The Consumer Financial Protection Bureau has finalized a rule that strips diversity, equity, and inclusion requirements from small business lending regulations, scrapping Biden-era mandates that forced loan applicants to answer questions about race, sex, and whether their businesses were LGBT-owned. Acting CFPB Director Russ Vought called it a "long-awaited win" and estimated the changes will save more than $166 million a year.
The finalized rule replaces the previous administration's expansive version of the Section 1071 data collection framework, which the Dodd-Frank Act directed the CFPB to create. Under the Biden-era version, financial institutions were required to compile and report detailed demographic information on small business credit applicants, including minority-owned, women-owned, and LGBTQI+-owned business status, and submit it to the bureau. The Trump administration's replacement narrows both what data gets collected and who has to collect it.
The practical effect: small business owners seeking a loan will no longer face what Vought described as "unnecessary and invasive DEI questions." And smaller lenders, the community banks and credit unions that serve Main Street, will be exempt from the reporting regime entirely.
The overhaul touches nearly every dimension of the original regulation. Breitbart News first reported the details of the finalized rule, which reduces the number of discretionary data points the Biden administration had layered on top of the Dodd-Frank statutory requirements. Gone are application method, application recipient, denial reasons, pricing information, number of workers, and LGBTQI+-owned business status.
The remaining data collection focuses on what the Dodd-Frank Act actually specified, plus a handful of items the CFPB deemed essential: time in business, number of principal owners, and the applicant's NAICS industry code.
Demographic data collection itself has been modified to comply with a Trump administration executive order requiring binary sex categories, male or female, and removing references to gender identity. The rule also eliminated disaggregated race and ethnicity categories, collecting only aggregate categories instead. Applicants retain the right to refuse demographic questions altogether, and institutions must clearly inform them of that right.
The scope of covered transactions has been tightened. The rule now focuses on loans, lines of credit, and credit cards used by small businesses. Merchant Cash Advances are excluded. So is agricultural lending, loans for crop production, livestock, farmland, and farm equipment, since that sector already falls under the Farm Credit Administration's oversight. Farm Credit System Lenders are excluded as well.
Small-dollar business credit transactions of $1,000 or less are also carved out, a recognition that micro-transactions do not justify the compliance overhead. And the definition of "small business" itself has been revised downward, from entities with $5 million in gross annual revenue to those with $1 million, a change that focuses the regulation on the businesses it was originally meant to serve.
Perhaps the most consequential change for community lenders is the new origination threshold. Under the finalized rule, only institutions that originated 1,000 or more covered credit transactions in each of the two preceding calendar years will be subject to reporting requirements. That exempts the vast majority of small lenders from a compliance apparatus that banking groups had warned would be crippling.
The American Bankers Association had argued the Biden-era rule was "too far-reaching, will put small businesses' privacy at risk and will discourage bank lending to small businesses given the cost to collect this data." That warning carried weight well beyond the banking lobby. The concern was straightforward: if lending to a small business triggers an expensive data-collection mandate, some lenders will simply stop making those loans.
The Trump administration's approach to federal regulation has drawn fierce opposition from the left on multiple fronts, from heated rhetoric on Capitol Hill to culture-war clashes across the media landscape. But on this particular rule, the administration found allies across the aisle well before finalization.
The original Section 1071 rule had already faced a serious legislative challenge. The Senate passed a resolution 53, 44 to cancel the Biden-era CFPB data collection mandate, with three Democrats and two independents joining Republicans in the vote, as the Washington Examiner reported. Republicans used the Congressional Review Act to force the issue, and the cross-party support underscored how broadly the privacy and compliance concerns resonated.
Sen. John Kennedy of Louisiana put the objection plainly: "By collecting and publishing personal demographic and other information, the CFPB is putting small-business owners at risk of having their private financial affairs exposed to a watching world." President Biden said he would veto the measure, but the Senate vote signaled that the rule's defenders were losing ground even within their own coalition.
