A joint resolution providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Bureau of Consumer Financial Protection relating to the withdrawal of the rule relating to "Consumer Financial Protection Circular 2022-04: Insufficient Data Protection or Security for Sensitive Consumer Information".
Summary
S.J. Res. 164 is a congressional disapproval resolution under the Congressional Review Act. It would overturn a Bureau of Consumer Financial Protection rule that withdrew CFPB Circular 2022-04, which had addressed insufficient data protection or security for sensitive consumer information. If enacted, the resolution would nullify the withdrawal rule and leave the underlying CFPB circular in effect, restoring the agency’s prior position on consumer data security expectations.
The measure is narrowly focused on a single administrative action by the CFPB and does not itself create a new substantive consumer protection standard. Instead, it uses Congress’s CRA authority to block the agency’s withdrawal of an existing guidance/circular related to safeguarding sensitive consumer information. The bill was introduced in the Senate and referred to the Committee on Banking, Housing, and Urban Affairs.
Impact
The resolution would affect federal administrative law by voiding the CFPB’s May 12, 2025 rule withdrawing Circular 2022-04, thereby preserving the earlier circular’s guidance on data protection and security for sensitive consumer information. Its practical impact would be on financial institutions and other entities subject to CFPB oversight, which would continue to face the agency’s stated expectations regarding consumer data safeguards. It would not amend state statutes, but it could influence compliance practices and enforcement standards in consumer finance.
Sentiment
No committee transcript or vote record is provided, so there is no recorded debate or roll-call sentiment in the available materials. Based on the bill’s text, the resolution appears to reflect support for maintaining stronger consumer data security guidance and skepticism toward the CFPB’s decision to withdraw it. The overall posture is procedural and regulatory rather than partisan in the text itself.
Contention
The likely point of contention is whether the CFPB should retain or withdraw its guidance on insufficient data protection for sensitive consumer information. Supporters of the resolution would favor preserving the circular as a consumer protection measure, while opponents may view the withdrawal as appropriate agency discretion or argue that the circular imposes unnecessary compliance burdens. Because no hearing transcript or vote history is available, the specific positions of members or stakeholders are not documented in the provided record.