Comment for 1002.107 - Compilation of Reportable Data

107(a) Data Format and Itemization

1. General. Section 1002.107(a) describes a covered financial institution’s obligation to compile and maintain data regarding the covered applications it receives from small businesses.

i. A covered financial institution reports these data even if the credit originated pursuant to the reported application was subsequently sold by the institution.

ii. A covered financial institution annually reports data for covered applications for which final action was taken in the previous calendar year.

iii. A covered financial institution reports data for a covered application on its small business lending application register for the calendar year during which final action was taken on the application, even if the institution received the application in a previous calendar year.

2. Free-form text fields. A covered financial institution may use technology such as autocorrect and predictive text when requesting applicant-provided data under subpart B of this part that the financial institution reports via free-form text fields, provided that such technology does not restrict the applicant’s ability to write in its own response instead of using text suggested by the technology.

3. Filing Instructions Guide. Additional details and procedures for compiling data pursuant to § 1002.107 are included in the Filing Instructions Guide, which is available at https://www.consumerfinance.gov/data-research/small-business-lending/filing-instructions-guide/.

4. Additional data point response options. The Bureau may add additional response options to the lists of responses contained in the commentary that follows for certain of the data points set forth in § 1002.107(a), via the Filing Instructions Guide. Refer to the Filing Instructions Guide for any updates for each reporting year.

107(a)(1) Unique Identifier

1. Unique within the financial institution. A financial institution complies with § 1002.107(a)(1) by compiling and reporting an alphanumeric application or loan identifier unique within the financial institution to the specific application. The identifier must not exceed 45 characters, and must begin with the financial institution’s Legal Entity Identifier (LEI), as defined in comment 109(b)(6)-1. Separate applications for the same applicant must have separate identifiers. The identifier may only include standard numerical and/or upper-case alphabetical characters and cannot include dashes, other special characters, or characters with diacritics. The financial institution may assign the unique identifier at any time prior to reporting the application. Refinancings or applications for refinancing must be assigned a different identifier than the transaction that is being refinanced. A financial institution with multiple branches must ensure that its branches do not use the same identifiers to refer to multiple applications.

2. Does not include directly identifying information. The unique identifier must not include any directly identifying information, such as a whole or partial Social Security number or employer identification number, about the applicant or persons (natural or legal) associated with the applicant. See also § 1002.111(c) and related commentary.

107(a)(2) Application Date

1. Consistency. Section 1002.107(a)(2) requires that, in reporting the date of covered application, a financial institution shall report the date the covered application was received or the date shown on a paper or electronic application form. Although a financial institution need not choose the same approach for its entire small business lending application register, it should generally be consistent in its approach by, for example, establishing procedures for how to report this date within particular scenarios, products, or divisions. If the financial institution chooses to report the date shown on an application form and the institution retains multiple versions of the application form, the institution reports the date shown on the first application form satisfying the definition of covered application pursuant to § 1002.103.

2. Application received. For an application submitted directly to the financial institution or its affiliate, the financial institution shall report the date it received the covered application, as defined under § 1002.103, or the date shown on a paper or electronic application form. For an application initially submitted to a third party, see comment 107(a)(2)-3.

3. Indirect applications. For an application that was not submitted directly to the financial institution or its affiliate, the financial institution shall report the date the application was received by the party that initially received the application, the date the application was received by the financial institution, or the date shown on the application form. Although a financial institution need not choose the same approach for its entire small business lending application register, it should generally be consistent in its approach by, for example, establishing procedures for how to report this date within particular scenarios, products, or divisions.

4. Safe harbor. Pursuant to § 1002.112(c)(1), a financial institution that reports on its small business lending application register an application date that is within three business days of the actual application date pursuant to § 1002.107(a)(2) does not violate the Act or subpart B of this part. For purposes of this paragraph, a business day means any day the financial institution is open for business.

107(a)(5) Credit Type

1. Reporting credit product—in general. A financial institution complies with § 1002.107(a)(5)(i) by selecting the credit product applied for or originated, from the list below. If the credit product applied for or originated is not included on this list, the financial institution selects “other,” and reports the credit product via free-form text field. If an applicant requested more than one credit product at the same time, the financial institution reports each credit product requested as a separate application. However, if the applicant only requested a single covered credit transaction, but had not decided on which particular product, the financial institution complies with § 1002.107(a)(5)(i) by reporting the credit product originated (if originated), or the credit product denied (if denied), or the credit product of greater interest to the applicant, if readily determinable. If the credit product of greater interest to the applicant is not readily determinable, the financial institution complies with § 1002.107(a)(5)(i) by reporting one of the credit products requested as part of the request for a single covered credit transaction, in its discretion. See comment 103(a)-5 for instructions on reporting requests for multiple covered credit transactions at one time.

i. Term loan—unsecured.

ii. Term loan—secured.

iii. Line of credit—unsecured.

iv. Line of credit—secured.

v. Credit card account, not private-label.

vi. Private-label credit card account.

vii. [Reserved]

viii. [Reserved]

ix. Other.

x. Not provided by applicant and otherwise undetermined.

2. Credit card account, not private-label. A financial institution complies with § 1002.107(a)(5)(i) by reporting the credit product as a “credit card account, not private-label” when the product is a business-purpose open-end credit account that is not private label and that may be accessed from time to time by a card, plate, or other single credit device to obtain credit, except that accounts or lines of credit secured by real property and overdraft lines of credit accessed by debit cards are not credit card accounts. The term credit card account does not include debit card accounts or closed-end credit that may be accessed by a card, plate, or single credit device. The term credit card account does include charge card accounts that are generally paid in full each billing period, as well as hybrid prepaid-credit cards. A financial institution reports multiple credit card account, not private-label applications requested at one time using the guidance in comment 103(a)-7.

3. Private-label credit card account. A financial institution complies with § 1002.107(a)(5)(i) by reporting the credit product as a “private-label credit card account” when the product is a business-purpose open-end private-label credit account that otherwise meets the description of a credit card account in comment 107(a)(5)-2. A private-label credit card account is a credit card account that can only be used to acquire goods or services provided by one business (for example, a specific merchant, retailer, independent dealer, or manufacturer) or a small group of related businesses. A co-branded or other card that can also be used for purchases at unrelated businesses is not a private-label credit card. A financial institution reports multiple private-label credit card account applications requested at one time in the same manner as credit card account, not private-label applications, using the guidance in comment 103(a)-7.

4. Credit product not provided by the applicant and otherwise undetermined. Pursuant to § 1002.107(c), a financial institution is required to maintain procedures reasonably designed to collect applicant-provided data, which includes credit product. However, if a financial institution is nonetheless unable to collect or otherwise determine credit product information because the applicant does not indicate what credit product it seeks and the application is denied, withdrawn, or closed for incompleteness before a credit product is identified, the financial institution reports that the credit product is “not provided by applicant and otherwise undetermined.”

5. Reporting credit product involving counteroffers. If a financial institution presents a counteroffer for a different credit product than the product the applicant had initially requested, and the applicant does not agree to proceed with the counteroffer, the financial institution reports the application for the original credit product as denied pursuant to § 1002.107(a)(9). If the applicant agrees to proceed with consideration of the financial institution’s counteroffer, the financial institution reports the disposition of the application based on the credit product that was offered and does not report the original credit product applied for. See comment 107(a)(9)-2.

