-threats"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/consumer-financial-protection-bureau\/\" rel=\"category tag\">Consumer Financial Protection Bureau<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/data-brokers\/\" rel=\"category tag\">data brokers<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/department-of-government-efficency\/\" rel=\"category tag\">Department of Government Efficency<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/fair-credit-reporting-act\/\" rel=\"category tag\">Fair Credit Reporting Act<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/financial\/\" rel=\"category tag\">Financial<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/government\/\" rel=\"category tag\">Government<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/policy\/\" rel=\"category tag\">Policy<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/privacy\/\" rel=\"category tag\">Privacy<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/threats\/\" rel=\"category tag\">Threats<\/a>","tag_info":"Threats","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/6463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=6463"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/6463\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=6463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=6463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=6463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":6463,"date":"2024-12-03T04:00:00","date_gmt":"2024-12-03T10:00:00","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=82775"},"modified":"2024-12-03T04:00:00","modified_gmt":"2024-12-03T10:00:00","slug":"cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/12\/03\/cfpb-proposes-new-rule-to-regulate-expansive-data-broker-industry\/","title":{"rendered":"CFPB proposes new rule to regulate expansive data broker industry"},"content":{"rendered":"