CFPB Rescinds State Notification Rule: A Financial Firms Guide

The Consumer Financial Protection Bureau has rescinded the procedures that required a State official to notify the Bureau when taking an action to enforce the Consumer Financial Protection Act. Published as 90 FR 21691 on May 21, 2025, the rule is effective July 21, 2025. For financial services firms that operate under concurrent state and federal oversight, this is a change to a notification channel between regulators — not a new rule aimed at firms directly — and reading it correctly starts with being precise about what was actually rescinded.

This guide explains, in plain English, what the rescission does, who it touches, what a financial services compliance team should take from it, and how a firm keeps up with a change like this one alongside everything else moving through the Federal Register. It leads with the rule and the dates, not with any product, and it sticks to what the rule itself says.

Key Takeaways

• A CFPB direct final rule, 90 FR 21691, rescinds the procedures by which a State official must notify the Bureau when the official takes an action to enforce the Consumer Financial Protection Act; it is effective July 21, 2025.

• The rule revises 12 CFR Part 1082 and carries RIN 3170-AB43.

• It was published May 21, 2025, and, as a direct final rule, its effectiveness turned on whether the Bureau received significant adverse comments by June 20, 2025.

• The rescission is narrow: it removes a notification procedure between State officials and the Bureau. On its own text, it does not add a new obligation for financial services firms.

• This post is informational only and is not legal or tax advice; consult a qualified attorney or tax advisor before acting on any specific situation.

What this rule actually does

90 FR 21691 is a direct final rule that rescinds the Consumer Financial Protection Bureau's procedures by which a State official must notify the Bureau when the official takes an action to enforce the Consumer Financial Protection Act. Read carefully, the operative word is procedures: the rule removes the process the Bureau had set out for how a State official's notice reaches the Bureau. It is not, on its own text, a rule about what financial services firms themselves must do. That distinction matters for anyone skimming the rule's title before reading the abstract: "rescission" here describes removing a Bureau-side notification process, not repealing a substantive consumer-protection standard that a financial firm must follow.

The Bureau used the direct final rule track for this rescission, which is why the same rulemaking carries a publication date, a comment deadline, and an effective date rather than a single date. As published, 90 FR 21691 states that the rule is effective July 21, 2025, unless significant adverse comments were received by June 20, 2025. That structure is typical of rules an agency treats as procedural or non-controversial: the change proceeds on schedule while still leaving a defined window for objection before it locks in. The rule itself was published May 21, 2025.

The rescinded procedures live in 12 CFR Part 1082, and the rulemaking carries RIN 3170-AB43. A compliance team that keeps an internal reference to Part 1082 — in a regulatory-tracking matrix, an enforcement-response playbook, or an outside-counsel memo — should update that reference now that the rescission is effective, rather than continue to point to a procedure the Bureau no longer maintains.

The table above restates only what 90 FR 21691 itself states; no figure here is estimated or added beyond the rule's own text.

Who is affected

The rule's direct addressee is the State official, not the financial firm. Under the Consumer Financial Protection Act, State attorneys general and state regulators can bring their own enforcement actions, and 12 CFR Part 1082 was the Bureau's procedure for how those officials notified the Bureau when they did. 90 FR 21691 rescinds that procedure, effective July 21, 2025.

Financial services firms are affected indirectly. A firm that is the subject of a State enforcement action under the CFPA was never the party the rescinded procedure obligated — but the procedure's existence was part of the backdrop against which firms and their counsel understood how State and federal enforcement activity might become visible to the Bureau. With the procedure rescinded under 90 FR 21691, that particular formal channel no longer operates. Firms that have historically relied on their own market intelligence and counsel, rather than on any Bureau-published notice, to learn about a State enforcement action will notice the least change; firms whose internal escalation process assumed the old procedure would surface such actions to the Bureau are the ones that should re-check that assumption.

What Financial Firms should do now that the rescission is in effect

The most important thing to take from this rescission is what it does not do: it does not change a financial firm's own obligations under the Consumer Financial Protection Act, and it does not touch a State official's underlying authority to bring a CFPA enforcement action. The rule requires nothing new of financial services firms directly — it rescinds a notification procedure that ran between State officials and the Bureau under 12 CFR Part 1082.

That said, a well-run compliance function treats a rescission like this one as a prompt to check its own records. A sensible response has three parts. First, confirm whether any internal policy, enforcement-response playbook, or outside-counsel memo references the 12 CFR Part 1082 notification procedure, and update it to reflect that the procedure was rescinded effective July 21, 2025. Second, do not assume a State enforcement action will generate a formal Bureau notice under the old procedure, and plan regulatory-relations and disclosure processes accordingly. Third, keep the rescission's citation, 90 FR 21691, and its RIN, 3170-AB43, on hand, since the Bureau may issue related guidance under the same rulemaking.