6. [Reserved].

7. Guarantees. A financial institution complies with § 1002.107(a)(5)(ii) by selecting the type or types of guarantees that were obtained for an originated covered credit transaction, or that would have been obtained if the covered credit transaction was originated, from the list below. The financial institution selects, if applicable, up to a maximum of five guarantees for a single application. If the type of guarantee does not appear on the list, the financial institution selects “other” and reports the type of guarantee via free-form text field. If no guarantee is obtained or would have been obtained if the covered credit transaction was originated, the financial institution selects “no guarantee.” If an application is denied, withdrawn, or closed for incompleteness before any guarantee has been identified, the financial institution selects “no guarantee.” The financial institution chooses State government guarantee or local government guarantee, as applicable, based on the entity directly administering the program, not the source of funding.

i. Personal guarantee—owner(s).

ii. Personal guarantee—non-owner(s).

iii. SBA guarantee—7(a) program.

iv. SBA guarantee—504 program.

v. SBA guarantee—other.

vi. USDA guarantee.

vii. FHA insurance.

viii. Bureau of Indian Affairs guarantee.

ix. Other Federal guarantee.

x. State government guarantee.

xi. Local government guarantee.

xii. Other.

xiii. No guarantee.

8. Loan term. A financial institution complies with § 1002.107(a)(5)(iii) by reporting the number of months in the loan term for the covered credit transaction. The loan term is the number of months after which the legal obligation will mature or terminate, measured from the date of origination. For transactions involving real property, the financial institution may instead measure the loan term from the date of the first payment period and disregard the time that elapses, if any, between the settlement of the transaction and the first payment period. For example, if a loan closes on April 12, but the first payment is not due until June 1 and includes the interest accrued in May (but not April), the financial institution may choose not to include the month of April in the loan term. In addition, the financial institution may round the loan term to the nearest full month or may count only full months and ignore partial months, as it so chooses. If a credit product, such as a credit card, does not have a loan term, the financial institution reports that the loan term is “not applicable.” The financial institution also reports that the loan term is “not applicable” if the credit product is reported as “not provided by applicant and otherwise undetermined.” For a credit product that generally has a loan term, the financial institution reports “not provided by applicant and otherwise undetermined” if the application is denied, withdrawn, or determined to be incomplete before a loan term has been identified.

107(a)(6) Credit Purpose

1. General . A financial institution complies with § 1002.107(a)(6) by selecting the purpose or purposes of the covered credit transaction applied for or originated from the list below.

i. Purchase, construction/improvement, or refinance of non-owner-occupied real property.

ii. Purchase, construction/improvement, or refinance of owner-occupied real property.

iii. Purchase, refinance, or rehabilitation/repair of motor vehicle(s) (including light and heavy trucks).

iv. Purchase, refinance, or rehabilitation/repair of equipment.

v. Working capital (includes inventory or floor planning).

vi. Business start-up.

vii. Business expansion.

viii. Business acquisition.

ix. Refinance existing debt (other than refinancings listed above).

x. Line increase.

xi. Overdraft.

xii. Other.

xiii. Not provided by applicant and otherwise undetermined.

xiv. Not applicable.

2. More than one purpose. If the applicant indicates or the financial institution is otherwise aware of more than one purpose for the credit applied for or originated, the financial institution reports those purposes, up to a maximum of three, using the list provided, in any order it chooses. For example, if an applicant refinances a commercial building it owns and uses the funds to purchase a motor vehicle and expand the business it runs in a part of that building, the financial institution reports that the three purposes of the credit are purchase, construction/improvement, or refinance of owner-occupied real property; purchase, refinance, or rehabilitation/repair of motor vehicle(s) (including light and heavy trucks); and business expansion. If an application has more than three purposes, the financial institution reports any three of those purposes. In the example above, if the funds were also used to purchase equipment, the financial institution would select only three of the relevant purposes to report.

3. “Other” credit purpose. If a purpose of an application does not appear on the list of purposes provided, the financial institution reports “other” as the credit purpose and reports the credit purpose via free-form text field. If the application has more than one “other” purpose, the financial institution chooses the most significant “other” purpose, in its discretion, and reports that “other” purpose. The financial institution reports a maximum of three credit purposes, including any “other” purpose.

4. Credit purpose not provided by applicant and otherwise undetermined. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes credit purpose. However, if a financial institution is nonetheless unable to collect or determine credit purpose information, the financial institution reports that the credit purpose is “not provided by applicant and otherwise undetermined.”

5. Not applicable. If the application is for a credit product that generally has indeterminate or numerous potential purposes, such as a credit card, the financial institution may report credit purpose as “not applicable.”

6. Collecting credit purpose. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, including credit purpose. The financial institution is permitted, but not required, to present the list of credit purposes provided in comment 107(a)(6)-1 to the applicant. The financial institution is also permitted to ask about purposes not included on the list provided in comment 107(a)(6)-1. If the applicant chooses a purpose or purposes not included on the provided list, the financial institution follows the instructions in comment 107(a)(6)-3 regarding reporting of “other” as the credit purpose. If an applicant chooses a purpose or purposes that are similar to purposes on the list provided, but uses different language, the financial institution reports the purpose or purposes from the list provided.

7. Owner-occupied real property. Real property is owner-occupied if any physical portion of the property is used by the owner for any activity, including storage.

8. Overdraft. When overdraft is provided as an aspect of the covered credit transaction applied for or originated, the financial institution reports “Overdraft” as a purpose of the credit. The financial institution reports credit type pursuant to § 1002.107(a)(5)(i) as appropriate for the underlying covered credit transaction, such as “Line of credit—unsecured.” Providing occasional overdraft services as part of a deposit account offering would not be reported for the purpose of subpart B.

107(a)(7) Amount Applied For

1. Initial amount requested. A financial institution complies with § 1002.107(a)(7) by reporting the initial amount of credit or the initial credit limit requested by the applicant. The financial institution is not required to report credit amounts or limits discussed before an application is made, but must capture the initial amount requested at the application stage. If the applicant requests an amount as a range of numbers, the financial institution reports the midpoint of that range.

2. No amount requested. If the applicant does not request a specific amount at the application stage, but the financial institution underwrites the application for a specific amount, the financial institution complies with § 1002.107(a)(7) by reporting the amount considered for underwriting as the amount applied for. If the particular type of credit product applied for does not involve a specific amount requested, the financial institution reports that the requirement is “not applicable.”

3. Firm offers. When an applicant responds to a “firm offer” that specifies an amount or limit, which may occur in conjunction with a pre-approved credit solicitation, the financial institution reports the amount of the firm offer as the amount applied for, unless the applicant requests a different amount. If the firm offer does not specify an amount or limit and the applicant does not request a specific amount, the amount applied for is the amount underwritten by the financial institution. If the firm offer specifies an amount or limit as a range and the applicant does not request a specific amount, the amount applied for is the amount underwritten by the financial institution.

4. Additional amounts on an existing account. When reporting a covered application that seeks additional credit amounts on an existing account, the financial institution reports only the additional credit amount sought, and not any previous amounts extended. See comment 103(b)-3.

