{"database": "press", "table": "releases", "rows": [["https://www.crapo.senate.gov/media/newsreleases/release_full.cfm?id=355364", "GAO Confirms CFPB Massive Data Collection", "2014-09-22", "2014", "2014-09", "Republican", "House", "ID", "Michael Crapo", "C000880", "www.crapo.senate.gov", null, null, "legacy", "September 22, 2014\n\t\t\t GAO Confirms CFPB Massive Data Collection \n\t\t\t\n\t\t\t\t\n\t\n\t\n\t\n\t\n\t \n\t\n\t\n\t\t\t\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\n        \n\t\t\t\t Report cites weaknesses with data security and privacy \n\t\t\t\n\t\t\tWashington, D.C. - Today, the Government Accountability Office (GAO) released the results of a comprehensive study confirming that the Consumer Financial Protection Bureau (CFPB) is collecting financial data on up to 600 million consumer credit card accounts, and that the Bureau's privacy and security controls for data collection should be enhanced to reduce the risk of improper collection, use, or release of consumer financial data.\u00a0\u00a0\r\nThe report, requested by U.S. Banking Committee Ranking Member Mike Crapo (R-Idaho), documents CFPB's large-scale collection of consumer financial data from 2012 through 2014, confirms the existence of personal identifiers in CFPB's data collections, and raises the concern that CFPB lacks written policies and procedures for data privacy and protection.\r\n\"The CFPB's massive data collection effort is an unwarranted, unwelcome intrusion into the private financial lives of millions of Americans,\" Crapo said. \u00a0\"This GAO report confirms what the Bureau would not-that it has been collecting information on up to 600 million American financial accounts, and it does not have the proper safeguards in place to protect the information it is collecting.\u00a0 At a time when data and identity-related crimes are at an all-time high, the last thing the American people need is one more federal agency collecting their private financial information.\" \u00a0\r\nAfter discovering the CFPB was spending millions of dollars to collect information on millions of Americans' personal credit card, banking, mortgage and student loan information, Crapo began to raise serious concerns with the CFPB's \"big data\" collection.\u00a0 When the Bureau repeatedly failed to provide sufficient information regarding the data collection, Crapo turned to the non-partisan GAO to investigate, requesting an official review of the CFPB's data collection efforts.\r\nKey findings from the GAO report:\r\n \r\n  \r\n  \r\n    CFPB has access to account-level credit card data on between 546-596 million consumer accounts on a monthly basis.\r\n  \u00a0 This represents consumer data covering 87 percent of the credit card market. (p.28)\r\n  \r\n  \r\n    CFPB conducts large-\r\n  \r\n  \r\n    scale collections on consumer financial data, including data with personal identifiers.\r\n  \u00a0Data includes one-time and monthly collections on automobile sales, consumer credit report information, credit cards, credit scores, mortgages, student loans, and others. See charts \r\n  \r\n    here\r\n   and \r\n  \r\n    here\r\n  . \u00a0\r\n  \r\n  \r\n    CFPB lacks written policies and procedures for data privacy.\r\n  \u00a0 GAO noted that the CFPB \". . . has not developed standard policies and written procedures to document the practices it uses for anonymizing data, including clarifying how data sensitivity will be assessed. . .\" (p.42)\u00a0 For example, the CFPB retained sensitive data in two data collections reviewed by GAO, including religious data. (p.42-43)\r\n  \r\n  \r\n    GAO found weaknesses in the Bureau's ability to assess risks and vulnerabilities associated with data security and protection of consumer financial information\r\n  . \u00a0Both the GAO and the CFPB's Inspector General previously found similar weaknesses in a separate report released last year. (p.58)\r\n  \r\n  \r\n    GAO noted that the CFPB and OCC should submit its credit card data collection plan for consultation and approval by the Office of Management and Budget, as required by law.\r\n  \u00a0 Without such review, CFPB and OCC lack reasonable assurance that these collections are in compliance with the law. (p.66)\r\n \r\n\"There are many outstanding questions and concerns following this report,\" Crapo continued.\u00a0 \"For example, it is still unclear exactly what information the CFPB is collecting, how they are using it, and whether it can be easily reverse-engineered to identify an individual.\u00a0 I consider these to be very serious concerns at the very agency that was supposed to watch out for consumers, not watch them.\"\r\nTo view a full copy of the GAO report on recommended enhancements for the privacy and security controls for the CFPB's data collection, click \r\n\r\n  HERE\r\n.\u00a0 To view Senator Crapo's original request to the GAO, click \r\n\r\n  HERE\r\n.\r\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\n\t  \n\n\t\n\t\n\t\n\t\n\t \n\t\t\n\t\t\tPrint\n\t\t\n\t\t\n\t\t\t\n\t\t\tEmail\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTweet\n\t\t\t\n\t\t\n\t \n\t\n\t\n\n\t\n\t\n\t\n\t\n\t\n    \n\t\n\t\n    \n    \n    \n    \t\n    \t\n\t    \t  \n\t\t    \n\t\t    \tNext Article", 1, "2026-03-30T12:14:52Z", "2026-03-30T12:14:52Z"]], "columns": ["url", "title", "date", "year", "month", "party", "chamber", "state", "member_name", "bioguide_id", "domain", "scraper", "source", "date_source", "text", "has_text", "collected_at", "updated_at"], "primary_keys": ["url"], "primary_key_values": ["https://www.crapo.senate.gov/media/newsreleases/release_full.cfm?id=355364"], "units": {}, "query_ms": 2.5780247524380684, "source": "dwillis/congress-press", "source_url": "https://github.com/dwillis/congress-press", "license": "MIT", "license_url": "https://github.com/dwillis/congress-press/blob/main/LICENSE"}