Effective October 29, 2025, the CFPB finalized its rule, published at 90 Fed. Reg. 48737-60, rescinding certain amendments to the rules made on February 22, 2022 (prior blog) and on March 29, 2023 (prior blog) (collectively, the 2022 and 2023 amendments).
As collection teams face tighter staffing and increasingly complex borrower situations, optimizing how accounts are managed has become a strategic priority. Recovery today isn't just about maximizing call attempts—it's about deploying skilled agents where they add the most value.
On November 5, 2025, a national debt collection trade group and one of its members filed a lawsuit against the state of Colorado’s in an attempt to block its 2023 medical debt credit reporting law, HB 23-1126. The complaint alleges that the law, which bars adverse medical debt information from consumer credit reports and restricts related collection communications, is preempted by the Fair Credit Reporting Act and violates the First Amendment.
Data breaches occur when an unauthorized individual or entity gains access to confidential or protected information.[1] This information may include personal data such as Social Security numbers or medical records, financial information, intellectual property, or login credentials.[2] These data breaches may be the result of cyberattacks, insider threats, or even simple human errors.[3] Common causes may include phishing attacks, malware or ransomware, weak or stolen passwords, misconfigured cloud storage, insider negligence, or simply malicious intent.
The Consumer Financial Protection Bureau (CFPB or Bureau) has issued a new proposed rule that would substantially revise the 2023 small business lending data collection and reporting rule under the Equal Credit Opportunity Act (ECOA) and Regulation B, which implements Section 1071 of the Dodd-Frank Act.