5. Initial amount otherwise undetermined. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes the credit amount initially requested by the applicant (other than for products that do not involve a specific amount requested). However, if a financial institution is nonetheless unable to collect or otherwise determine the amount initially requested, the financial institution reports that the amount applied for is “not provided by applicant and otherwise undetermined.” But see comment 107(a)(7)-2 for how to report the credit amount initially requested by the applicant for particular types of credit products that do not involve a specific amount requested.

107(a)(8) Amount Approved or Originated

1. General. A financial institution complies with § 1002.107(a)(8) by reporting the amount approved or originated for credit that is originated or approved but not accepted. For applications that the financial institution, pursuant to § 1002.107(a)(9), reports as denied, withdrawn by the applicant, or incomplete, the financial institution reports that the amount approved or originated is “not applicable.”

2. Multiple approval amounts. A financial institution may sometimes approve an applicant for more than one credit amount, allowing the applicant to choose which amount the applicant prefers for the extension or line of credit. When multiple approval amounts are offered for a closed-end credit transaction for which the action taken is approved but not accepted, and the applicant does not accept the approved offer of credit in any amount, the financial institution reports the highest amount approved. If the applicant accepts the offer of closed-end credit, the financial institution reports the amount originated. When multiple approval amounts are offered for an open-end credit transaction for which the action taken is approved but not accepted, and the applicant does not accept the approved offer of credit in any amount, the financial institution reports the highest amount approved. If the applicant accepts the offer of open-end credit, the financial institution reports the actual credit limit established.

3. Amount approved or originated—closed-end credit transaction. For an originated closed-end credit transaction, the financial institution reports the principal amount to be repaid. This amount will generally be disclosed on the legal obligation.

4. Amount approved or originated—refinancing. For a refinancing, the financial institution reports the amount of credit approved or originated under the terms of the new debt obligation.

5. Amount approved or originated—counteroffer. If an applicant agrees to proceed with consideration of a counteroffer for an amount or limit different from the amount for which the applicant applied, and the covered credit transaction is approved and originated, the financial institution reports the amount granted. If an applicant does not agree to proceed with consideration of a counteroffer or fails to respond, the institution reports the application as denied and reports “not applicable” for the amount approved or originated. See comment 107(a)(9)-2.

6. Amount approved or originated—existing accounts. For additional credit amounts that were approved for or originated on an existing account, the financial institution reports only the additional credit amount approved or originated, and not any previous amounts extended.

107(a)(9) Action Taken

1. General. A financial institution complies with § 1002.107(a)(9) by selecting the action taken by the financial institution on the application from the following list: originated, approved but not accepted, denied, withdrawn by the applicant, or incomplete. A financial institution identifies the applicable action taken code based on final action taken on the covered application.

i. Originated. A financial institution reports that the application was originated if the financial institution made a credit decision approving the application and that credit decision resulted in an extension of credit.

ii. Approved but not accepted. A financial institution reports that the application was approved but not accepted if the financial institution made a credit decision approving the application, but the applicant or the party that initially received the application failed to respond to the financial institution’s approval within the specified time, or the covered credit transaction was not otherwise consummated or the account was not otherwise opened.

iii. Denied. A financial institution reports that the application was denied if it made a credit decision denying the application before an applicant withdrew the application, before the application was closed for incompleteness, or before the application was denied on the basis of incompleteness.

iv. Withdrawn by the applicant. A financial institution reports that the application was withdrawn if the application was expressly withdrawn by the applicant before the financial institution made a credit decision approving or denying the application, before the application was closed for incompleteness, or before the application was denied on the basis of incompleteness.

v. Incomplete. A financial institution reports that the application was incomplete if the financial institution took adverse action on the basis of incompleteness under § 1002.9(a)(1)(ii) and (c)(1)(i) or provided a written notice of incompleteness under § 1002.9(c)(1)(ii) and (2), and the applicant did not respond to the request for additional information within the period of time specified in the notice.

2. Treatment of counteroffers. If a financial institution makes a counteroffer to grant credit on terms other than those originally requested by the applicant (for example, for a shorter loan maturity, with a different interest rate, or in a different amount) and the applicant declines the counteroffer or fails to respond, the institution reports the action taken as a denial on the original terms requested by the applicant. If the applicant agrees to proceed with consideration of the financial institution’s counteroffer, the financial institution reports the action taken as the disposition of the application based on the terms of the counteroffer. For example, assume an applicant applies for a term loan and the financial institution makes a counteroffer to proceed with consideration of a line of credit. If the applicant declines to be considered for a line of credit, the financial institution reports the application as a denied request for a term loan. If, on the other hand, the applicant agrees to be considered for a line of credit, then the financial institution reports the action taken as the disposition of the application for the line of credit. For instance, using the same example, if the financial institution makes a credit decision approving the line of credit, but the applicant fails to respond to the financial institution’s approval within the specified time by accepting the credit offer, the financial institution reports the application on the line of credit as approved but not accepted.

3. Treatment of rescinded transactions. If a borrower successfully rescinds a transaction after closing but before a financial institution is required to submit its small business lending application register containing the information for the application under § 1002.109, the institution reports the application as approved but not accepted.

4. Treatment of pending applications. A financial institution does not report any application still pending at the end of the calendar year; it reports such applications on its small business lending application register for the year in which final action is taken.

5. Treatment of conditional approvals. If a financial institution issues an approval that is subject to the applicant meeting certain conditions prior to closing, the financial institution reports the action taken as provided below dependent on whether the conditions are solely customary commitment or closing conditions or if the conditions include any underwriting or creditworthiness conditions. Customary commitment or closing conditions may include, for example, a clear-title requirement, proof of insurance policies, or a subordination agreement from another lienholder. Underwriting or creditworthiness conditions may include, for example, conditions that constitute a counteroffer (such as a demand for a higher down-payment), satisfactory loan-to-value ratios, or verification or confirmation, in whatever form the institution requires, that the applicant meets underwriting conditions concerning applicant creditworthiness, including documentation or verification of revenue, income or assets.

i. Conditional approval—denial. If the approval is conditioned on satisfying underwriting or creditworthiness conditions, those conditions are not met, and the financial institution takes adverse action on some basis other than incompleteness, the financial institution reports the action taken as denied.

ii. Conditional approval—incompleteness. If the approval is conditioned on satisfying underwriting or creditworthiness conditions that the financial institution needs to make the credit decision, and the financial institution takes adverse action on the basis of incompleteness under § 1002.9(a)(1)(ii) and (c)(1)(i), or has sent a written notice of incompleteness under § 1002.9(c)(1)(ii) and (2), and the applicant did not respond within the period of time specified in the notice, the financial institution reports the action taken as incomplete.

iii. Conditional approval—approved but not accepted. If the approval is conditioned on satisfying conditions that are solely customary commitment or closing conditions and the conditions are not met, the financial institution reports the action taken as approved but not accepted. If all the conditions (underwriting, creditworthiness, or customary commitment or closing conditions) are satisfied and the financial institution agrees to extend credit but the covered credit transaction is not originated (for example, because the applicant withdraws), the financial institution reports the action taken as approved but not accepted.

iv. Conditional approval—withdrawn by the applicant. If the applicant expressly withdraws before satisfying all underwriting or creditworthiness conditions and before the institution denies the application or before the institution closes the file for incompleteness, the financial institution reports the action taken as withdrawn.

107(a)(10) Action Taken Date

1. Reporting action taken date for denied applications. For applications that are denied, a financial institution reports either the date the application was denied or the date the denial notice was sent to the applicant.

