Section 1033

CFPB Section 1033 - Personal Financial Data Rights

UpcomingOpen BankingNorth America

The CFPB's Section 1033 rule was finalized in October 2024 to give consumers the right to access and share their financial data through secure interfaces. As of 2026 the rule is not in force: a federal court has enjoined the CFPB from enforcing it, and the CFPB has reopened the rule for substantial revision — including whether data providers may charge fees for access. The compliance deadlines below are technically still on the books but have been effectively suspended pending that reconsideration.

🌍
Jurisdiction
United States
📅
Effective Date
2025
Apr 1, 2025
Full Compliance
2030
Apr 1, 2030
🏛️
Regulator
Consumer Financial Protection Bureau

Overview

The CFPB's Section 1033 rule was finalized in October 2024 to give consumers the right to access and share their financial data through secure interfaces. As of 2026 the rule is not in force: a federal court has enjoined the CFPB from enforcing it, and the CFPB has reopened the rule for substantial revision — including whether data providers may charge fees for access. The compliance deadlines below are technically still on the books but have been effectively suspended pending that reconsideration. Treat US open banking as in transition, not settled.

Scope & Coverage

Deposit AccountsCredit CardsPayment Facilitation

Key Requirements

1
Developer interface (API) requirements
2
Authorization procedures
3
Data security standards
4
Third-party obligations
5
No-fee access to consumer data (under the 2024 rule — now reopened for reconsideration)

Implementation Timeline

Jul 21, 2010
Dodd-Frank Act in effect with Section 1033 data portability provisions
Oct 1, 2020
CFPB issued an ANPR / began rule-making related to Section 1033
Oct 19, 2023
CFPB proposed the Personal Financial Data Rights rule
Oct 22, 2024
Personal Financial Data Rights (Section 1033) final rule published
Jan 8, 2025
CFPB recognized Financial Data Exchange (FDX) as the first 1033 standard-setting body (through Jan 2030)
Jan 17, 2025
Final rule's effective date
May 23, 2025
CFPB tells E.D. Kentucky court it now views the rule as unlawful and should be set aside (with bank plaintiffs seeking vacatur)
Jul 29, 2025
Litigation stayed; CFPB announces it will reconsider and substantially revise the rule
Aug 22, 2025
CFPB publishes reconsideration ANPR — reopens fees, eligible third parties, security and privacy
Oct 29, 2025
E.D. Kentucky court issues a preliminary injunction barring the CFPB from enforcing the rule during reconsideration
Apr 1, 2026
Original Tier 1 deadline (>$250B depositories; ≥$10B nondepositories) — suspended pending reconsideration
Apr 1, 2027
Original Tier 2 deadline: $10B-$250B depositories (under reconsideration)
Apr 1, 2028
Original Tier 3 deadline: $3B-$10B depositories (under reconsideration)
Apr 1, 2029
Original Tier 4 deadline: $1.5B-$3B depositories (under reconsideration)
Apr 1, 2030
Original Tier 5 deadline: $850M-$1.5B depositories (under reconsideration)

API Specifications

Technical standards and API specifications for implementing Section 1033:

Official Documents & Resources

Key Notes

Status as of mid-2026: ENJOINED AND UNDER RECONSIDERATION. Final rule issued Oct 2024; effective Jan 2025; CFPB moved to set it aside (May 2025), paused litigation to start a new rulemaking (Jul 2025), issued a reconsideration ANPR reopening the fee question (Aug 2025), and a federal court issued a preliminary injunction against enforcement (~Oct 2025). The phased April-1 compliance deadlines are suspended in practice. See the Section 1033 status tracker guide for the maintained timeline and sources.

Official Resources

Related Regulations

Other open banking frameworks in North America:

Need to comply with Section 1033?

Explore API aggregators that support United States compliance.

Want to integrate Accounting & ERP data?

Connect to 30+ accounting platforms and ERPs through a single unified API with Apideck.