CFPB Section 1071 Final Rule: Merchant Cash Advances Are Officially Exempt — What This Means for Brokers and Funders

The Biggest Regulatory Win the MCA Industry Has Seen in Years

On May 1, 2026, the Consumer Financial Protection Bureau published its final revised rule under Section 1071 of the Dodd-Frank Act — the small business lending data collection mandate that had loomed over the merchant cash advance industry for more than two years. The headline for every MCA funder and broker reading the rule: merchant cash advances are not covered. No MCA provider will be required to collect and report Section 1071 data. MCAs are not credit transactions, and the CFPB has now said so explicitly in a binding federal rulemaking.

This is not a technicality or a regulatory gray area. It is a confirmed, final exemption that removes one of the most significant compliance burdens the industry had anticipated. To understand why this matters — and what it does and does not change — it helps to understand what Section 1071 was designed to do and why MCA funders spent years fighting it.

What Section 1071 Is and Where It Came From

Section 1071 of the Dodd-Frank Wall Street Reform and Consumer Protection Act was enacted in 2010 but sat dormant for over a decade. Its statutory mandate was straightforward: require financial institutions that make small business loans to collect and report data about loan applicants, including the race, sex, and ethnicity of small business owners, as well as loan amount, pricing, approval rates, and business type. The goal was to identify discriminatory lending patterns and measure access to credit for women-owned and minority-owned businesses.

The CFPB finally issued a final rule implementing Section 1071 in March 2023. The original rule was sweeping in scope. It defined covered credit transactions broadly to include loans, lines of credit, credit cards — and crucially, the bureau initially took the position that merchant cash advances and other revenue-based products could be covered as well, depending on their specific structure.

For MCA funders, that prospect triggered a serious compliance concern. Section 1071 would have required covered institutions to collect personal demographic data from small business applicants, maintain records for years, and submit detailed reports to the CFPB. The infrastructure costs — new intake forms, data systems, staff training, legal review — would have been substantial, particularly for smaller independent funders and ISO operations that lack dedicated compliance departments.

Why the MCA Industry Was in the Fight

MCA products are structured as purchases of future receivables, not loans. A funder buys a specified dollar amount of a merchant's future sales at a discount. There is no stated interest rate, no fixed repayment term, and no debt obligation in the traditional sense. Courts and regulators have repeatedly recognized this distinction — it is the same legal structure that exempts MCAs from state usury caps and the federal Truth in Lending Act.

The question under Section 1071 was whether a cash advance that functions economically like financing but is structured as a receivables purchase constitutes a credit transaction for purposes of the statute. The MCA industry argued firmly that it does not. The CFPB under its 2023 rule signaled that it might disagree.

The Revenue Based Finance Coalition — an industry group representing MCA funders, ISO networks, and revenue-based finance providers — filed suit challenging the rule and made MCA exclusion its central objective. The RBFC argued that subjecting MCAs to Section 1071 was legally unsupportable given the product's structure and practically unworkable given how MCA underwriting and applications differ from conventional loan applications.

The Long Road to Reversal

The 2023 rule faced immediate legal challenges on multiple fronts, with both bank trade groups and the RBFC pursuing litigation. In 2025, a federal district court in Florida entered a ruling that gave the CFPB's 1071 rule a path forward — but the broader regulatory environment was shifting.

In November 2025, the CFPB made a significant move: it issued a proposed rule that, among other changes, would explicitly remove merchant cash advances from Section 1071 coverage. The bureau stated plainly that MCAs are purchases of future receivables and not credit transactions covered by the Equal Credit Opportunity Act — the statutory hook for Section 1071. The industry took notice. For the first time, the regulatory agency itself was articulating the legal theory the MCA industry had been arguing for years.

The comment period closed, and the CFPB published the final rule on May 1, 2026. The exemption for MCAs was preserved exactly as proposed. No MCA funder is a covered institution under the rule. No MCA provider must collect applicant demographic data, report to the CFPB, or redesign its application process to accommodate Section 1071 requirements.

What the Final Rule Does Require — For Others

Understanding what the rule requires for covered lenders gives context for what MCA funders narrowly avoided. The final rule takes a single-tier approach: any financial institution that originates 1,000 or more covered credit transactions in each of the two preceding calendar years is a covered institution. The threshold years are 2026 and 2027, with full compliance required by January 1, 2028.

Covered institutions — banks, credit unions, CDFIs, and non-bank lenders making conventional small business loans — must collect and report data including:

• Application date and loan purpose
• Credit type and amount requested and approved
• Action taken and date of action
• Census tract of the principal business address
• NAICS industry code
• Annual revenue of the applicant business
• Number of workers
• Time in business
• Demographic information about the principal owners (race, sex, ethnicity) — collected on a voluntary basis from applicants
• Pricing information

This is extensive data infrastructure. Banks have compliance teams built for exactly this kind of regulatory reporting. For a typical MCA funder — a privately held company running a proprietary underwriting platform and funding hundreds of deals a month — building that infrastructure from scratch would have been a meaningful cost and operational burden.

The final exemption means MCA funders do not need to build any of it.

What This Means for MCA Funders

The practical implications for funders are direct and significant.

No new application fields required. Your intake forms do not need to include demographic collection checkboxes, principal owner race or ethnicity questions, or any of the data elements Section 1071 required of covered lenders. The MCA application process remains exactly as funders have designed it for underwriting purposes.

No CFPB data reporting obligation. Section 1071 required covered institutions to submit annual data files to the CFPB, which the bureau would then publish. MCA funders are not covered institutions under the final rule and have no submission requirement.

No record retention burden from the rule. While funders should maintain records for their own legal protection and state law compliance, the specific multi-year retention requirements tied to Section 1071 reporting do not apply.