2. Reporting action taken date for applications withdrawn by applicant. For applications that are withdrawn by the applicant, the financial institution reports the date the express withdrawal was received, or the date shown on the notification form in the case of a written withdrawal.

3. Reporting action taken date for applications that are approved but not accepted. For applications approved by a financial institution but not accepted by the applicant, the financial institution reports any reasonable date, such as the approval date, the deadline for accepting the offer, or the date the file was closed. A financial institution should generally be consistent in its approach to reporting by, for example, establishing procedures for how to report this date for particular scenarios, products, or divisions.

4. Reporting action taken date for originated applications. For applications that result in an extension of credit, a financial institution generally reports the closing or account opening date. If the disbursement of funds takes place on a date later than the closing or account opening date, the institution may, alternatively, use the date of initial disbursement. A financial institution should generally be consistent in its approach to reporting by, for example, establishing procedures for how to report this date for particular scenarios, products, or divisions.

5. Reporting action taken date for incomplete applications. For applications closed for incompleteness or denied for incompleteness, the financial institution reports either the date the action was taken or the date the denial or incompleteness notice was sent to the applicant.

107(a)(13) Census Tract

1. General. A financial institution complies with § 1002.107(a)(13) by reporting a census tract number as defined by the U.S. Census Bureau, which includes State and county numerical codes. A financial institution complies with § 1002.107(a)(13) if it uses the boundaries and codes in effect on January 1 of the calendar year covered by the small business lending application register that it is reporting. The financial institution reports census tract based on the following:

i. Proceeds address. A financial institution complies with § 1002.107(a)(13) by reporting a census tract based on the address or location where the proceeds of the credit applied for or originated will be or would have been principally applied, if known. For example, a financial institution would report a census tract based on the address or location of the site where the proceeds of a construction loan will be applied.

ii. Main office or headquarters address. If the address or location where the proceeds of the credit applied for or originated will be or would have been principally applied is unknown, a financial institution complies with § 1002.107(a)(13) by reporting a census tract number based on the address or location of the main office or headquarters of the applicant, if known. For example, the address or location of the main office or headquarters of the applicant may be the home address of a sole proprietor or the office address of a sole proprietor or other applicant.

iii. Another address or location. If neither the address or location where the proceeds of the credit applied for or originated will be or would have been principally applied nor the address or location of the main office or headquarters of the applicant are known, a financial institution complies with § 1002.107(a)(13) by reporting a census tract number based on another address or location associated with the applicant.

iv. Type of address used. In addition to reporting the census tract, pursuant to § 1002.107(a)(13)(iv) a financial institution must report which one of the three types of addresses or locations listed in § 1002.107(a)(13)(i) through (iii) and described in comments 107(a)(13)-1.i through iii that the census tract is determined from.

2. Financial institution discretion. A financial institution complies with § 1002.107(a)(13) by identifying the appropriate address or location and the type of that address or location in good faith, using appropriate information from the applicant’s credit file or otherwise known by the financial institution. A financial institution is not required to make inquiries beyond its standard procedures as to the nature of the addresses or locations it collects.

3. Address or location not provided by applicant and otherwise undetermined. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes at least one address or location for an applicant for census tract reporting. However, if a financial institution is nonetheless unable to collect or otherwise determine any address or location for an application, the financial institution reports that the census tract information is “not provided by applicant and otherwise undetermined.”

4. Safe harbor. As described in § 1002.112(c)(2) and comment 112(c)-1, a financial institution that obtains an incorrect census tract by correctly using a geocoding tool provided by the FFIEC or the Bureau does not violate the Act or subpart B of this part.

107(a)(14) Gross Annual Revenue

1. Collecting gross annual revenue. A financial institution reports the applicant’s gross annual revenue, expressed in dollars, for its fiscal year preceding when the information was collected. A financial institution may rely on the applicant’s statements or on information provided by the applicant in collecting and reporting gross annual revenue, even if the applicant’s statement or information is based on estimation or extrapolation. However, pursuant to § 1002.107(b), if the financial institution verifies the gross annual revenue provided by the applicant, it must report the verified information. Also, pursuant to comment 107(c)(1)-5, a financial institution reports updated gross annual revenue data if it obtains more current data from the applicant during the application process. If a financial institution has already verified gross annual revenue data and then the applicant updates it, the financial institution reports the information it believes to be more accurate, in its discretion. The financial institution may use the following language to ask about gross annual revenue and may rely on the applicant’s answer (unless subsequently verified or updated):

What was the gross annual revenue of the business applying for credit in its last full fiscal year? Gross annual revenue is the amount of money the business earned before subtracting taxes and other expenses. You may provide gross annual revenue calculated using any reasonable method.

2. Gross annual revenue not provided by applicant and otherwise undetermined. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes the gross annual revenue of the applicant. However, if a financial institution is nonetheless unable to collect or determine the gross annual revenue of the applicant, the financial institution reports that the gross annual revenue is “not provided by applicant and otherwise undetermined.”

3. Affiliate revenue. A financial institution is permitted, but not required, to report the gross annual revenue for the applicant that includes the revenue of affiliates as well. Likewise, as explained in comment 106(b)(1)-3, in determining whether the applicant is a small business under § 1002.106(b), a financial institution may rely on an applicant’s representations regarding gross annual revenue, which may or may not include affiliates’ revenue.

4. Gross annual revenue for a startup business. In a typical startup business situation where the applicant has no gross annual revenue for its fiscal year preceding when the information is collected, the financial institution reports that the applicant’s gross annual revenue in the preceding fiscal year is “zero.” The financial institution shall not report pro forma projected revenue figures because these figures do not reflect actual gross revenue.

107(a)(15) NAICS Code

1. General. NAICS stands for North American Industry Classification System. The Office of Management and Budget has charged the Economic Classification Policy Committee with the maintenance and review of NAICS. A financial institution complies with § 1002.107(a)(15) if it uses the 3-digit NAICS subsector codes in effect on January 1 of the calendar year covered by the small business lending application register that it is reporting.

2. NAICS not provided by applicant and otherwise undetermined. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes NAICS code. However, if a financial institution is nonetheless unable to collect or otherwise determine a NAICS code for the applicant, the financial institution reports that the NAICS code is “not provided by applicant and otherwise undetermined.”

3. Safe harbor. As described in § 1002.112(c)(3) and comment 112(c)-2, a financial institution that obtains an incorrect NAICS code does not violate the Act or subpart B of this part if it either relies on an applicant’s representations or on an appropriate third-party source, in accordance with § 1002.107(b), regarding the NAICS code, or identifies the NAICS code itself, provided that the financial institution maintains procedures reasonably adapted to correctly identify a 3-digit NAICS code.

107(a)(17) Time in Business

1. Collecting time in business. A financial institution complies with § 1002.107(a)(17) by reporting the time the applicant has been in business.

i. If a financial institution collects or otherwise obtains the number of years an applicant has been in business as part of its procedures for evaluating an application for credit, it reports the time in business in whole years, rounded down to the nearest whole year.

ii. If a financial institution does not collect time in business as described in comment 107(a)(17)-1.i, but as part of its procedures determines whether or not the applicant’s time in business is less than two years, it reports the applicant’s time in business as either less than two years or two or more years in business.

iii. If a financial institution does not collect time in business as part of its procedures for evaluating an application for credit as described in comments 107(a)(17)-1.i or .ii, the financial institution complies with § 1002.107(a)(17) by asking the applicant whether it has been in existence for less than two years or two or more years and reporting the information provided by the applicant accordingly.

