Understand CFPB requirements, compliance timelines, and how to prepare
Last updated: January 14, 2026

Section 1071 of the Dodd-Frank Wall Street Reform and Consumer Protection Act creates the most significant new lending data collection requirement since HMDA was expanded in 2018. Covered financial institutions must collect, maintain, and report data on credit applications from small businesses, including demographic information about principal owners.
The rule aims to:
Financial institutions that originated at least 100 covered credit transactions to small businesses in each of the two preceding calendar years must comply. This includes banks, credit unions, online lenders, CDFIs, and other non-depository lenders.
The CFPB has established a phased compliance timeline:
Section 1071 requires collecting and reporting 81+ data points for each covered application, significantly more complex than HMDA reporting. Key categories include:
While compliance officers familiar with HMDA will recognize some concepts, Section 1071 introduces significant new challenges:
| Aspect | HMDA Reporting | Section 1071 |
|---|---|---|
| Scope | Residential mortgages only | All small business credit types |
| Demographics | Can use BISG proxy if not reported | Must collect directly from applicants |
| Data Points | ~48 data fields | 81+ data fields |
| Business Info | Not applicable | NAICS code, revenue, employees, ownership |
| Pricing Data | Rate spread vs APOR | Actual interest rate, fees, and charges |
| Credit Types | Closed-end mortgages, HELOCs | Term loans, lines of credit, cards, MCA, etc. |
RATA has been preparing for Section 1071 since the rule was proposed, building on our 39 years of HMDA/CRA compliance expertise. Comply SBL (1071) provides:
Ready to prepare for Section 1071? Comply SBL (1071) tracks all 81+ data points, handles geocoding and NAICS coding, and generates submission-ready files.
Section 1071 requires covered financial institutions to collect and report data on small business credit applications to the CFPB. It aims to facilitate enforcement of fair lending laws and identify business and community development needs for small businesses, including those owned by women and minorities.
Financial institutions that originate at least 100 covered small business credit transactions annually must comply. Compliance is phased: institutions with 2,500+ originations by July 2025, 500+ by January 2026, and 100+ by October 2026.
Section 1071 requires 81+ data points including application details, credit type and purpose, amount applied for and approved, pricing information, action taken, denial reasons, census tract, gross annual revenue, NAICS code, time in business, and principal owner demographics (ethnicity, race, and sex).
While both require geographic and demographic data collection, Section 1071 applies to small business credit (not residential mortgages), requires collecting owner demographics directly from applicants (not using proxies), includes business-specific fields like NAICS codes and revenue, and covers more credit products including lines of credit, credit cards, and merchant cash advances.
Discover how Comply SBL (1071) keeps you compliant with evolving SBL regulations and simplifies small business lending data reporting.
Schedule Your Free Demo Have Questions? Contact Us