No compliance deadline pressure. The January 1, 2028 compliance date that covered lenders are now planning toward is simply not relevant to the MCA industry.

For funders who had been monitoring the situation and holding off on compliance infrastructure decisions pending the final rule, the answer is clear: stand down on Section 1071 specifically. The compliance spend that had been on the horizon for this issue is no longer necessary.

What This Means for MCA Brokers

Brokers benefit from the exemption indirectly but meaningfully.

If funders had become subject to Section 1071, they would almost certainly have flowed compliance requirements downstream to their ISO and broker partners. Funders would have needed brokers to collect demographic information from merchants at application, to include specific disclosures about data collection, and to certify that intake procedures met federal standards. That would have added friction to deal flow, increased documentation requirements, and potentially raised concerns among merchants unfamiliar with why their MCA application was asking about race and ethnicity.

None of that happens now. Brokers can continue working their funder panels without taking on Section 1071-driven compliance obligations. Deal submission stays as efficient as funders have built it.

There is also an indirect business development angle. The Section 1071 compliance burden for banks and credit unions — which are covered institutions — may cause some lenders to tighten credit further to stay under the 1,000-origination threshold or to avoid the operational overhead of data collection. Small businesses that get slowed down or turned away by bank lenders navigating 1071 compliance may turn to MCA brokers as an alternative. The exemption, in other words, could drive more deal flow to the MCA channel as banks manage their own compliance obligations.

What the Exemption Does Not Change

The Section 1071 exemption is a significant win, but brokers and funders should not interpret it as a green light to relax compliance efforts across the board. State-level regulation of the MCA industry continues to expand, and several areas still require active attention.

California SB 362. California's enhanced APR re-disclosure requirements for commercial financing transactions under $500,000 took effect January 1, 2026. Every broker submitting deals for California merchants must re-disclose APR whenever deal pricing is discussed during the application process. This obligation is entirely separate from Section 1071 and is unaffected by the CFPB's final rule.

Texas HB 700. Texas enacted disclosure and authorization requirements for MCA automatic debits that took effect in late 2025. Funders serving Texas merchants need to ensure their ACH authorization practices comply with the state law, including individual transaction authorization approaches where appropriate.

New York, Utah, Virginia, and Connecticut. These states have their own commercial financing disclosure laws requiring standardized cost disclosures, estimated APR, and total repayment disclosures before closing. These requirements remain in force.

FTC and state AG enforcement. The Federal Trade Commission and state attorneys general continue to scrutinize MCA collections practices, confession of judgment use, and merchant treatment in default situations. Regulatory exemption at the CFPB level does not limit those enforcement channels.

The landscape is not deregulated — it has simply become clearer at the federal level. The state patchwork is still active and expanding.

Why the RBFC Victory Matters Beyond Compliance

The RBFC's success in achieving the Section 1071 exemption matters beyond the immediate compliance relief for a structural reason: it establishes on the federal record that merchant cash advances are purchases of future receivables, not credit transactions, and that the CFPB accepts this characterization.

This is not just a bookkeeping point. The credit-versus-purchase distinction underlies the MCA industry's exemptions from usury caps, TILA disclosures, and other consumer and commercial lending frameworks. Every time a regulator or court affirms that distinction explicitly, it strengthens the legal foundation for the product structure. The CFPB's acknowledgment in a formal rulemaking — not just informal guidance, but a final rule published in the Federal Register — carries real weight if the question comes up again in another context.

The RBFC and the broader industry should treat this as a validation of years of legal and regulatory advocacy, and also as a reminder that active engagement in rulemaking processes produces outcomes. The original 2023 rule would have included MCAs. Industry comment, litigation, and continued engagement changed that outcome.

What to Watch Going Forward

The final rule is effective June 30, 2026, with a compliance date of January 1, 2028 for covered institutions. As banks and other covered lenders begin building out their Section 1071 data collection infrastructure, a few dynamics are worth monitoring.

Whether the data reveals access gaps that prompt new MCA-specific proposals. Section 1071 data, once published, will show lending patterns by geography, business type, and owner demographics. If the data reveals significant credit gaps in markets where MCA is a primary source of small business financing, regulators may revisit the MCA exemption in a future rulemaking. The current exemption is based on product structure, but political pressure based on access-to-credit data could be a future pressure point.

New state disclosure laws. Illinois and New Jersey enacted MCA disclosure requirements in 2026, joining California, New York, Utah, Virginia, Georgia, and Connecticut. The majority of high-volume MCA markets now have some form of disclosure law. Brokers should audit their compliance coverage by state at least annually.

RBFC and industry positioning. With the Section 1071 fight resolved favorably, industry attention will likely shift to other regulatory priorities — ACH authorization rules, state disclosure harmonization efforts, and potential federal action on confession of judgment use. Staying connected to industry association developments keeps brokers and funders ahead of the next compliance curve.

Practical Takeaway

The CFPB's May 2026 final rule is unambiguous: merchant cash advances are not credit transactions under the Equal Credit Opportunity Act, and no MCA funder or broker has any obligation under Section 1071's small business lending data collection framework. That fight is over, and the industry won it through organized legal and regulatory advocacy.

What this exemption does not do is simplify the state compliance picture, reduce the importance of sound underwriting and collection practices, or eliminate the need for brokers to stay current on disclosure requirements in the states where their merchants operate. The MCA industry's regulatory environment is more defined at the federal level than it was two years ago — but it is no less complex at the state level.

Use the clarity the final rule provides to focus compliance resources on the obligations that are real and present: California re-disclosures, Texas ACH authorization, and the expanding set of state disclosure laws that govern how MCA deals are presented and closed. That is where compliance attention and investment belong in 2026 and beyond.