On October 28, the Consumer Financial Protection Bureau (CFPB or Bureau) issued a new interpretive rule replacing its 2022 interpretive rule (withdrawn in May 2025) concerning the scope of preemption under the Fair Credit Reporting Act (FCRA). This new interpretive rule clarifies that the FCRA broadly preempts state laws related to consumer reporting, reinforcing Congress’s intent to establish national standards when information is used to determine a consumer’s eligibility for credit, insurance, employment and the like. This move replaces the previous rule, which was criticized for its potential to create regulatory confusion.

Background

The FCRA, enacted in 1970, has undergone several amendments to address the evolving landscape of consumer reporting. Initially, the FCRA was interpreted to preempt state laws only when they were inconsistent with its provisions. However, in 1996, Congress expanded this preemption to ensure national standards with the aim of preventing a fragmented system of state regulations. This preemption was made permanent in 2003 by the Fair and Accurate Credit Transactions Act (FACTA), which was enacted to promote economic growth and maintain uniformity in credit reporting. Courts in turn have recognized Congress’s desire for a national comprehensive regulatory scheme when applying concepts of conflict or obstacle preemption to avoid state’s creating a regulatory quagmire.

The current CFPB concluded that the 2022 interpretive rule established too narrow a scope of preemption, allowing states too much leeway in regulating consumer reports, leading to a patchwork of conflicting state and federal regulations.

Key Points of the New Interpretive Rule

  • Broad Preemption Scope: The new rule emphasizes that the FCRA broadly preempts state laws concerning consumer reporting. This aligns with Congress’s intent to create a cohesive national standard, avoiding the complexities of varying state regulations.
  • Withdrawal of the 2022 Rule: The CFPB has confirmed the withdrawal of the 2022 interpretive rule, which was criticized for its narrow interpretation of preemption. The Bureau argues that the 2022 rule did not reduce compliance burdens and was not legally binding.
  • Clarification of Preemption Language: The new rule clarifies that phrases like “with respect to” and “relating to” in the FCRA’s preemption clauses are intended to have a broad scope, covering all state laws within the field of consumer reporting.
  • Legislative Intent and History: The CFPB argues that the legislative history of the FCRA amendments supports a broad preemption approach, because Congress aimed to establish a national consumer reporting system to enhance economic development and consumer access to credit.
  • Impact on the Consumer-Reporting Market: The new rule seeks to maintain a unified national credit market, preventing the fragmentation that could arise from state-specific regulations. This is crucial for ensuring consistent credit reporting standards across the country.

Conclusion

The CFPB’s decision to withdraw the 2022 interpretive rule on FCRA preemption is in line with the broader deregulatory efforts initiated by the CFPB under Executive Order 13891, issued during President Trump’s previous administration (and discussed here). Despite former President Biden’s revocation of that Executive Order, the Bureau has previously emphasized that the principles it expressed “are no less salient today.”

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of David N. Anthony David N. Anthony

David Anthony handles litigation against consumer financial services businesses and other highly regulated companies across the United States. He is a strategic thinker who balances his extensive litigation experience with practical business advice to solve companies’ hardest problems.

Photo of Cindy D. Hanson Cindy D. Hanson

Consumer finance clients trust Cindy’s experience and skill to resolve their most challenging cases. Focused on class action defense, Cindy has handled numerous FCRA cases and is the point of contact for consumer protection defense.

Photo of Stefanie Jackman Stefanie Jackman

Stefanie takes a holistic approach to working with clients both through compliance counseling and assessment relating to consumer products and services, as well as serving as a zealous advocate in government inquiries, investigations, and consumer litigation.

Photo of Kim Phan Kim Phan

Kim is a partner in the firm’s Privacy + Cyber Practice Group, where she is a privacy and data security attorney, who also assists companies with data breach prevention and response, including establishing effective security programs prior to a data breach and the

Kim is a partner in the firm’s Privacy + Cyber Practice Group, where she is a privacy and data security attorney, who also assists companies with data breach prevention and response, including establishing effective security programs prior to a data breach and the assessment of breach response obligations following a breach.

Photo of Ronald I. Raether, Jr. Ronald I. Raether, Jr.

Ron leads the firm’s Privacy + Cyber team. Drawing from nearly 30 years of experience, he provides comprehensive services to companies in all aspects of privacy, security, data use, and risk mitigation. Clients rely on his in-depth understanding of technology and its application

Ron leads the firm’s Privacy + Cyber team. Drawing from nearly 30 years of experience, he provides comprehensive services to companies in all aspects of privacy, security, data use, and risk mitigation. Clients rely on his in-depth understanding of technology and its application to their business to solve their most important challenges — from implementation and strategy to litigation and incident response. Ron and his team have redefined the boundaries of typical law firm privacy and cyber services in offering a 360 degree approach to tackling information governance issues. Their holistic services include drafting and implementing bespoke privacy programs, program implementation, licensing, financing and M&A transactions, incident response, privacy and cyber litigation, regulatory investigations, and enforcement experience.

Photo of Jesse Silverman Jesse Silverman

Jesse provides practical and business-minded advice to clients in the financial services sector. With senior in-house and both state and federal government experience, he helps clients mitigate potential risks throughout their business cycle.

Photo of Chris Willis Chris Willis

Chris is the co-leader of the Consumer Financial Services Regulatory practice at the firm. He advises financial services institutions facing state and federal government investigations and examinations, counseling them on compliance issues including UDAP/UDAAP, credit reporting, debt collection, and fair lending, and defending…

Chris is the co-leader of the Consumer Financial Services Regulatory practice at the firm. He advises financial services institutions facing state and federal government investigations and examinations, counseling them on compliance issues including UDAP/UDAAP, credit reporting, debt collection, and fair lending, and defending them in individual and class action lawsuits brought by consumers and enforcement actions brought by government agencies.