Section 1071 in 2026: What Lenders Need to Know About Small Business Lending Data

Section 1071 of the Dodd-Frank Act represents the most significant expansion of lending data collection requirements since HMDA. As 2026 unfolds, more financial institutions are entering the compliance timeline, making this an important moment to understand what's required and how to prepare.

This guide covers the current state of Section 1071 implementation, who needs to comply and when, and practical steps for building your compliance infrastructure.

What Is Section 1071?

Section 1071 requires financial institutions to collect and report data on small business lending applications. The goal mirrors HMDA's purpose for mortgage lending: to identify potential discrimination and ensure fair access to credit for minority-owned, women-owned, and other small businesses.

The Consumer Financial Protection Bureau (CFPB) finalized the implementing rule in 2023, establishing:

• Which institutions must report
• What data must be collected
• When compliance begins
• How data will be submitted

The Compliance Timeline Changed on May 1, 2026

The phased schedule described in earlier guidance — separate dates for lenders above 2,500, 500 and 100 originations — no longer applies. The CFPB published a reconsideration final rule on May 1, 2026 (effective June 30, 2026) that replaced it with a single compliance date and a much higher threshold:

• Origination threshold: raised from 100 to 1,000 covered credit transactions to small businesses, in each of two consecutive years
• Small business definition: lowered from $5 million or less in gross annual revenue to $1 million or less
• Compliance date: a single date of January 1, 2028, for every institution that remains covered

Important: The origination count includes all covered credit transactions to small businesses under the new $1 million revenue definition, not just approved loans. Denied applications and withdrawn requests also count toward the threshold, and both years of the two-year test must clear it.

If your institution built a 1071 program against the old 100-transaction threshold, it is worth re-testing coverage now — the tenfold increase takes many lenders out of scope entirely. Our Section 1071 coverage checker runs both the origination and revenue tests against the current rule.

What Data Must Be Collected?

Section 1071 requires collection of dozens of data points across several categories, several fewer than earlier guidance after the CFPB's May 2026 reconsideration rule removed application method, application recipient, denial reasons, pricing information and number of workers as discretionary fields. Here's an overview of the key fields, and how RATA handles 1071 small business lending data across all of them. Once you're collecting it, you can build custom reports across the 1071 data points rather than exporting to a spreadsheet for every board or examiner request.

Application Information

• Unique loan/application identifier
• Application date and action taken date
• Application method (in-person, online, telephone)
• Application recipient (direct vs. indirect)

Business Information

• Business legal name and trade name
• Business address
• Business type (sole proprietorship, partnership, corporation, etc.)
• NAICS code (industry classification)
• Number of employees
• Time in business
• Gross annual revenue

Owner Demographics

This is where Section 1071 differs most significantly from traditional business lending:

• Minority-owned status: Whether the business is minority-owned
• Women-owned status: Whether the business is women-owned
• Veteran status: Whether the business is veteran-owned
• Principal owner demographics: Race, ethnicity, and sex of principal owners

These demographic fields must be collected via a standardized form provided to applicants. Applicants may choose not to respond, in which case "not provided" is recorded.

Credit Information

• Credit type (term loan, line of credit, credit card, etc.)
• Credit purpose
• Amount applied for
• Amount approved (if applicable)
• Action taken (originated, approved but not accepted, denied, withdrawn, incomplete)
• Denial reasons (if applicable)

Pricing Information

• Interest rate
• Fees charged
• Prepayment penalty terms

How Section 1071 Compares to HMDA

If your institution already files HMDA, you'll find some familiar concepts, but also significant differences:

Key difference: Section 1071 requires collecting business ownership demographics that have no HMDA equivalent. This means new data collection forms, applicant communications, and staff training.

Preparing for Compliance

With a single January 1, 2028 compliance date now in place of the old phase schedule, preparation should still begin well before then:

1. Assess Your Origination Volume

Determine which phase applies to your institution:

• Count small business credit originations from the past two calendar years
• Include all covered transactions (not just approvals)
• Remember: a "small business" under Section 1071 is one with gross annual revenue of $1 million or less, lowered from $5 million by the CFPB's May 2026 reconsideration rule

2. Update Application Processes

You'll need to collect demographic information at the application stage:

• Implement the CFPB's standardized demographic data collection form
• Train staff on how to present the form and handle questions
• Update online application systems to include required fields
• Establish procedures for indirect lending channels

3. Build Data Infrastructure

Your systems must capture, store, and report all required fields:

• Assess current loan origination system capabilities
• Identify gaps in data collection
• Plan for secure storage of demographic data
• Establish data quality controls

4. Develop Compliance Procedures

Document your processes for examiner review:

• Written policies for data collection
• Staff training materials and records
• Quality assurance procedures
• Retention and security protocols

Common Implementation Challenges

Based on Phase 1 lenders' experiences, watch for these common hurdles:

NAICS code assignment: Correctly classifying business industries requires consistent methodology. Develop clear guidance for your team.

Principal owner identification: Determining who qualifies as a principal owner (25%+ ownership or significant management control) requires clear policies.

Applicant reluctance: Some applicants may be hesitant to provide demographic information. Train staff to explain the purpose and emphasize that providing information is voluntary.

System integration: If you use multiple lending platforms, ensuring consistent data collection across all channels is essential.

How Comply SBL Helps

Comply SBL is designed specifically for Section 1071 compliance:

• Complete field data management: Capture every required data point in a single system
• Edit check validation: Match CFPB specifications before submission
• Demographic form generation: Produce compliant applicant forms
• NAICS code lookup: Accurate industry classification tools
• Reporting and analytics: Monitor lending patterns and identify potential issues
• HMDA integration: For institutions that need both HMDA and Section 1071 compliance

Next Steps

If Section 1071 applies to your institution under the current 1,000-origination threshold:

1. Confirm your coverage against the 1,000-origination threshold in each of the last two years
2. Assess current systems for gaps in data collection capability
3. Begin staff training on demographic data collection procedures
4. Evaluate compliance software options

Visit our Section 1071 information page for additional resources, or schedule a demo of Comply SBL to see how we can help your institution prepare.

RATA Associates has been at the forefront of regulatory compliance software since 1987. As Section 1071 requirements take effect, we're helping financial institutions build compliant processes from day one.