You were told to wait. The data was coming. Section 1071 of the Dodd-Frank Act was finally going to force lenders to report who they approved, who they denied, and why — broken out by gender, race, and ethnicity. For the first time, the lending discrimination that women business owners experience as individual bad luck would become visible as a systemic pattern.
That rule existed. It was finalized in 2023. And on May 1, 2026, the CFPB gutted it.
The agency calls it a “recalibration.” The final rule announcement uses words like “streamlined” and “reduced burden.” What it actually does is remove roughly 85% of lenders from the reporting requirement, eliminate the pricing data that would reveal rate discrimination, narrow the definition of “small business” so that growth-stage companies disappear from the dataset, and push compliance out to 2028 with a grace period that means no penalties until 2029.
The lenders who still have to report? Large commercial institutions with existing compliance infrastructure and — this is the part that should make you angry — the lowest documented discrimination rates in the system.
The Rule You Were Told Would Change Everything — Just Got Smaller
The original 2023 rule was built on a simple premise: you cannot fix what you cannot see. HMDA data transformed mortgage lending oversight because it made denial patterns visible by race and gender. Section 1071 was supposed to do the same thing for small business lending — the last major credit market with no demographic reporting requirement.
Under the 2023 rule, any lender originating 100 or more small business loans per year would report demographic data on every application. That threshold was set deliberately low. It captured community banks. It captured credit unions. It captured the CDFI down the street and the regional lender your accountant recommended. It captured the institutions where lending decisions are made by people who know your name — and where bias operates most freely because discretion is highest.
The May 2026 revision rewrites all of it. The stated reason is reducing compliance burden on smaller institutions. The Schneider Downs analysis calls it “significant relief for smaller lenders.” Relief for whom, exactly? Not for the woman sitting across the desk from a loan officer who just offered her a rate 200 basis points above what the man before her got. She doesn’t get relief. She gets invisibility.
What Changed: Four Provisions That Narrow the Aperture
The revision isn’t a tweak. It’s a structural redesign of what gets measured. Four changes matter, and each one removes a different piece of the picture.
1. Origination threshold: 100 to 1,000
Under the 2023 rule, a lender making 100 small business loans per year reported demographic data. Under the revision, the threshold is 1,000. A mid-size community bank originating 500 small business loans annually — exactly the kind of institution where relationship lending dominates and discretionary pricing is standard — is now invisible. The Mayer Brown analysis puts the coverage drop bluntly: the number of reporting institutions falls from an estimated 7,000–8,000 to roughly 1,000–1,200.
That’s not a recalibration. That’s an 85% reduction in coverage.
2. Small business definition: $5M to $1M revenue
The 2023 rule defined a “small business” as any enterprise with gross annual revenue of $5 million or less. The revision drops that to $1 million. A woman running a $2.5M-revenue company who applies for a growth loan? Her application doesn’t generate a reportable data point. She doesn’t exist in the dataset.
3. Eliminated data fields
The 2023 rule required lenders to report pricing information — the actual rates and fees charged. That’s gone. So is worker count. So is application method. Under the revised rule, you’ll see whether a woman got the loan. You won’t see whether she paid more for it. Approval or denial, binary, with no context. The Arnold & Porter analysis flags the pricing elimination specifically as “a significant narrowing of the data available for fair lending analysis.”
Rate discrimination is the most common and most difficult-to-detect form of lending bias. Removing pricing data from a lending discrimination database is like removing blood pressure from a cardiovascular exam. You can still check the pulse, but you’ll miss the thing that’s actually killing the patient.
4. Compliance timeline: January 2028, grace period through December 2028
No lender has to collect data before January 1, 2028. First reports won’t arrive until 2029. And during 2028, errors carry no penalties. That’s the 18-month blackout turned into a three-year blackout — from the May 2026 revision to the first usable data in 2029.
Three years. If you’re applying for a loan this quarter, this rule does nothing for you. If you’re applying next year, it does nothing for you. If you’re applying in 2028, the lender might be collecting data but faces no consequences for doing it wrong.
Why the Threshold Matters More Than the Headline
The number — 100 versus 1,000 — sounds like a policy detail. It isn’t. It determines whether the rule sees the institutions where discrimination actually happens.
At 100 originations, reporting captures community banks, credit unions, CDFIs, and regional lenders. These are the institutions where:
- Loan officers exercise the most discretion over rates and terms
- Relationship dynamics shape who gets encouraged to apply and who gets steered away
- Women face the widest denial-rate gaps relative to equivalent male applicants
- The discouragement tax — the 37% of women who never apply because they expect rejection — operates most powerfully
At 1,000 originations, reporting captures large commercial lenders: the JPMorgans, the Wells Fargos, the national banks with algorithmic underwriting and compliance departments that already track this data internally. These institutions have problems of their own. But their lending decisions are more standardized, less discretionary, and — critically — already more visible to regulators through existing examination processes.
The data that would have revealed community-level discrimination patterns is precisely the data the revised rule no longer collects. This is the 1,000-origination blind spot in practice: the threshold isn’t a line drawn for administrative convenience. It’s a line drawn exactly where the evidence would start getting uncomfortable.