Individually, tracking one rescinded procedure is not hard. The harder problem is the one every compliance team eventually runs into: this is one rule among many moving through the Federal Register at any given time, and the work of noticing which ones apply, updating the right internal document, and routing the update to the right reviewer is a volume problem, not a one-time read. That is true whether a given change adds a burden or, as here, removes one — either way, the internal system of record has to reflect what is currently true, not what was true before the Federal Register entry was published.

Operationalizing the monitoring at volume

That's a monitoring problem, and monitoring at volume is where US Tech Automations fits: configured against the Federal Register feed, an automation layer can watch for new documents tied to a given RIN — 3170-AB43 in this case — or a given CFR part, flag a matching change so it reaches a named compliance reviewer instead of sitting unread in a shared inbox, extract the citation and effective date into a short internal summary, and push that summary into an existing ticketing or policy-review system so the flag, the summary, and the human sign-off all live in one place, the same pattern applying to any future correction or related guidance tied to 90 FR 21691; you can see how that kind of workflow is structured on the US Tech Automations agentic workflow platform, and the point for a rescission like this one is that the update to an internal Part 1082 reference gets made once, on schedule, rather than being rediscovered months later during an exam.

How this fits the broader regulatory window

This rescission does not exist in isolation. It is one of 259 U.S. federal rules sealed in our point-in-time index of rules published July 1, 2024 – July 5, 2026 by 10 agencies governing our covered industries. A single procedural rescission like 90 FR 21691 is easy to read on its own; the harder task is that financial services firms sit under many rules at once, from many agencies, each with its own citation, its own CFR part, and its own effective date. A rescission like this one is also easy to deprioritize precisely because it removes a step rather than adding one — which is exactly why it is worth a deliberate, one-time update to internal records instead of being left to attrit out of institutional memory.

The takeaway for a compliance leader is not about this one rescission specifically — it is that rules affecting the State/federal enforcement relationship change on an ongoing basis, and a firm that tracks only the rules it already knows about will eventually miss one that changed the ground underneath an existing process. Treating Federal Register and eCFR monitoring as a standing function, rather than a project that runs once, is what keeps a rescission like 90 FR 21691 a routine update made on schedule instead of a surprise found later during an exam.

Frequently asked questions

What does this CFPB rule actually rescind?

It rescinds the Consumer Financial Protection Bureau's procedures, set out at 12 CFR Part 1082, by which a State official must notify the Bureau when the official takes an action to enforce the Consumer Financial Protection Act. The rescission is published as 90 FR 21691.

When did the rescission take effect?

90 FR 21691 is effective July 21, 2025. The rule itself was published May 21, 2025.

Which CFR part does this rule affect, and what is the RIN?

The rule affects 12 CFR Part 1082 and carries RIN 3170-AB43.

Was there a comment period before this rule took effect?

Yes. As a direct final rule, 90 FR 21691 states that it is effective July 21, 2025, unless the Bureau received significant adverse comments by June 20, 2025.

Does this rescission change what financial firms must do under the Consumer Financial Protection Act?

No. The rule rescinds a notification procedure that ran between State officials and the Bureau under 12 CFR Part 1082; on its own text, it does not add or remove an obligation for financial services firms under the CFPA.

How can a compliance team keep up with rescissions like this one alongside everything else the CFPB and other agencies publish?

Many firms configure an automated workflow to monitor the Federal Register for documents tied to a specific RIN or CFR part and route matching changes to a compliance reviewer, so a rescission like 90 FR 21691 is caught and logged the same day it is confirmed rather than months later.

Related guidance

For related CFPB and financial-services compliance coverage, see our notes on the Equal Credit Opportunity Act, Regulation S-P, and the Truth in Lending Act adjustment.

For a closer look at how US Tech Automations prices this kind of ongoing regulatory-monitoring workflow, see our pricing page.

Disclaimer

This article is provided for informational purposes only and does not constitute legal or tax advice. Reading it does not create an attorney-client relationship. Regulatory requirements are fact-specific, and you should consult a qualified attorney or tax advisor before acting on any matter discussed here. Every date, citation, RIN, CFR reference, and figure in this post is copied verbatim from the Federal Register and eCFR as of the snapshot date. Nothing is estimated, modeled, or extrapolated. This is not legal or tax advice.

Last reviewed: July 5, 2026.

Source: U.S. Federal Register (90 FR 21691); current text via eCFR, 12 CFR Part 1082.