For the last five years, fair lending has been shaped largely through enforcement. DOJ and CFPB actions intensified pressure from the banking agencies. Special purpose credit programs expanded. Commercial lending became a fair lending issue institutions could no longer leave unmanaged. And banks prepared for a 1071 regime that would have pulled thousands of institutions into detailed small-business data reporting.
That environment has changed, but it has not disappeared. Two CFPB final rules in 2026—the April 22 Regulation B amendments, effective July 21, 2026, and the May 1 Section 1071/Regulation B Subpart B rule, effective June 30, 2026—are the year’s most significant fair lending developments. They help most institutions, but not as much as some headlines suggest.
The 2026 rule is best viewed as a scaled-back Phase One implementation of Dodd-Frank § 1071—not a repeal. The statutory core remains: institutions must collect and report data on applications for credit by small, women-owned, and minority-owned businesses. What changed is scope. Coverage, products, and data fields all narrowed significantly.
Coverage now applies only if an institution has 1,000 covered small-business originations in each of the two preceding calendar years. Line increases, renewals, extensions, and purchases do not count. Farm Credit System lenders are excluded. In multi-party originations, only the last institution with authority to set material terms counts. The Bureau estimates roughly 280 institutions will be covered, down from about 2,500 under the 2023 rule, while still capturing about 92–93% of depository small-business loan volume. About 1,570 depositories drop out.
“Small business” now means a business with $1 million or less in prior-year gross annual revenue, down from $5 million, with CPI-U adjustments beginning in 2030.
Covered products now focus on core business loans, lines of credit, and credit cards. Newly excluded are merchant cash advances, agricultural credit, and small-dollar business credit of $1,000 or less. Trade credit, HMDA-reportable transactions, insurance premium financing, incidental credit, factoring, true leases, and purchased loans remain outside the rule.
Collection begins January 1, 2028. The first register is due June 1, 2029, covering calendar year 2028, with a one-year good-faith grace period through December 31, 2028. Most institutions will use 2026 and 2027 originations to determine 2028 coverage, with a transition option to use 2025 and 2026.
The data set shows the shift most clearly. The 2023 rule pointed toward roughly 81 fields. The 2026 rule keeps the statutory fields and adds only a short usability list: unique identifier, application date, credit type, purpose, amount applied for, amount approved or originated, action taken and date, census tract, gross annual revenue, 3-digit NAICS, time in business, minority-owned and women-owned status, narrowed principal-owner ethnicity/race/sex data, and number of principal owners.
The rule also removes fields especially useful for fair lending analysis: application method and recipient, denial reasons, all pricing variables, and number of workers. LGBTQI+-owned status is gone. Principal-owner sex is binary. Race and ethnicity are reported only in the aggregate. The 2023 anti-discouragement framework is deleted, including low response rates as evidence of discouragement and peer-comparison monitoring. The statutory firewall remains, with a clearer exception for smaller shops where officers often wear multiple hats.
That matters. Pricing was the main area of discretion—and unmanaged fair lending risk—in commercial lending. Removing pricing and denial reasons from 1071 does not remove commercial credit from the interagency fair lending examination table. It simply makes 1071 a weaker disparity tool than the 2023 version would have been.
The Bureau’s rationale is incrementalism: start smaller, then expand if needed. Pricing and denial reasons are framed as possible later-phase additions, not abandoned policy choices.
The April 22 rule makes three key changes.
First, it removes the ECOA “effects test.” For nearly 50 years, a facially neutral practice could violate ECOA if it had a disproportionate adverse effect on a prohibited basis and lacked a legitimate business need that could not reasonably be met through a less-disparate alternative. The Bureau now says “on the basis of” in ECOA § 701(a) does not support effects-based liability. Unlike some other statutes, ECOA lacks “otherwise make unavailable” or “otherwise adversely affect” language that typically supports disparate-impact claims.
What remains is disparate treatment, including intentional use of a facially neutral criterion as a proxy or pretext for a prohibited basis. Statistical disparities alone are no longer an ECOA violation.
Second, the rule narrows discouragement. The old standard covered any oral or written statement that would discourage a reasonable person, on a prohibited basis, from applying—and was sometimes stretched to treat targeted encouragement of one group as discouragement of everyone else. The final rule focuses on statements, spoken, written, or visual, directed at applicants or prospective applicants that the creditor knows or should know would cause a reasonable person to believe credit would be denied, or offered on less favorable terms, because of a prohibited basis. Express discriminatory preferences and exclusion policies remain prohibited.
Third, the rule tightens for-profit special purpose credit programs. Nonprofit and government-authorized programs are largely unchanged. A for-profit SPCP may not use race, color, national origin, or sex as an eligibility factor. Written plans must show need and explain why the class would not receive credit under the institution’s actual standards. Geography- or income-based programs that do not use prohibited-basis eligibility remain available and, the Bureau says, do not need the SPCP safe harbor if they are open without regard to prohibited bases and are not proxies or pretexts.
FDIC and OCC manual changes point the same way: disparate impact references are out; disparate treatment remains the examination focus.
The relief is real, but narrower than it looks. Disparate impact is not “dead” in housing. The Bureau rewrote ECOA/Reg B only. It treats FHA disparate-impact liability as still in force, still administered by HUD and DOJ, and still a reason lenders will continue outcome monitoring. Housing remains the center of fair lending risk. In practice, true standalone disparate-impact cases were rarely, if ever, enforced without some allegation of disparate treatment. The two theories have always overlapped, and redlining matters typically pleaded both.
The 2026 proxy language also keeps the analytical challenge alive. A proxy violation now has two parts: the factor must be a close stand-in for a prohibited basis, and it must be used intentionally that way—not merely correlated after the fact. That is not the old effects test. But in practice, business justification, documentation, and monitoring still matter.
A statistical result alone may no longer be an automatic ECOA violation. Still, pattern-or-practice discrimination is hard to establish without quantification. Examiners still have interagency fair lending procedures. Commercial credit still appears in them. Examination scope can still expand. And these changes were made by agencies, not Congress.
The biggest risk now is treating a reprieve as permission to let the program drift.
The environment remains turbulent because these changes are regulatory and reversible. As technology and AI move further into underwriting and marketing, institutions should expect more data-driven scrutiny, not less. Phase One of 1071 points that way.
A favorable rule does not mean the program is finished. This is the time to make it better—not smaller.