Collections news at your fingertips

On November 5, 2025, a national debt collection trade group and one of its members filed a lawsuit against the state of Colorado’s in an attempt to block its 2023 medical debt credit reporting law, HB 23-1126. The complaint alleges that the law, which bars adverse medical debt information from consumer credit reports and restricts related collection communications, is preempted by the Fair Credit Reporting Act and violates the First Amendment.

Data breaches occur when an unauthorized individual or entity gains access to confidential or protected information.^[1] This information may include personal data such as Social Security numbers or medical records, financial information, intellectual property, or login credentials.^[2] These data breaches may be the result of cyberattacks, insider threats, or even simple human errors.^[3] Common causes may include phishing attacks, malware or ransomware, weak or stolen passwords, misconfigured cloud storage, insider negligence, or simply malicious intent.

The Consumer Financial Protection Bureau (CFPB or Bureau) has issued a new proposed rule that would substantially revise the 2023 small business lending data collection and reporting rule under the Equal Credit Opportunity Act (ECOA) and Regulation B, which implements Section 1071 of the Dodd-Frank Act.

The Consumer Financial Protection Bureau (CFPB or Bureau) has proposed an unprecedented, far‑reaching rewrite of Regulation B (Reg B) under the Equal Credit Opportunity Act (ECOA). If finalized, the proposed rule would eliminate disparate‑impact liability under ECOA, significantly narrow the scope of “discouragement” to focus on explicit statements directed at applicants or prospective applicants, and prohibit or tightly restrict the use of certain protected‑class criteria in Special Purpose Credit Programs (SPCPs) offered by for‑profit organizations. Existing SPCP‑originated credit would be grandfathered.

Not all online agreements are created equal, especially when it comes to enforceable arbitration clauses. In Valiente v. NexGen Global, LLC, 2025 WL 3140480 (11th Cir. Nov. 10, 2025), the Eleventh Circuit upheld the district court’s decision to decline enforcement of an arbitration clause contained within NexGen’s website terms and conditions, leaving it open to a potentially costly Telephone Consumer Protection Act (TCPA) and Florida Telephone Solicitation Act (FTSA) class action in federal court.