Press Coverage March 24, 2023
CFPB’s Data Broker Probe Hints At Potential Rule Expansion
Kim Phan, a partner in Troutman Pepper’s Consumer Financial Services Practice Group, was quoted in the March 24, 2023 Law360 article, “CFPB’s Data Broker Probe Hints At Potential Rule Expansion.”
The CFPB “may be trying to legislate by regulation,” said Kim Phan, a partner in Troutman Pepper’s privacy and cyber practice group. “The Fair Credit Reporting Act has been around for 50-plus years … and there are specific definitions of what a consumer reporting agency is and what a consumer report is.”
“Data brokers have taken the definitions, and they operate their business outside of those definitions,” Phan continued. “If the CFPB wants to make data brokers into consumer reporting agencies, it needs to amend the law, not the regulation.”
…
As the CFPB’s request acknowledges, many companies that trade in consumer data strive to limit their exposure to the FCRA’s complex compliance obligations. That can often involve carefully structuring activities to avoid bumping up against those requirements wherever possible, Phan said.
“A lot of the larger companies out there in this space separate their businesses internally between FCRA products and non-FCRA products,” she said. “They have divided their internal operations based on their understanding of the FCRA’s reach, so if you change that [reach], it could have broad impacts across the industry.”
…
Phan noted that the CFPB’s press release announcing the inquiry described the FCRA as applying to “data brokers,” while the request for information’s questions about data accuracy and privacy point to the types of consumer protections that CFPB may be interested in rolling out more widely, she said.
“Accuracy requirements, having a dispute process, requiring reinvestigation by furnishers — there’s an entire framework for FCRA compliance that [the bureau] could be hoping to impose onto data brokers,” Phan said. “Would that be fought in litigation? Absolutely.”
Insight Industries + Practices
Sponsored Events
San Francisco Renewable Energy Drinks: End of Summer Party
August 26, 2026 | 5:00 PM – 8:00 PM PT
Spark Social SF
601 Mission Bay Blvd North, San Francisco, CA 94158-2472
Speaking Engagements
The 2026 Multifamily Maturity Cliff: Reading the $162 Billion Refinancing Wave and the Engagements It Will Generate
August 26, 2026 | 1:00 PM – 3:10 PM ET
Webinar
Speaking Engagements
ILTACON 2026 Conference
August 23 – 27, 2026
Gaylord Opryland Resort & Convention Center
2800 Opryland Dr, Nashville, TN 37214
Speaking Engagements
Massachusetts Collectors and Treasurers Association: 55th Annual School
August 11 – 14, 2026
University of Massachusetts Amherst
91 Campus Center Way, Amherst, MA 01003