Progress

Current status
adopted
01 Apr 2030 in force
01 Apr 2029 in force
01 Apr 2028 in force
01 Apr 2027 in force
01 Apr 2026 in force
22 Oct 2024 adopted
29 Dec 2023 processing consultation
19 Oct 2023 in consultation
25 Jan 2023 processing consultation
27 Oct 2022 in consultation

Scope

Implementers
United States of America
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies)
other service provider
Government Branch
executive
Government Body
consumer protection authority
Implementation Level
national

Timeline of events

01 Apr 2030
in force

Implemented obligations for depository institutions that hold less than USD 1.5 billion in total assets outlined in Rule on Personal Financial Data Rights

On 1 April 2030, the final rule on personal financial data rights came into force for depository institutions that hold less than USD 1.5 billion in total assets but more than USD 850 million. The rule mandates financial institutions to provide cons…

Source
Event type order
Action type implementation
Government branch executive
Government body consumer protection authority
01 Apr 2029
in force

Implemented obligations for depository institutions that hold at least USD 1.5 billion in total assets outlined in Rule on Personal Financial Data Rights

On 1 April 2029, the final rule on personal financial data rights came into force for depository institutions that hold at least USD 1.5 billion in total assets but less than USD 3 billion. The rule mandates financial institutions to provide consume…

Source
Event type order
Action type implementation
Government branch executive
Government body consumer protection authority
01 Apr 2028
in force

Implemented obligations for depository institutions that hold at least USD 3 billion in total assets outlined in Rule on Personal Financial Data Rights

On 1 April 2028, the final rule on personal financial data rights came into force for depository institutions that hold at least USD 3 billion in total assets but less than USD 10 billion. The rule mandates financial institutions to provide consumer…

Source
Event type order
Action type implementation
Government branch executive
Government body consumer protection authority
01 Apr 2027
in force

Implemented obligations for depository institutions that hold at least USD 10 billion in total assets outlined in Rule on Personal Financial Data Rights

On 1 April 2027, the final rule on personal financial data rights came into force for depository institutions that hold at least USD 10 billion in total assets but less than USD 250 billion or non-depository institutions that did not generate USD 10…

Source
Event type order
Action type implementation
Government branch executive
Government body consumer protection authority
01 Apr 2026
in force

Implemented obligations for depository institutions with at least USD 250 billion in total assets outlined in Rule on Personal Financial Data Rights

On 1 April 2026, the final rule on personal financial data rights came into force for depository institutions with at least USD 250 billion in total assets and non-depository institutions with at least USD 10 billion in revenue. The rule mandates fi…

Source
Event type order
Action type implementation
Government branch executive
Government body consumer protection authority
22 Oct 2024
adopted

Adopted Final Rule on Personal Financial Data Rights by Consumer Financial Protection Bureau

On 22 October 2024, the Consumer Financial Protection Bureau (CFPB) adopted the final rule on personal financial data rights. The rule mandates financial institutions to provide consumers with their data in a secure and usable format upon request. T…

Source
Event type order
Action type adoption
Government branch executive
Government body consumer protection authority
29 Dec 2023
processing consultation

Closed consultation on CFPB Personal Financial Data Rights Rule

On 29 December 2023, the Consumer Financial Protection Bureau (CFPB) closed its consultation as part of its rulemaking proposing a Personal Financial Data Rights rule. The rule would create consumer rights granting control over their personal financ…

Source
Event type order
Action type consultation closed
Government branch executive
Government body consumer protection authority
19 Oct 2023
in consultation

Opened consultation on CFPB Personal Financial Data Rights Rule

On 19 October 2023, the Consumer Financial Protection Bureau (CFPB) opened a consultation as part of its rulemaking proposing a Personal Financial Data Rights rule. The rule would create consumer rights granting control over their personal financial…

Source
Event type order
Action type consultation opened
Government branch executive
Government body consumer protection authority
25 Jan 2023
processing consultation

Closed consultation on CFPB Rulemaking on Personal Financial Data Rights

On 25 January 2023, the Consumer Financial Protection Bureau (CFPB) closed the consultation on its its proposals for a Rule on Personal Financial Data Rights. The proposal would apply to all entities that fall under the definition of a financial ins…

Source
Event type order
Action type consultation closed
Government branch executive
Government body consumer protection authority
27 Oct 2022
in consultation

Opened consultation on CFPB Rulemaking on Personal Financial Data Rights

On 27 October 2022, the Consumer Financial Protection Bureau (CFPB) announced its intention to issue a Rule on Personal Financial Data Rights, opening a consultation on the draft suggestions until 25 January 2023. The proposal would apply to all ent…

Source
Event type order
Action type consultation opened
Government branch executive
Government body consumer protection authority