On December 22, the National Credit Union Administration (NCUA) updated its Artificial Intelligence (AI) resource page to consolidate key technical and policy references for federally insured credit unions. The page sits within NCUA’s broader cybersecurity and financial technology resources and is explicitly framed as support for evaluating and performing due diligence on third‑party AI vendors. It links AI oversight back to existing NCUA guidance on third‑party relationships, including 07‑CU‑13 (Evaluating Third Party Relationships) and 01‑CU‑20 (Due Diligence Over Third Party Service Providers).

As reported by Bloomberg here, the Consumer Financial Protection Bureau (CFPB or Bureau) is moving to withdraw a 2023 Biden-era joint statement with the U.S. Department of Justice (DOJ) that warned lenders against overbroad use of immigration status in credit decisions. The notice, submitted to the White House’s Office of Information and Regulatory Affairs (OIRA), ties together two hallmark priorities of the current Trump administration: a harder line on immigration and a continued effort to scale back fair lending enforcement. While the underlying Equal Credit Opportunity Act (ECOA) remains unchanged, the move signals a sharp shift in how the CFPB and DOJ are likely to interpret and enforce its protections for noncitizen borrowers.

On December 17, New Jersey announced its adoption of what its Attorney General is calling the “most comprehensive state-level disparate impact regulations in the country.” Effective December 15, 2025, the Division on Civil Rights’ (DCR) new rules under the New Jersey Law Against Discrimination (LAD) codify guidance on disparate impact discrimination across housing, lending, employment, places of public accommodation, and contracting.

On December 10, the Office of the Comptroller of the Currency (OCC) released preliminary findings from its supervisory review of “debanking” activities at the nine largest national banks. The objective of the review was to determine whether the banks debanked or discriminated against any customers or potential customers on the basis of their political or religious beliefs or lawful business activities. The review, which was required to be completed by the OCC and other federal banking agencies by December 5 pursuant to Executive Order 14331 (Guaranteeing Fair Banking for All Americans), covers the period 2020–2025.

In two recent litigation status reports, the Consumer Financial Protection Bureau (CFPB or Bureau) indicated that it is working to issue interim final rules for both Section 1071 and Section 1033 in light of an opinion from the U.S. Department of Justice’s Office of Legal Counsel (OLC) concluding that the Bureau cannot lawfully draw funds from the Federal Reserve Board at this time. Specifically, as discussed here, the OLC concluded that the Federal Reserve System presently has no “combined earnings” from which the CFPB may lawfully draw funds under the Dodd‑Frank Act, and the CFPB has publicly stated it anticipates having sufficient funds to continue normal operations through at least December 31, 2025.

On November 25, the House Financial Services Committee majority staff published Operation Chokepoint 2.0: Biden’s Debanking of Digital Assets, a detailed account of how, in the Committee’s view, federal prudential regulators between 2021 and early 2025 discouraged banks from serving lawful digital asset businesses through informal guidance, supervisory posture, and enforcement.

As reported by Bloomberg, the Democratic Attorneys General Association (DAGA) has hired Rohit Chopra, former Director of the Consumer Financial Protection Bureau (CFPB or Bureau), to lead a new Consumer Protection and Affordability Working Group within DAGA’s policy arm. The move was announced as a coordinated, state-led response to rising living costs and widespread fraud, with a policy agenda that spans financial services, technology, and health care.

The Consumer Financial Protection Bureau (CFPB or Bureau) has issued a new proposed rule that would substantially revise the 2023 small business lending data collection and reporting rule under the Equal Credit Opportunity Act (ECOA) and Regulation B, which implements Section 1071 of the Dodd-Frank Act. The proposal re-centers Section 1071 on “core” providers, products, and data, with a single compliance date and material carve-outs to reduce complexity and improve data quality. The proposal is open for comment for 30 days after publication in the Federal Register. However, just this week the CFPB filed a notice with the D.C. Circuit attaching a Department of Justice (DOJ) Office of Legal Counsel (OLC) opinion which concluded that the Bureau will only be legally funded through December 31, potentially affecting rulemaking and operations timelines.

The Consumer Financial Protection Bureau (CFPB or Bureau) has proposed an unprecedented, far‑reaching rewrite of Regulation B (Reg B) under the Equal Credit Opportunity Act (ECOA). If finalized, the proposed rule would eliminate disparate‑impact liability under ECOA, significantly narrow the scope of “discouragement” to focus on explicit statements directed at applicants or prospective applicants, and prohibit or tightly restrict the use of certain protected‑class criteria in Special Purpose Credit Programs (SPCPs) offered by for‑profit organizations. Existing SPCP‑originated credit would be grandfathered.

Comments are due 30 days after publication in the Federal Register, with a proposed effective date 90 days after publication.

On October 2, the Consumer Financial Protection Bureau (CFPB or Bureau) published a final rule in the Federal Register, officially extending compliance dates for its 2023 small business lending data collection and reporting rule under the Equal Credit Opportunity Act (ECOA) and Regulation B, which implements Section 1071 of the Dodd-Frank Act. The final rule replaces an interim rule released in June 2025 that pushed back compliance deadlines. This extension was issued by the CFPB in response to ongoing litigation by both industry and consumer advocacy groups, as well as court orders, to create a uniform timeline for financial institutions to comply with data collection and reporting requirements for women-owned, minority-owned, and small businesses.