2. Time in business collected as part of the financial institution’s procedures for evaluating an application for credit. A financial institution that collects or obtains an applicant’s time in business as part of its procedures for evaluating an application for credit is not required to collect or obtain time in business pursuant to any particular definition of time in business for this purpose. For example, if the financial institution collects the number of years the applicant has existed (such as by asking the applicant when its business was started, or by obtaining the applicant’s date of incorporation from a Secretary of State or other State or Federal agency that registers or licenses businesses) as the time in business, the financial institution reports that information accordingly pursuant to comment 107(a)(17)-1.i. Similarly, if the financial institution collects the number of years of experience the applicant’s owners have in the current line of business, the financial institution reports that information accordingly pursuant to comment 107(a)(17)-1.i. If, however, the financial institution collects both the number of years the applicant has existed as well as some other measure of time in business (such as the number of years of experience the applicant’s owners have in the current line of business), the financial institution reports the number of years the applicant has existed as the time in business pursuant to comment 107(a)(17)-1.i.

3. Time in business not provided by applicant and otherwise undetermined. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes the applicant’s time in business. However, if a financial institution is nonetheless unable to collect or determine the applicant’s time in business, the financial institution reports that the time in business is “not provided by applicant and otherwise undetermined.”

107(a)(18) Minority-Owned and Women-Owned Business Statuses

1. General. A financial institution must ask an applicant whether it is a minority-owned and/or women-owned business. The financial institution must permit an applicant to refuse (i.e., decline) to answer the financial institution’s inquiry regarding business status and must inform the applicant that the applicant is not required to provide the information. See the sample data collection form in appendix E to this part for sample language for providing this notice to applicants. The financial institution must report the applicant’s substantive response regarding each business status, that the applicant declined to answer the inquiry (that is, selected an answer option of “I do not wish to provide this information” or similar), or its failure to respond to the inquiry (that is, “not provided by applicant”), as applicable.

2. Definitions. When inquiring about minority-owned and women-owned business statuses (regardless of whether the request is made on a paper form, electronically, or orally), the financial institution also must provide the applicant with definitions of the terms “minority-owned business” and “women-owned business” as set forth in § 1002.102 (m) and (s), respectively. The financial institution satisfies this requirement if it provides the definitions as set forth in the sample data collection form in appendix E.

3. Combining questions. A financial institution may combine on the same paper or electronic data collection form the questions regarding minority-owned and women-owned business status pursuant to § 1002.107(a)(18) with principal owners’ ethnicity, race, and sex pursuant to § 1002.107(a)(19) and the applicant’s number of principal owners pursuant to § 1002.107(a)(20). See the sample data collection form in appendix E.

4. Notices. When requesting minority-owned and women-owned business statuses from an applicant, a financial institution must inform the applicant that the financial institution cannot discriminate on the basis of the applicant’s minority-owned or women-owned business statuses, or on whether the applicant provides its minority-owned or women-owned business statuses. A financial institution must also inform the applicant that Federal law requires it to ask for an applicant’s minority-owned and women-owned business statuses to help ensure that all small business applicants for credit are treated fairly and that communities’ small business credit needs are being fulfilled. A financial institution may combine these notices regarding minority-owned and women-owned business statuses with the notices that a financial institution is required to provide when requesting principal owners’ ethnicity, race, and sex if a financial institution requests information pursuant to § 1002.107(a)(18) and (19) in the same data collection form or at the same time. See the sample data collection form in appendix E for sample language that a financial institution may use for these notices.

5. Maintaining the record of an applicant’s response regarding minority-owned and women-owned business statuses separate from the application. A financial institution must maintain the record of an applicant’s responses to the financial institution’s inquiry pursuant to § 1002.107(a)(18) separate from the application and accompanying information. See § 1002.111(b) and comment 111(b)-1. If the financial institution provides a paper or electronic data collection form, the data collection form must not be part of the application form or any other document that the financial institution uses to provide or collect any information other than minority-owned business status, women-owned business status, principal owners’ ethnicity, race, and sex, and the number of the applicant’s principal owners. See the sample data collection form in appendix E. For example, if the financial institution sends the data collection form via email, the data collection form should be a separate attachment to the email or accessed through a separate link in the email. If the financial institution uses a web-based data collection form, the form should be on its own page.

6. Minority-owned and/or women-owned business statuses not provided by applicant. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes the applicant’s minority-owned and women-owned business statuses. However, if a financial institution does not receive a response to the financial institution’s inquiry pursuant to § 1002.107(a)(18), the financial institution reports that the applicant’s business statuses were “not provided by applicant.”

7. Applicant declines to provide information about minority-owned and/or women-owned business statuses. If the applicant declines to provide information about an applicant’s minority-owned and women-owned business statuses by selecting an answer option of “I do not wish to provide this information” or similar on a paper or electronic form, a financial institution reports that the applicant responded that it did not wish to provide the information. The financial institution also reports an applicant’s refusal to provide such information in this way, if the applicant orally declines to provide such information for a covered application taken by telephone or another medium that does not involve providing any paper or electronic forms.

8. Conflicting responses provided by applicants. If the applicant both provides a substantive response to the financial institution’s inquiry regarding business status (that is, indicates that it is a minority-owned and/or women-owned business, or checks “none apply” or similar) and also checks the box indicating “I do not wish to provide this information” or similar, the financial institution reports that the applicant declined to provide the information.

9. No verification of business statuses. NNotwithstanding § 1002.107(b), a financial institution must report the applicant’s substantive response(s), that the applicant declined to answer the inquiry (that is, selected an answer option of “I do not wish to provide this information” or similar), or the applicant’s failure to respond to the inquiry (that is, that the information was “not provided by applicant”) pursuant to § 1002.107(a)(18), even if the financial institution verifies or otherwise obtains an applicant’s minority-owned and/or women-owned business statuses for other purposes. For example, if a financial institution uses a paper data collection form to ask an applicant if it is a minority-owned business and/or a women-owned business, and the applicant does not indicate that it is a minority-owned business, the financial institution must not report that the applicant is a minority-owned business, even if the applicant indicates that it is a minority-owned business for other purposes, such as for a special purpose credit program or a Small Business Administration program.

107(a)(19) Ethnicity, Race, and Sex of Principal Owners

1. General. A financial institution must ask an applicant to provide its principal owners’ ethnicity, race, and sex. The financial institution must permit an applicant to refuse (i.e., decline) to answer the financial institution’s inquiry and must inform the applicant that it is not required to provide the information. See the sample data collection form in appendix E to this part for sample language for providing this notice to applicants. The financial institution must report the applicant’s substantive responses regarding principal owners’ ethnicity, race, and sex, that the applicant declined to answer an inquiry (that is, selected an answer option of “I do not wish to provide this information” or similar), or its failure to respond to an inquiry (that is, “not provided by applicant”), as applicable. The financial institution must report an applicant’s responses about its principal owners’ ethnicity, race, and sex, regardless of whether an applicant declines or fails to answer an inquiry about the number of its principal owners under § 1002.107(a)(20). If an applicant provides some, but not all, of the requested information about the ethnicity, race, and sex of a principal owner, the financial institution reports the information that was provided by the applicant and reports that the applicant declined to provide or did not provide (as applicable) the remainder of the information. See comments 107(a)(19)-6 and-7.

