A Reporting Rule Lands June 30. Most Lenders Have Not Checked Whether It Touches Them.
The revised Section 1071 rule raised the coverage threshold tenfold, and answering whether you are now covered depends entirely on origination data most lenders cannot pull cleanly.
On June 30, 2026, the revised Section 1071 small business lending data collection rule takes effect. Most non-bank lenders have filed it under “deal with it in 2028” and moved on, which is the wrong read.
The rule moved the line by a factor of ten
The revised rule, finalized by the Consumer Financial Protection Bureau and effective June 30, raised the origination threshold for a covered financial institution from 100 to 1,000 covered small business credit transactions in each of two consecutive calendar years. That single change redraws the map. Lenders who spent two years building toward compliance under the 100-loan threshold may now sit outside the rule. Others who assumed they were too small to matter may be inside it. The compliance date for actual data collection is January 1, 2028, with a grace period running through the end of that year, so the deadline reads as distant. The problem is not the deadline. The problem is that you cannot tell which side of the line you are on without data you may not have in usable form.
The question you cannot answer in an afternoon
“Are we covered” sounds like a yes or no a compliance officer settles before lunch. It is not. The test is volume-based and backward-looking: you need your count of covered small business originations, by product, for each of the two preceding calendar years, measured against the 1,000-transaction line. Advisory analyses of the final rule have flagged that many institutions assumed their status without validating it against actual origination data, because pulling that number cleanly is harder than it sounds. Originations live across a loan origination system, a CRM, a servicing platform, and in more than a few shops, a spreadsheet a senior analyst maintains by hand. Merchant cash advances were explicitly excluded from coverage, so a lender running both MCA and term products has to separate the two correctly before the count means anything. Get the segmentation wrong and you either stand up a reporting program you never needed or skip one you did.
This is a data problem wearing a legal costume
The instinct is to route 1071 to counsel and wait. That treats a data-governance problem as a legal one. The legal interpretation is largely settled now that the rule is final. What is not settled, inside most lenders, is whether the operation can produce an accurate, product-level origination count on demand and reproduce it the same way next quarter. That capability is not a compliance nicety. The same fragmented data that makes the coverage question hard also distorts portfolio reporting, slows fair-lending self-checks, and forces month-end reconciliation to run on manual effort that scales with headcount. A lender that cannot answer “how many covered originations did we book last year, by product” on demand has a reporting infrastructure gap that 1071 merely exposes. The rule is a forcing function, not the underlying issue.
There is a second-order cost. The CFPB has been explicit that this is the first phase of an incremental, HMDA-style framework, with products, lenders, and data points likely to expand over time. A lender that solves coverage by hand this year repeats the manual reconstruction every time the scope moves. The work does not bank.
How CXO Solves This
This is where treating origination data as a governed asset, rather than a quarterly fire drill, changes the economics. CXO’s Reporting and Intelligence Automation and Data Intelligence and Analytics systems reconcile loan-level records continuously across the origination system, CRM, and servicing platform into a single governed dataset configured to each lender’s product definitions and compliance rules. The mechanism is direct: agents pull and validate every origination as it books, tag it by product, and keep a running, auditable count by calendar year. The coverage question stops being a reconstruction project and becomes a query. When the framework expands, as the CFPB has signaled it will, the count is already current and the segmentation already correct. The same governed dataset feeds portfolio reporting and fair-lending self-checks, so the work done for one obligation pays down several.
The lenders who will struggle in 2028 are not the ones who read the rule late. They are the ones who answer the coverage question by hand this year, get a number they cannot fully trust, and rebuild it from scratch every time the regime moves. The threshold changed by a factor of ten four days from now, and most operations still cannot produce the one number that decides whether it applies to them.
In most operations, far more work can be automated than leadership realizes. One discovery call is enough to size what automating it would return to your bottom line. Book it at https://cxocorporation.com/contact