The CFPB's FCRA preemption interpretive rule: what it says, and what it does not do

In short: The CFPB says the FCRA broadly preempts state credit reporting laws, and in the same document says its own rule is non-binding guidance. Keep your federal FCRA process tight and ask counsel about state rules.

On October 28, 2025, the Consumer Financial Protection Bureau published an interpretive rule on how the Fair Credit Reporting Act (FCRA) preempts state law. Dealers pull consumer reports every day, so it is worth understanding what changed and what stayed the same.

Background

The FCRA has always preempted state laws that are inconsistent with it. In 1996 Congress added a broader provision, now 15 U.S.C. 1681t(b)(1), that says no requirement or prohibition may be imposed under state law "with respect to any subject matter regulated under" a list of FCRA provisions. Congress made that provision permanent in 2003. In July 2022 the Bureau issued an interpretive rule reading this provision narrowly, which left room for states to regulate topics like medical debt, rental information, and arrest records on consumer reports. The Bureau withdrew that guidance in May 2025.

What the 2025 interpretive rule says

The Bureau confirms the withdrawal of the 2022 rule and states that its prior interpretation was "manifestly wrong." It reads section 1681t(b)(1) as having "a broad sweep" and says the FCRA "generally preempts State laws that touch on broad areas of credit reporting." The Bureau also says the 2022 rule was wrong to conclude that states can regulate whether certain categories of information, such as medical debt or arrest records, appear on a consumer report.

Subject areas that touch dealer operations

The list in section 1681t(b)(1) includes prescreening of consumer reports, the duties of a person who takes adverse action, firm offers of credit, information contained in consumer reports, furnisher responsibilities, and notices about credit terms under section 1681m(h).

What the rule does not do

The Bureau is explicit. As guidance, the rule "does not have the force or effect of law" and has "no legally binding effect, including on persons or entities outside the Federal government." The Bureau notes that courts are the ultimate arbiters of statutory meaning, that agencies "have no special authority to pronounce on pre-emption absent delegation by Congress," and that parties can litigate how preemption applies to a particular state law. It also says withdrawing the 2022 rule "will have no effect on the legal status of any State law."

In short, by the Bureau's own description, this is non-binding guidance that states the Bureau's view.

Practical takeaways

1. Keep your federal FCRA processes consistent: permissible purpose for every pull, adverse action notices, and credit score or risk-based pricing notices.
2. Do not drop a state law requirement because of this interpretive rule. Ask counsel whether and how any state rule applies to your store.
3. If you operate in more than one state, list the state requirements that touch consumer reports so counsel can review them in one place.
4. Document which notices you send, when, and to whom, so you can show what you did if a question arises.
5. Watch for court decisions on FCRA preemption. The Bureau itself points to the courts as the place these questions get resolved.

This explainer is general information, not legal advice. Preemption questions depend on the specific state law and facts. Talk to your counsel.

Sources: CFPB, "Fair Credit Reporting Act; Preemption of State Laws," 90 FR 48710 (Oct. 28, 2025).