The Revenue Cap: Who Disappears at $1 Million
The $5M-to-$1M revenue cap change sounds technical. It is devastatingly practical.
Women-owned businesses with revenue between $1M and $5M are in the growth stage — the exact inflection point where access to capital determines whether the business scales or stalls. This is the cohort where lending decisions have the highest leverage on business trajectory. A $3M-revenue company seeking a $500K equipment loan to take on larger contracts is making the kind of capital decision that separates a lifestyle business from an enterprise.
Under the 2023 rule, that application would generate a reportable data point. Under the revision, it does not. The business is too big to be “small” under the new definition.
This is also the cohort where the funding gap data is most damning. The discouragement rate — 37% of women who need capital but don’t apply because they believe they’ll be denied — is documented most heavily in businesses between $500K and $5M in revenue. Women in this range who do apply face higher denial rates at equivalent creditworthiness. They receive less capital than requested at higher rates than comparable male applicants.
All of that data exists from surveys and academic studies. What Section 1071 was supposed to do was make it visible in the lending data itself — not as a research finding, but as a compliance metric that regulators could act on. The revised revenue cap ensures it won’t be.
What This Means for You — Concretely
Strip away the policy language. Here’s what the May 2026 revision means if you’re a woman business owner seeking capital right now.
If you bank with a community lender making fewer than 1,000 small business loans per year: Your lending experience will not be tracked under Section 1071. Your denial, your approval, your rate — none of it generates a data point. If you experience discrimination, it won’t appear in any systemic dataset.
If your business generates more than $1M in annual revenue: Your loan application is not a “small business” application under the revised rule. You’re invisible to the reporting framework entirely, regardless of your lender’s size.
If you want to know whether you paid a higher rate than a male applicant with the same profile: The revised rule doesn’t collect that data. Even from the lenders that do report, you’ll see approval or denial. You won’t see pricing.
If you’re waiting for the data to arrive: First reports come in 2029. With a grace period that means no penalties for errors in year one. Usable, reliable data — the kind you could actually cite in a complaint — is a 2030 reality at earliest.
The Three Things That Still Work
The rule got smaller. It didn’t disappear. And it’s not the only tool in the system. Here’s what still works and what to do with it.
1. Use lenders above the threshold — and tell them why
Section 1071 still requires core demographic data collection from lenders originating 1,000 or more small business loans per year. If you have a choice of lender, choosing one above the threshold means your lending experience gets tracked. It’s a small act, but it contributes to the only systemic dataset that will exist.
When you’re negotiating loan terms, ask the lender directly: “Are you a Section 1071 reporting institution?” If they don’t know what you’re talking about, that tells you something too.
2. ECOA protections haven’t changed
The Equal Credit Opportunity Act still requires lenders to provide a written explanation of adverse action within 30 days. If you’re denied a loan, turned down for a line of credit increase, or offered terms substantially worse than what you applied for, you have a legal right to a written statement explaining why.
This matters more now, not less. Without systemic Section 1071 data from community lenders, individual documentation becomes the primary evidence trail. Request the written explanation. Keep it. If the reasons don’t match your financial profile, that’s the basis for a CFPB complaint or a fair lending claim.
Three steps to create your own paper trail:
- Request written denial explanations for every adverse lending decision. Don’t accept verbal explanations. ECOA entitles you to writing.
- File CFPB complaints at consumerfinance.gov for any lending interaction that felt discriminatory. Complaint data is public and searchable. Even without Section 1071 reporting, complaint patterns create regulatory attention.
- Document your own lending experience — the rate you were quoted, the terms offered, the questions asked, the timeline. If you discover later that a comparable male applicant received better terms from the same institution, your documentation is evidence.
3. Watch your state
State-level fair lending laws may fill some of the gap the federal revision created. Several states — California, New York, Illinois, Colorado, and others — have their own fair lending reporting requirements or are considering them. Check your state attorney general’s office for current reporting obligations.
State AG offices also have independent enforcement authority under state consumer protection statutes. A pattern of discriminatory lending documented through individual complaints can trigger a state investigation even without federal Section 1071 data.
The Bottom Line
The 2023 Section 1071 rule would have made lending discrimination against women business owners visible at scale for the first time. The May 2026 revision keeps the name and drops the scope. The lenders where discrimination is highest don’t have to report. The pricing data that would reveal rate bias won’t be collected. The businesses in the growth stage where capital access matters most are defined out of the dataset. And none of it starts until 2028.
You were told to wait for the data. The data just got 85% smaller.
Don’t wait. Document everything. Use lenders above the 1,000-origination threshold. Exercise your ECOA rights on paper, not verbally. File complaints that create a public record. And when someone tells you the system is fixing itself — ask them to show you the data.
They can’t. That’s the point.
HerCapital is an independent publication. All analysis is editorial. All franchise trademarks referenced on this site belong to their respective owners. HerCapital is not affiliated with, endorsed by, or sponsored by any franchisor, lender, or financial institution mentioned in our coverage.