The Consumer Financial Protection Bureau's non-bank enforcement registry has reached its first major operational milestone, with larger participants and CFPB-supervised covered non-banks required to complete registration by 14 January 2025. The registry, finalised during 2024 as part of the bureau's strategy to extend its supervisory reach more systematically across the non-bank financial sector, requires qualifying firms to disclose any government or court orders issued against them since 1 January 2017. The rule represents a significant structural expansion of the CFPB's monitoring infrastructure beyond the bank and credit union populations it has historically supervised most intensively.
The rule applies to non-bank entities directly supervised by the CFPB, including those designated as larger participants in consumer financial markets such as consumer reporting, student loan servicing, auto loan origination, and money transmission. By mandating the collection and centralised publication of enforcement orders in a single, publicly accessible registry, the bureau aims to create a more transparent record of regulatory actions and legal obligations across a sector that has grown considerably in size and systemic importance since the CFPB was established in 2010.
SCOPE OF MANDATORY DISCLOSURE OBLIGATIONS
Covered non-banks must register any final government agency orders, consent orders, injunctions, and court judgments that impose ongoing obligations on the firm in connection with the provision of a consumer financial product or service. The look-back period extending to 1 January 2017 means that firms with legacy enforcement histories are required to surface actions that may predate their current senior leadership teams, ownership structures, or compliance programmes. For firms that have undergone acquisitions, restructurings, or management changes since 2017, this obligation requires a comprehensive review of inherited regulatory histories and any successor liability that may have attached through corporate transactions.
A further requirement places individual accountability at the centre of the compliance submission. At the point of registration, a written attestation must be executed by a senior executive certifying that the firm is in compliance, or accurately describing the steps being taken to achieve compliance, with the relevant orders on file with the registry. This attestation mechanism elevates the registry from a passive disclosure tool to an active compliance governance instrument, creating personal accountability for named officers and increasing the cost of non-compliance or misrepresentation.
BROADER IMPLICATIONS FOR NON-BANK FINANCIAL SUPERVISION
The registry represents a structural shift in the way the CFPB monitors the non-bank sector between formal examination cycles. By requiring public disclosure of enforcement orders and executive attestations, the bureau creates ongoing reputational and legal accountability for firms that might otherwise treat legacy regulatory actions as fully resolved historical matters. Compliance and legal teams at affected institutions have been advised by counsel to conduct comprehensive historical reviews of regulatory engagement since 2017 to ensure complete and accurate initial submissions, as errors or omissions in the registry could themselves constitute grounds for further enforcement action.
Consumer advocacy groups have broadly welcomed the registry as a mechanism that enables private litigants, state attorneys general, and independent researchers to identify patterns of non-compliance across the non-bank financial industry and to assess whether firms are living up to prior commitments made in consent orders. The January deadline applies to the largest supervised entities, and additional phases of the rule are expected to bring further categories of covered non-banks into the registration requirement in the months that follow, progressively extending the registry's coverage across the broader sector.