2. Definition of principal owner. When requesting a principal owner’s ethnicity, race, and sex, the financial institution must also provide the applicant with the definition of the term “principal owner” as set forth in § 1002.102(o). The financial institution satisfies this requirement if it provides the definition of principal owner as set forth in the sample data collection form in appendix E.

3. Combining questions. A financial institution may combine on the same paper or electronic data collection form the questions regarding the principal owners’ ethnicity, race, and sex pursuant to § 1002.107(a)(19) with the applicant’s number of principal owners pursuant to § 1002.107(a)(20) and the applicant’s minority-owned and women-owned business statuses pursuant to § 1002.107(a)(18). See the sample data collection form in appendix E.

4. Notices. When requesting a principal owner’s ethnicity, race, and sex from an applicant, a financial institution must inform the applicant that the financial institution cannot discriminate on the basis of a principal owner’s ethnicity, race, or sex, or on whether the applicant provides the information. A financial institution must also inform the applicant that Federal law requires it to ask for the principal owners’ ethnicity, race, and sex to help ensure that all small business applicants for credit are treated fairly and that communities’ small business credit needs are being fulfilled. A financial institution may combine these notices with the similar notices that a financial institution is required to provide when requesting minority-owned business status and women-owned business status, if a financial institution requests information pursuant to § 1002.107(a)(18) and (19) in the same data collection form or at the same time. See the sample data collection form in appendix E for sample language that a financial institution may use for these notices.

5. Maintaining the record of an applicant’s responses regarding principal owners’ ethnicity, race, and sex separate from the application. A financial institution must maintain the record of an applicant’s response to the financial institution’s inquiries pursuant to § 1002.107(a)(19) separate from the application and accompanying information. See § 1002.111(b) and comment 111(b)-1. If the financial institution provides a paper or electronic data collection form, the data collection form must not be part of the application form or any other document that the financial institution uses to provide or collect any information other than minority-owned business status, women-owned business status, principal owners’ ethnicity, race, and sex, and the number of the applicant’s principal owners. See the sample data collection form in appendix E for sample language. For example, if the financial institution sends the data collection form via email, the data collection form should be a separate attachment to the email or accessed through a separate link in the email. If the financial institution uses a web-based data collection form, the form should be on its own page.

6. Ethnicity, race, or sex of principal owners not provided by applicant. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes the ethnicity, race, and sex of an applicant’s principal owners. However, if an applicant does not provide the information, such as in response to a request for a principal owner’s ethnicity, race, or sex on a paper or electronic data collection form, the financial institution reports the ethnicity, race, or sex (as applicable) as “not provided by applicant” for that principal owner. For example, if the financial institution provides a paper data collection form to an applicant with two principal owners, and asks the applicant to complete and return the form but the applicant does not do so, the financial institution reports that the two principal owners’ ethnicity, race, and sex were “not provided by applicant.” Similarly, if the financial institution provides an electronic data collection form, the applicant indicates that it has two principal owners, the applicant provides ethnicity, race, and sex for the first principal owner, and the applicant does not make any selections for the second principal owner’s ethnicity, race, and sex, the financial institution reports the ethnicity, race, and sex that the applicant provided for the first principal owner and reports that each of the ethnicity, race, and sex for the second principal owner was “not provided by applicant.” Additionally, if the financial institution provides an electronic or paper data collection form, the applicant indicates that it has one principal owner, provides the principal owner’s ethnicity and sex information, but does not provide information about the principal owner’s race and also does not select a response of “I do not wish to provide this information” with regard to race, the financial institution reports the ethnicity and sex provided by the applicant and reports that the race of the principal owner was “not provided by applicant.”

7. Applicant declines to provide information about a principal owner’s ethnicity, race, or sex. If the applicant declines to provide information about a principal owner’s ethnicity, race, or sex (as applicable), by selecting an answer option of “I do not wish to provide this information” or similar on a paper or electronic form, a financial institution reports that the applicant responded that it did not wish to provide the information. The financial institution also reports an applicant’s refusal to provide such information in this way, if the applicant orally declines to provide such information for a covered application taken by telephone or another medium that does not involve providing any paper or electronic forms.

8. Conflicting responses provided by applicant. If the applicant both provides a substantive response to a request for a principal owner’s ethnicity, race, or sex (that is, identifies a principal owner’s ethnicity, race, or sex) and also checks the box indicating “I do not wish to provide this information” or similar, the financial institution reports that the applicant declined provide the information. For example, if an applicant is completing a paper data collection form and indicates that a principal owner’s sex is female and also indicates on the form that the applicant does not wish to provide information regarding that principal owner’s sex, the financial institution reports that the applicant declined to provide the information.

9. No verification of ethnicity, race, and sex of principal owners. Notwithstanding § 1002.107(b), a financial institution must report the applicant’s substantive responses as to its principal owners’ ethnicity, race, and sex (that is, the applicant’s identification of its principal owners’ race, ethnicity, and sex), that the applicant declined to answer the inquiry (that is, selected an answer option of “I do not wish to provide this information” or similar), or the applicant’s failure to respond to the inquiry (that is, the information was “not provided by applicant”) pursuant to § 1002.107(a)(19), even if the financial institution verifies or otherwise obtains the ethnicity, race, or sex of the applicant’s principal owners for other purposes.

10. Reporting for fewer than four principal owners. If an applicant has fewer than four principal owners, the financial institution reports ethnicity, race, and sex information for the number of principal owners that the applicant has and reports the ethnicity, race, and sex fields for additional principal owners as “not applicable.” For example, if an applicant has only one principal owner, the financial institution reports ethnicity, race, and sex information for the first principal owner and reports as “not applicable” the ethnicity, race, and sex data fields for principal owners two through four.

11. Previously collected ethnicity, race, and sex information. If a financial institution reports one or more principal owners’ ethnicity, race, or sex information based on previously collected data under § 1002.107(d), the financial institution does not need to collect any additional ethnicity, race, or sex information for other principal owners (if any). See also comment 107(d)-9.

12. Guarantors. A financial institution does not collect or report a guarantor’s ethnicity, race, or sex unless the guarantor is also a principal owner of the applicant, as defined in § 1002.102(o).

13. Ethnicity.

i. Aggregate categories. A financial institution must permit an applicant to provide each principal owner’s ethnicity for purposes of § 1002.107(a)(19) using the following aggregate categories or allow the applicant to decline to provide such information for a principal owner if it so chooses:

A. Hispanic or Latino.

B. Not Hispanic or Latino.

14. Race.

i. Aggregate categories. A financial institution must permit an applicant to provide each principal owner’s race for purposes of § 1002.107(a)(19) using one or more of the following aggregate categories, or allow the applicant to decline to provide such information for a principal owner if it so chooses:

A. American Indian or Alaska Native.

B. Asian.

C. Black or African American.

D. Native Hawaiian or Other Pacific Islander.

E. White.

ii. [Reserved].

iii. Selecting multiple categories. The financial institution must permit the applicant to select as many aggregate categories as the applicant chooses. If an applicant provides race information for a principal owner, the financial institution reports all of the aggregate categories provided by the applicant. For example, if an applicant selects two aggregate categories for a principal owner, the financial institution reports the two aggregate categories that the applicant selected.