Supporters of the original rule argued it would promote transparency for minority- and women-owned businesses. That framing treated the data collection as a civil-rights tool, a way to spot lending discrimination by tracking who gets approved and who doesn't. But opponents countered that the rule exposed private financial information, expanded federal control over routine lending decisions, and burdened the very small businesses it claimed to help.
The political dynamics around the administration's deregulatory agenda have played out in unexpected ways. Even figures like Sen. John Fetterman have occasionally broken with their party to side with the White House on specific issues, a reminder that not every Trump-era policy fight splits neatly along party lines.
Vought's $166 million savings estimate deserves scrutiny, not because it sounds too high, but because it likely understates the full burden. Compliance costs in financial regulation are notoriously difficult to capture in a single number. The direct cost of collecting and reporting data is only part of the equation. The indirect costs, legal review, software upgrades, staff training, audit preparation, and the lending decisions that never get made because the paperwork isn't worth it, ripple far beyond the line item.
For a community bank in a rural county, the choice between hiring a compliance officer and making ten more small business loans is not abstract. It is the difference between a town that has a functioning lending market and one that doesn't. The Biden-era rule's defenders rarely grappled with that tradeoff. They spoke about transparency and equity in the language of Washington policy papers. The people who run feed stores, body shops, and landscaping crews spoke about whether they could get a loan at all.
In a statement to Breitbart News, Vought framed the rule change in exactly those terms:
"These reforms not only make borrowing more affordable for America's small businesses, including our farmers, but minimize burdens on those needing quick access to credit without requiring them to answer unnecessary and invasive DEI questions introduced by the Biden-Harris-Chopra Administration."
The reference to farmers is pointed. Agricultural lending was swept into the Biden-era rule despite the fact that the Farm Credit Administration already oversees that sector. Layering a second federal reporting regime on top of an existing one is the kind of regulatory duplication that Washington produces reflexively and rarely cleans up. The new rule's exclusion of agricultural lending and Farm Credit System Lenders removes that redundancy.
The broader pattern, progressive administrations using regulatory agencies to embed ideological goals into routine commercial activity, has drawn backlash well beyond the banking sector. From congressional rhetoric to classroom controversies, the public has shown diminishing patience for institutions that prioritize political signaling over their core missions.
Section 1071 of the Dodd-Frank Act amended the Equal Credit Opportunity Act to require financial institutions to compile, maintain, and submit data on credit applications from women-owned, minority-owned, and small businesses. The statute's purpose was to give regulators a window into whether those groups face discrimination in the lending market.
That statutory mandate still stands. The Trump administration's rule does not repeal Section 1071. It rewrites the implementing regulation to match what the law actually says, and strips away the discretionary additions the Biden CFPB bolted on. The distinction matters. This is not deregulation in the sense of removing a congressional mandate. It is a return to the statutory baseline after an agency exceeded its brief.
The Biden-era CFPB treated the Dodd-Frank directive as a launching pad for a far more ambitious data-collection project, one that reached into gender identity, disaggregated racial subcategories, pricing details, and denial reasons. None of that was required by statute. All of it imposed costs. And the LGBTQI+-owned business status question, in particular, had no plausible connection to the Equal Credit Opportunity Act's anti-discrimination framework.
The cultural and political fault lines exposed by these regulatory battles show no sign of cooling. Whether the flashpoint is a social media controversy or a federal lending rule, the underlying question is the same: how far should government reach into private decisions to advance an ideological agenda?
The finalized rule still leaves several questions unanswered. The CFPB's description of certain provisions uses forward-looking language, what the rule "would" do, raising the question of whether all elements take effect immediately or phase in over time. The formal title of the finalized rule and its effective date have not been specified in available reporting. And it remains to be seen whether progressive advocacy groups or state attorneys general will mount legal challenges to block or delay implementation.
What is clear is the direction. The CFPB under Vought is pulling back from the Biden-era posture of using lending regulation as a vehicle for social policy. The agency is returning to the narrower mission the statute defined: collect the data Congress told you to collect, protect the privacy of applicants, and get out of the way.
Small business owners didn't ask Washington to sort them by race, sex, and sexual orientation before they could borrow money. They asked for a loan. The new rule lets lenders get back to answering that question.
