Codify — Article

Bill would require attestations, ID checks, and narrative confidentiality for CFPB complaints

Adds perjury attestation, ID/authorization proof, a 60‑day prior‑notice rule, closure authority for firms, and hides complaint narratives from public view—shifting how the CFPB complaint database works.

The Brief

This bill amends 12 U.S.C. §5493(b)(3) to add new submission and processing rules for complaints sent to the Consumer Financial Protection Bureau’s public complaint database. It requires filers to attest under penalty of perjury that their complaint is accurate, that they are the consumer or an authorized representative (with specified proof), and that the consumer informed the covered financial firm at least 60 days before filing.

The Director retains discretion to set verification mechanisms.

The bill also gives covered firms explicit authority to close complaints they reasonably determine are duplicative, frivolous, unauthorized, or fraudulent, and to record those closures in the database. Finally, it bars publication of the narrative text of complaints and responses while permitting only non‑identifiable aggregated statistics—sharply narrowing public access to complaint narratives and altering the balance between transparency and fraud prevention.

At a Glance

What It Does

The bill requires an attestation under penalty of perjury for each complaint, mandates proof of identity or representative authorization, and requires complainants to notify the firm at least 60 days before filing with the CFPB. It permits covered persons to close complaints that are duplicative, frivolous, unauthorized, or submitted for a fraudulent purpose, and requires the Bureau to keep narrative complaint and response text confidential.

Who It Affects

Consumer financial firms and their compliance teams that respond to CFPB complaints, consumers who submit complaints (and third‑party representatives), consumer advocates and pro bono helpers who submit complaints on others’ behalf, and the CFPB’s data and IT teams responsible for verification, recordkeeping, and publication rules.

Why It Matters

The bill rewrites the CFPB database’s gatekeeping and disclosure rules: it raises the bar to file, gives firms a formal mechanism to close complaints before public exposure, and removes narrative content from public view—changes that affect reputational risk, public oversight, and how researchers or regulators use complaint data.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

The bill grafts a new layer of procedural requirements onto the CFPB’s consumer complaint intake. Anyone submitting a complaint must affirm, under penalty of perjury, three things: that the facts and documents are true to their knowledge; that the filer is the consumer or an authorized representative providing specified identification and a signed authorization; and that the consumer notified the covered firm about the problem at least 60 days before filing with the Bureau.

The Director of the CFPB is instructed to require verification mechanisms—left deliberately broad—so the Bureau can set how identity and attestations are checked in practice.

If the Bureau determines a complaint was filed in someone’s name without authorization, the Bureau must, to the degree practicable, tell the consumer whose name was used and provide the covered firm with the name of the unauthorized submitter. The bill defines “sufficient proof of identification” by listing acceptable documents: social security number or card, certified birth certificate, or a government‑issued photo ID such as a driver’s license.On the respondent side, covered persons who must reply to CFPB complaints gain a clear closure pathway: they can close a complaint without further action if they reasonably conclude it is duplicative of a resolved complaint, frivolous or baseless, filed by an unauthorized person, or submitted for a fraudulent or misleading purpose.

They may also close a complaint if the consumer failed to notify them at least 60 days beforehand, or if the firm already remedied the issue after being notified. The firm must tell the Bureau why it closed the complaint, and the Bureau must record that closure in the complaint database.The bill also removes complaint and response narrative text from public view: the Bureau must keep narrative content confidential and cannot publish or make it publicly viewable.

The Bureau can still publish aggregated complaint statistics and trend analyses, but only if they omit personally identifiable information and any narrative content that could reasonably be linked to an individual consumer or covered person. Taken together, the provisions tighten submission controls, add procedural preconditions meant to discourage fraud, and restrict public access to the text that has been the most actionable part of the current database for journalists, researchers, and the public.

The Five Things You Need to Know

1

Each complaint filer must attest under penalty of perjury that the complaint is accurate, that the filer is the consumer or an authorized representative, and that the consumer informed the covered person at least 60 days before filing.

2

The Bureau’s Director may require verification mechanisms to validate attestations and identity, but the bill leaves the specific methods to the Director’s discretion.

3

The bill defines acceptable proof of identification that an authorized third party must provide: SSN or SS card copy, certified birth certificate, or government‑issued photo ID (e.g.

4

driver’s license).

5

Covered persons may close complaints as duplicative, frivolous, unauthorized, fraudulent, or if the firm was not given 60 days’ notice—or if the firm already remedied the issue—and must report the closure reason to the Bureau for database recording.

6

Narrative text in complaints and in responses must remain confidential and may not be published or publicly viewable; only aggregated, non‑identifiable complaint data and trend analyses may be released.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Section 1

Short title

Provides the Act’s name: “Eliminating Fraud in the CFPB’s Complaint Database Act.” This is purely stylistic but signals the bill’s legislative framing and intent—fraud prevention and database integrity—which is useful when interpreting ambiguous operational provisions elsewhere in the text.

Section 2 — 12 U.S.C. 5493(b)(3)(E)

Mandatory consumer attestation and Director’s verification authority

Adds a statutory requirement that every complaint submitter attest under penalty of perjury to three items: accuracy of information, proper status as consumer or authorized representative, and prior notification of the covered person at least 60 days before filing. The Director is empowered to require verification mechanisms “as the Director determines appropriate,” giving the CFPB flexibility to adopt methods ranging from email verification to identity‑document checks. Practically, that leaves shape and cost of implementation to the Bureau’s rulemaking and IT systems.

Section 2 — 12 U.S.C. 5493(b)(3)(E)(ii)

Bureau notification where a complaint was filed without authorization

If the Bureau discovers a complaint was filed in a consumer’s name without authorization, it must—where practicable—notify that consumer and give the covered person the name of the unauthorized submitter. That creates a new duty for the Bureau to investigate or at least flag potentially fraudulent submissions and to do outreach to alleged victims; it also creates an evidentiary trail showing who actually initiated the complaint.