15. Sex. A financial institution must permit an applicant to provide each principal owner’s sex for purposes of § 1002.107(a)(19) using the categories male or female, or allow the applicant to decline to provide such information about a principal owner if it so chooses.

16. Ethnicity, race, and sex information requested orally. As described in comments 107(a)(19)-13 and -14, when collecting principal owners’ ethnicity, race, and sex pursuant to § 1002.107(a)(19), a financial institution must present the applicant with the specified ethnicity, race, and sex categories. When collecting ethnicity, race, and sex information orally, such as by telephone, a financial institution must present to the applicant the option to decline to provide ethnicity, race, and sex information before listing the aggregate ethnicity, race, and sex categories.

i. [Reserved].

ii. More than one principal owner. If an applicant has more than one principal owner, the financial institution is permitted to ask about ethnicity and race in a manner that reduces repetition when collecting ethnicity and race information orally, such as by telephone. For example, if an applicant has two principal owners, the financial institution may ask for both principal owners’ ethnicity at the same time, rather than asking about ethnicity, race, and sex for the first principal owner followed by ethnicity, race, and sex for the second principal owner.

107(a)(20) Number of Principal Owners

1. General. If the financial institution asks the applicant to provide the number of its principal owners pursuant to § 1002.107(a)(20), a financial institution must provide the definition of principal owner set forth in § 1002.102(o). The financial institution satisfies this requirement if it provides the definition of principal owner as set forth in the sample data collection form in appendix E.

2. Number of principal owners provided by applicant; verification of number of principal owners. The financial institution may rely on statements or information provided by the applicant in collecting and reporting the number of the applicant’s principal owners. However, pursuant to § 1002.107(b), if the financial institution verifies the number of principal owners provided by the applicant, it must report the verified information.

3. Number of principal owners not provided by applicant and otherwise undetermined. Pursuant to § 1002.107(c), a financial institution shall maintain procedures reasonably designed to collect applicant-provided data, which includes the number of principal owners of the applicant. However, if a financial institution is nonetheless unable to collect or otherwise determine the applicant’s number of principal owners, the financial institution reports that the number of principal owners is “not provided by applicant and otherwise undetermined.”

107(b) Reliance on and Verification of Applicant-Provided Data

1. Reliance on information provided by an applicant or appropriate third-party sources. A financial institution may rely on statements made by an applicant (whether made in writing or orally) or information provided by an applicant when compiling and reporting data pursuant to subpart B of this part for applicant-provided data; the financial institution is not required to verify those statements or that information. However, if the financial institution does verify applicant statements or information for its own business purposes, such as statements relating to gross annual revenue or time in business, the financial institution reports the verified information. Depending on the circumstances and the financial institution’s procedures, certain applicant-provided data can be collected from appropriate third-party sources without a specific request from the applicant, and such information may also be relied on. For example, gross annual revenue or NAICS code may be collected from tax return documents; a financial institution may also collect an applicant’s NAICS code using third-party sources such as business information products. Applicant-provided data are the data that are or could be provided by the applicant, including § 1002.107(a)(5) through (7), (13) through (15), and (17) through (20). See comment 107(c)(1)-3. In regard to restrictions on verification of minority-owned and women-owned business statuses, and principal owners’ ethnicity, race, and sex, see comments 107(a)(18)-9 and 107(a)(19)-9.

107(c) Time and Manner of Collection

107(c)(1) In General

1. Procedures. The term “procedures” refers to the actual practices followed by a financial institution as well as its stated procedures. For example, if a financial institution’s stated procedure is to collect applicant-provided data on or with a paper application form, but employees encourage applicants to skip the page that asks whether the applicant is a minority-owned business or a women-owned business under § 1002.107(a)(18), the financial institution’s procedures are not reasonably designed to obtain a response.

2. Latitude to design procedures. A financial institution has flexibility to establish procedures concerning the timing and manner in which it collects applicant-provided data that work best for its particular lending model and product offerings, provided those procedures are reasonably designed to collect the applicant-provided data in § 1002.107(a), as required pursuant to § 1002.107(c)(1), and where applicable comply with the minimum requirements set forth in § 1002.107(c)(2).

3. Applicant-provided data. Applicant-provided data are the data that are or could be provided by the applicant, including § 1002.107(a)(5) (credit type), (a)(6) (credit purpose), (a)(7) (amount applied for), (a)(13) (address or location for purposes of determining census tract), (a)(14) (gross annual revenue), (a)(15) (NAICS code, or information about the business such that the financial institution can determine the applicant’s NAICS code),(a)(17) (time in business), (a)(18) (minority-owned and women-owned business statuses), (a)(19) (ethnicity, race, and sex of the applicant’s principal owners), and (a)(20) (number of principal owners). Applicant-provided data do not include data that are generated or supplied only by the financial institution, including § 1002.107(a)(1) (unique identifier), (a)(2) (application date), (a)(8) (amount approved or originated), (a)(9) (action taken), (a)(10) (action taken date), and (a)(13) (census tract, based on address or location provided by the applicant).

4. Collecting applicant-provided data without a direct request to the applicant. Depending on the circumstances and the financial institution’s procedures, certain applicant-provided data can be collected without a direct request to the applicant. For example, credit type may be collected based on the type of product chosen by the applicant. Similarly, a financial institution may rely on appropriate third-party sources to collect certain applicant-provided data. See § 1002.107(b) concerning the use of third-party sources.

5. Data updated by the applicant. A financial institution reports updated data if it obtains more current data from the applicant during the application process. For example, if an applicant states its gross annual revenue for the preceding fiscal year was $900,000, but then the applicant notifies the financial institution that its revenue in the preceding fiscal year was actually $950,000, the financial institution reports gross annual revenue of $950,000. For reporting verified applicant-provided data, see § 1002.107(b) and comment 107(b)-1. If a financial institution has already verified data and then the applicant updates it, the financial institution reports the information it believes to be more accurate, in its discretion. If a financial institution receives updates from the applicant after the application process has closed (for example, after closing or account opening), the financial institution may, at its discretion, update the data at any time prior to reporting the covered application to the Bureau.

107(c)(2) Applicant-Provided Data Collected Directly From the Applicant

1. In general. Whether a financial institution’s procedures are reasonably designed to collect applicant-provided data is a fact-based determination and may depend on the financial institution’s particular lending model, product offerings, and other circumstances; procedures that are reasonably designed to obtain a response may therefore require additional provisions beyond the minimum criteria set forth in § 1002.107(c)(2). In general, reasonably designed procedures should make applicant-provided data available for collection. While the requirements of § 1002.107(c)(2) do not apply to applicant-provided data that a financial institution obtains without a direct request to the applicant, as explained in comment 107(c)(1)-4, in such instances, a covered financial institution must still comply with § 1002.107(c)(1).

