CFPB Deprioritizes 1071 Enforcement: Read the Signal, Not the Relief

A Non-Enforcement Announcement That Small Business Lenders Should Not Mistake for Safety
On April 30, 2025, the CFPB announced that it would not prioritize enforcement or supervision actions against entities currently outside the stay imposed under Texas Bankers Association v. CFPB, No. 24-40705 (CA5). Read quickly, that sounds like a reprieve for every small business lender covered by the Section 1071 Small Business Lending Rule.
But here is the part the coverage buried. A deprioritization is not a repeal, and it is not a safe harbor. The CFPB's own announcement rests on a rationale that should make lenders more cautious, not less: the agency conceded that fairness, not legality, was driving its restraint. The rule still applies to you. The agency simply chose not to chase you today.
Here is what happened, why it matters, and what small business lenders should do before the posture changes.
The Stay Protects the Plaintiffs. It Does Not Protect You.
The confusion starts with the Fifth Circuit's stay. On February 7, 2025, the court granted a stay tolling compliance deadlines for the Section 1071 rule pending appeal. That stay applies only to the plaintiffs and intervenors in the case, including the American Bankers Association and allied trade associations. It does not extend to all covered lenders. You can read the order itself.
So the CFPB faced an awkward gap. Members of the winning trade associations were shielded. Thousands of similarly situated lenders who were not parties to the litigation were not.
The rationale the agency chose
Rather than enforce the rule against unprotected lenders, the CFPB stated that even absent resource constraints, it would deprioritize enforcement against entities outside the stay because of the unfairness of enforcing the rule against parties not protected by the court's order but similarly situated to those who are. That is a fairness judgment. It is not a legal conclusion that the rule is invalid.
The underlying rule remains on the books. The CFPB issued the original Section 1071 rule amending Regulation B on March 30, 2023, and published it in the Federal Register on May 31, 2023 at 88 Fed. Reg. 35,150. Nothing in the April 2025 announcement erased it.
Reading the Enforcement Signal: Discretion Is Reversible
The lens that matters here is enforcement signal-reading. A prosecutorial deprioritization tells you how an agency intends to spend its resources under current leadership. It does not tell you what the law requires, and it does not bind successor leadership.
Three features of this announcement deserve attention.
- The relief is discretionary, not structural. The CFPB did not concede the rule is unlawful. It chose not to prioritize enforcement. Discretion can be withdrawn by memo, the same way it was granted.
- The relief is tethered to litigation that could resolve at any time. The stay is pending appeal. If the Fifth Circuit rules or the parties settle, the fairness rationale supporting agency-wide restraint could evaporate.
- The statute of limitations does not pause. Deprioritized conduct is still potentially actionable later. Lenders who treat this as permission to stop building compliance data collection may find themselves reconstructing years of records under deadline pressure.
The tell most readers miss
At the time of the April 30, 2025 announcement, the CFPB signaled that leadership had directed staff to begin a new Section 1071 rulemaking. That signal was the real story. It became concrete when the agency published a substantially revised final rule on May 1, 2026, at 91 Fed. Reg. 23,530, effective June 30, 2026, with a single uniform compliance date of January 1, 2028. The deprioritization was a bridge to a new rule, not a permanent off-ramp.
What Small Business Lenders Should Do Now
The practical mistake is treating non-enforcement as no-obligation. The revised rule sets a firm compliance date of January 1, 2028. That is closer than it looks for institutions that need to build data-collection infrastructure, train loan officers, and validate reporting pipelines.
First, read the 2026 revised rule against your current systems. The revised Section 1071 final rule changes scope, thresholds, and timing. Map the new requirements to your existing origination workflow now, while you have runway before the January 1, 2028 compliance date.
Second, do not dismantle compliance work you have already done. Firms that paused Section 1071 readiness after the April 2025 announcement gambled on a rationale that was always reversible. Keep your data architecture warm.
Third, confirm whether you are inside or outside the stay. If you are a member of a plaintiff or intervenor trade association, your posture differs from a lender that was never a party. Do not assume trade-association membership equals coverage without checking.
Fourth, track the rulemaking and any litigation over the 2026 rule. The revised rule could itself face challenge. Build a monitoring process rather than reacting to headlines.
The CFPB's Section 1071 rule page is the authoritative place to track compliance dates and rulemaking status as they evolve.
Key Takeaways
- Deprioritization is not repeal. The CFPB chose not to prioritize enforcement against lenders outside the stay; the Section 1071 rule remains legally in effect.
- The Fifth Circuit stay protects only named parties. The February 7, 2025 stay in No. 24-40705 covers plaintiffs and intervenors, not all covered lenders.
- The agency's rationale was fairness, not legality. The CFPB said it would refrain even absent resource constraints because of the unfairness to unprotected but similarly situated lenders, an explicitly discretionary and reversible basis.
- A firm compliance date now exists. The revised rule published May 1, 2026 at 91 Fed. Reg. 23,530 sets a uniform compliance date of January 1, 2028.
- Reading the signal beats reading the headline. The 2025 deprioritization was a bridge to new rulemaking, and lenders who paused readiness face a compressed path to compliance.
How FinTech Law Reads Regulatory Restraint
A deprioritization announcement is a resource decision dressed in the language of consumer protection. The obligation survives; only the enforcement calendar changes.
We help banks, nonbank lenders, and fintech originators separate what an agency will do this quarter from what the law requires over the full compliance horizon, and we build data and reporting frameworks that hold up when discretion reverses. If your institution originates small business credit and is weighing how to respond to the shifting Section 1071 timeline, we would welcome the conversation. Learn more at fintechlaw.ai or contact us to schedule a consultation.
This blog post is for informational purposes only and does not constitute legal advice. No attorney-client relationship is formed by reading this content. If you need legal advice, please contact a qualified attorney.