3 more sections
Section 2 — 12 U.S.C. 5493(b)(3)(E)(iii)

Definition of sufficient proof of identification

Specifies what qualifies as acceptable proof when a third party files on a consumer’s behalf: social security number or copy of SS card, certified birth certificate, or government‑issued photo ID such as a driver’s license. The statute’s enumerated list narrows the universe of acceptable documentation and forces representatives to supply hard identity evidence rather than informal attestations.

Section 2 — 12 U.S.C. 5493(b)(3)(F)

Closure authority for covered persons and recordkeeping

Grants covered persons the right to close complaints they reasonably determine are duplicative, frivolous, unauthorized, fraudulent, or otherwise without basis, and also allows closure when the consumer failed to provide the required 60‑day notice or the firm already remedied the issue. When a covered person closes a complaint, it must notify the Bureau of the closure and the reason, and the Bureau must record that reason in the complaint database—creating a permanent administrative notation that will affect how the complaint appears internally and how the Bureau aggregates outcomes.

Section 2 — 12 U.S.C. 5493(b)(3)(G)

Confidentiality of complaint and response narratives; limited aggregation

Directs the Bureau to keep narrative complaint text and narrative responses confidential and off the public record while allowing publication of aggregated, non‑identifiable complaint statistics. This provision removes the human‑readable narratives that many external stakeholders used for oversight and research, while preserving the Bureau’s authority to publish sanitized trend data.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Finance across all five countries.

Explore Finance in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Covered financial firms and compliance teams — they gain a statutory basis to close complaints preemptively, limit reputational exposure from public narrative text, and receive the name of unauthorized filers, reducing operational noise and potential public relations risks.
  • Consumers concerned about identity theft and unauthorized filings — the bill requires the Bureau to notify consumers when someone files in their name without authorization and raises hurdles for fraudulent filers.
  • Authorized representatives who follow the new process — representatives who can provide the specified identification and a signed authorization get clearer rules and a predictable pathway to file on behalf of clients.
  • CFPB internal data teams — the bill channels complaint handling toward verification and structured closure reporting, which can simplify data hygiene and reduce duplicate records in the internal database.
  • Entities that rely on sanitized statistics (e.g., market analysts) — the Bureau retains the ability to publish aggregated, non‑identifiable trends, preserving some high‑level research utility without exposing narratives.

Who Bears the Cost

  • Consumers and low‑income filers — filing now requires an attestation under penalty of perjury and may require providing sensitive identity documents, which can deter or prevent filings from vulnerable individuals or those without easy access to ID documents.
  • Pro bono legal services and small consumer advocacy groups — the added documentary and authorization requirements increase logistical burdens and may reduce their ability to file on behalf of multiple clients quickly.
  • CFPB — the Bureau must design, implement, and maintain verification mechanisms, notification workflows, secure storage of identity documents, and new database fields for closure reasons, imposing IT, privacy, and staffing costs.
  • Researchers, journalists, and public watchdogs — losing access to complaint narratives will materially reduce the usefulness of the public database for investigative and academic work, making it harder to trace patterns that narrative text revealed.
  • Covered persons’ legal and compliance budgets — while the closure mechanism reduces some burdens, firms will incur costs implementing systems to accept, document, and report closures and to validate prior‑notice claims.

Key Issues

The Core Tension

The central dilemma is balancing fraud prevention and database integrity against access, transparency, and public accountability: stricter attestation, ID requirements, and narrative confidentiality reduce fraudulent or misleading filings and reputational harm to firms, but they also raise barriers for legitimate complainants, constrain third‑party helpers, and remove the narrative data journalists and researchers rely on to detect systemic problems.

The bill poses tradeoffs that go beyond simple fraud prevention. Requiring attestations under penalty of perjury and enumerated identity documents raises the bar for legitimate filers—especially low‑income, elderly, or language‑challenged consumers who may lack easy access to the specified documents or fear criminal exposure if they make a factual mistake.

The 60‑day prior‑notice rule is ambiguous in practice: the bill does not define what counts as effective notice (email, certified letter, phone call, in‑person), who must prove it, or how a firm documents and proves its own remedial efforts when disputes follow. These gaps shift evidentiary burdens into operational disputes between consumers, representatives, firms, and the Bureau.

The closure authority for covered persons is framed as a remedy against fraud and frivolous claims, but it also creates an administrative choke point where firms decide unilaterally—based on a “reasonable determination”—to close complaints that may later prove to be legitimate. The Bureau must record closures, but the bill does not create a consumer appeal or automatic review path for closed complaints, nor does it require notifying the consumer that their valid complaint was closed for a reason claimed by the firm.

Finally, mandating confidentiality for narrative content removes the principal public accountability mechanism the database currently provides: narratives are the raw material that journalists, regulators, and researchers used to identify systemic harms. Replacing narratives with aggregate statistics limits public insight and could mask patterns that only appear in detailed descriptions.

Implementation and privacy considerations loom large. The statute compels collection of sensitive identity documents (SSN, copies of IDs), but it does not specify retention limits, encryption standards, or third‑party handling—leaving the Bureau to square document collection with privacy law and breach risk.

The Director’s open‑ended verification authority permits flexible responses, but also risks inconsistent application across different channels or over time. That discretion will matter: a strict verification regime could block many legitimate complaints; a loose one could fail to prevent fraud.

The bill also leaves unanswered whether the Bureau’s notification to a consumer about an unauthorized filing triggers any remedial obligations on the Bureau’s part beyond notice, such as removing the complaint, or how quickly the notification must occur.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.