Data provider
Under the US data rights rule, a covered firm that must make consumer financial data available on request.
Under the CFPB's personal financial data rights rule, a data provider is a covered person, such as a bank, credit union or card issuer, that controls or possesses consumer financial data and must make it available to the consumer and to authorized third parties on request. The rule requires data providers to offer a developer interface for third-party access and sets requirements on its performance and security. The CFPB has opened a reconsideration of the rule, so obligations and compliance dates should be checked on its pages.
Agent Minute explains this term on 10 December 2026.
Related terms
Authorized third partyUnder the US data rights rule, a third party that has met the authorisation procedure to access a consumer's data.Open bankingCustomers letting authorised third parties access their payment account data and initiate payments through secure APIs.Screen scrapingA third party logging in with a customer's credentials to read data from the bank's customer interface.Data portabilityA person's right to receive their data in a structured, machine-readable format and have it sent to another controller.