Government Finally Asks: Who's Getting Rich Off Your Starbucks Purchases?
Published Date: 1/15/2025
Notice
Summary
The Consumer Financial Protection Bureau wants to hear from you about how companies collect, use, and make money from your payment and personal financial data. This is all about protecting your info and making sure businesses play fair. If you have thoughts, share them by April 11, 2025, so the CFPB can shape smarter rules that keep your money info safe and sound.
Analyzed Economic Effects
3 provisions identified: 1 benefits, 2 costs, 0 mixed.
Massive Data Collection by Payment Apps
The CFPB found that some payment products routinely collect over one thousand data fields about users, and one product collects tens of thousands of fields. These collections can include biometric information, geographic location, device ‘‘fingerprinting,’’ contact details, and SKU-level purchase data, which raises privacy and consumer-protection concerns.
CFPB May Revise Regulation P Privacy Rules
The CFPB is gathering information to decide whether to update Regulation P and the GLBA-related model privacy form, in part responding to a GAO recommendation. The CFPB explicitly seeks public comments to inform any potential updates and is accepting comments through April 11, 2025.
Low Consumer Awareness and Opt-Out Rates
Surveys cited in the notice show low consumer awareness that fintech apps use third parties (about 20% aware) and that fintech apps can sell personal financial data (about 24% aware). The CFPB also cites surveys where 89%–94% of respondents said they value restrictions on banks sharing data, indicating a gap between consumer preferences and knowledge.
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Related Federal Register Documents
2026-12299 — Presidential Declaration Amendment of a Major Disaster for Public Assistance Only for the Commonwealth of Kentucky
The President has updated the disaster declaration for Kentucky’s severe winter storm from January 23-27, 2026, adding Adair and Casey counties to the list of areas eligible for public assistance. This means more communities can get help recovering, with physical loan applications due by July 28, 2026, and economic injury loans available until March 1, 2027. If you’re in these counties, now’s the time to apply and get the support you need!
2026-12235 — Advisory Committee; Science Board to the Food and Drug Administration; Renewal
The FDA is renewing its Science Board for two more years, keeping expert advice flowing to help ensure safe and effective drugs and products. This renewal affects scientists and public health folks who guide the FDA’s big decisions, with the new term lasting until June 26, 2028. No extra costs or delays are expected—just more smart brains working for your health!
2026-12238 — Agency Information Collection Activities; Submission for Office of Management and Budget Review; Comment Request; Current Good Manufacturing Practice in Manufacturing, Packaging, Labeling, or Holding Operations for Dietary Supplements
The FDA is asking for public feedback by July 20, 2026, on their rules that keep dietary supplements safe and made right. These rules affect companies that make, package, label, or store supplements, helping ensure products are high quality without adding extra costs. This review keeps the safety standards up-to-date and clear for everyone involved.
2026-12241 — Agency Information Collection Activities: Submission for OMB Review; Comment Request
NARA wants to renew approval for a form that helps the FOIA Ombuds office get your okay before sharing info to solve Freedom of Information Act requests. This affects anyone asking for government records and means you might soon be able to submit consent forms online, making the process smoother. Comments on this plan are open until July 20, 2026, with no new costs involved.
2026-12285 — 737th Meeting of the Advisory Committee on Reactor Safeguards (ACRS)
The Advisory Committee on Reactor Safeguards (ACRS) is meeting July 8-10, 2026, to focus on updating how nuclear reactors get licensed and checked for safety. They’re trimming down their work to only the most important and new issues, thanks to a recent government order. This means faster, smarter reviews that affect nuclear plant operators and the public, with meetings open for remote participation and no big cost changes expected.
2026-12336 — PacifiCorp; Notice of Application Accepted for Filing, Intent To Waive Scoping, Soliciting Motions To Intervene and Protests, Ready for Environmental Analysis, and Soliciting Comments, Recommendations, and Terms and Conditions
PacifiCorp wants to keep running its Ashton Hydroelectric Project on the Snake River in Idaho without a full license, and the government is ready to review the environmental impact. Local communities, environmental groups, and energy users can share their thoughts or raise concerns by August 14, 2026. This move could speed up clean energy production while protecting the river, with decisions and replies wrapping up by late September.
Previous / Next Documents
Previous: 2025-00810 — Exemption From Certain Prohibited Transaction Restrictions Involving Boilermakers Western States Apprenticeship Fund, Located in Page, Arizona
The Boilermakers Western States Apprenticeship Fund in Page, Arizona, got special permission to buy property from their own union lodge, even though rules usually say they can’t. This deal, effective January 15, 2025, helps the Fund save time and money by keeping their training program right where it is. It’s a win for the apprentices and the union members involved!
Next: 2025-00812 — Exemption From Certain Prohibited Transaction Restrictions Involving UBS AG (UBS), Located in Zurich, Switzerland
The Department of Labor is letting UBS asset managers keep using a special exemption from certain rules from June 12, 2023, through June 11, 2029, even though some UBS-related companies had legal troubles. This helps protect retirement plans and accounts managed by UBS from disruption or harm. So, if you have a retirement plan with UBS managing it, things will keep running smoothly for the next five years.