2. Specific components.

i. Timing of initial collection attempt. While a financial institution has some flexibility concerning when applicant-provided data are collected, it should attempt to make the initial request for applicant-provided data before notifying an applicant of final action taken on a covered application. Generally, the earlier in the application process the financial institution initially seeks to collect applicant-provided data, the more likely the timing of collection is reasonably designed to obtain a response. However, under certain circumstances making an initial collection attempt before a decision is made on the application may not be feasible because the party that must report the transaction might not be in direct contact with the applicant before making a decision on the application. For example, comments 109(a)(3)-2.v and 109(a)(3)-2.vi (with respect to Financial Institutions B and C) describe scenarios in which a financial institution makes a credit decision on an application forwarded by an intermediary and therefore might not have direct contact with the applicant. Therefore, a financial institution’s procedure still may be considered reasonably designed to obtain a response if it makes the initial request after notifying the applicant of final action, provided that the financial institution may not feasibly collect data from the applicant prior to that notification because, for instance, it has had no direct contact with the applicant. This flexibility is intended for transactions where the lack of direct contact is inherent to the business model; a financial institution may not purposefully structure its application process to avoid direct contact with the applicant in order to delay the collection of data.

ii. Applicant-Provided Data Collected Directly From the Applicant. Pursuant to § 1002.107(c)(2)(ii), a financial institution must make a reasonable attempt to ensure an applicant actually sees, hears, or is otherwise presented with the request for applicant-provided data. A financial institution does not have reasonably designed procedures if it obscures, prevents, or inhibits an applicant from accessing or reviewing a request for applicant-provided data.

iii. [Reserved].

iv. The applicant can easily provide a response. Pursuant to § 1002.107(c)(2)(iv), a financial institution must structure the request for information in a manner that makes it easy for the applicant to provide a response. For example, a financial institution requests applicant-provided data in the same format as other information required for the covered application, provides applicants multiple methods to provide or return applicant-provided data (for example, on a written form, through a web portal, or through other means), or provides the applicant some other type of straightforward and seamless method to provide a response. Conversely, a financial institution must avoid imposing unnecessary burden on an applicant to provide the information requested or requiring the applicant to take steps that are inconsistent with the rest of its application process. For example, a financial institution does not have reasonably designed procedures if it collects application information related to its own creditworthiness determination in electronic form, but mails a paper form to the applicant initially seeking the data required under § 1002.107(a) that the financial institution does not otherwise need for its creditworthiness determination and requiring the applicant to mail it back. On the other hand, a financial institution complies with § 1002.107(c)(2)(iv) if, at its discretion, it requests the applicant to respond to inquiries made pursuant to § 1002.107(a)(18) and (19) through a reasonable method intended to keep the applicant’s responses discrete and protected from view.

v. Multiple requests for applicant-provided data. A financial institution is permitted, but not required, to make more than one attempt to obtain applicant-provided data if the applicant does not respond to an initial request. For example, if an applicant initially does not respond when asked early in the application process (before notifying the applicant of final action taken on the application, pursuant to § 1002.107(c)(2)(i)) to inquiries made pursuant to § 1002.107(a)(18) and (19), a financial institution may request this information again, for example, during a subsequent in-person meeting with the applicant or after notifying the applicant of final action taken on the covered application.

107(d) Previously Collected Data

1. In general. A financial institution may, for the purpose of reporting such data pursuant to § 1002.109, reuse certain previously collected data if the requirements of § 1002.107(d) are met. In that circumstance, a financial institution need not seek to collect the data anew in connection with a subsequent covered application to satisfy the requirements of this subpart. For example, if an applicant applies for and is granted a term loan, and then subsequently applies for a credit card in the same calendar year, the financial institution need not request again the data specified in § 1002.107(d). Similarly, if an applicant applies for more than one covered credit transaction at one time, a financial institution need only ask once for the data specified in § 1002.107(d).

2. Data that can be reused. Subject to the requirements of § 1002.107(d), a financial institution may reuse the following data: § 1002.107(a)(13) (address or location for purposes of determining census tract), § 1002.107(a)(14) (gross annual revenue) (subject to comment 107(d)-7), § 1002.107(a)(15) (NAICS code), § 1002.107(a)(17) (time in business) (subject to comment 107(d)-8), § 1002.107(a)(18) (minority-owned and women-owned business statuses) (subject to comment 107(d)-9), § 1002.107(a)(19) (ethnicity, race, and sex of applicant’s principal owners) (subject to comment 107(d)-9), and § 1002.107(a)(20) (number of principal owners). A financial institution is not, however, permitted to reuse other data, such as § 1002.107(a)(6) (credit purpose).

3. Previously reported data without a substantive response. Data have not been “previously collected” within the meaning of § 1002.107(d) if the applicant did not provide a substantive response to the financial institution’s request for that data and the financial institution was not otherwise able to obtain the requested data (for example, from the applicant’s credit report, or tax returns).

4. Updated data. If, after the application process has closed on a prior covered application, a financial institution obtains updated information relevant to the data required to be collected and reported pursuant to § 1002.107(a)(13) through (15) and (17) through (20), and the applicant subsequently submits a new covered application, the financial institution must use the updated information in connection with the new covered application (if the requirements of § 1002.107(d) are otherwise met) or seek to collect the data again. For example, if a business notifies a financial institution of a change of address of its sole business location, and subsequently submits a covered application within the time period specified in § 1002.107(d)(1) for reusing previously collected data, the financial institution must report census tract based on the updated information. In that circumstance, the financial institution may still reuse other previously collected data to satisfy § 1002.107(a)(14), (15), and (17) through (20) if the requirements of § 1002.107(d) are met.

5. Collection within the preceding 36 months. Pursuant to § 1002.107(d)(1), data can be reused to satisfy § 1002.107(a)(13), (15), and (17) through (20) if they are collected within the preceding 36 months. A financial institution may measure the 36-month period from the date of final action taken (§ 1002.107(a)(9)) on a prior application to the application date (§ 1002.107(a)(2)) on a subsequent application. For example, if a financial institution takes final action on an application on February 1, 2027, it may reuse certain previously collected data pursuant to § 1002.107(d)(1) for subsequent covered applications dated or received by the financial institution through January 31, 2030.

6. Reason to believe data are inaccurate. Whether a financial institution has reason to believe data are inaccurate pursuant to § 1002.107(d)(2) depends on the particular facts and circumstances. For example, a financial institution may have reason to believe data on the applicant’s minority-owned business status or women-owned business status may be inaccurate if it knows that the applicant has had a change in ownership or a change in an owner’s percentage of ownership.

7. Collection of gross annual revenue in the same calendar year. Pursuant to § 1002.107(d)(1), gross annual revenue information can be reused to satisfy § 1002.107(a)(14) provided it is collected in the same calendar year as the current covered application, as measured from the application date. For example, if an application is received and gross annual revenue is collected in connection with a covered application in one calendar year, but then final action was taken on the application in the following calendar year, the data may only be reused for the calendar year in which it was collected and not the calendar year in which final action was taken on the application. However, if an application is received and gross annual revenue is collected in connection with a covered application in one calendar year, a financial institution may reuse that data pursuant to § 1002.107(d) in a subsequent application initiated in the same calendar year, even if final action was taken on the subsequent application in the following calendar year.

8. Time in business. A financial institution that decides to reuse previously collected data to satisfy § 1002.107(a)(17) (time in business) must update the data to reflect the passage of time since the data were collected. If a financial institution only knows that the applicant had been in business less than two years at the time the data was initially collected, as described in comment 107(a)(17)-1.ii or iii, it updates the data based on the assumption that the applicant had been in business for 12 months at the time of the prior collection. For example:

i. If a financial institution previously collected data on a prior covered application that the applicant has been in business for four years, and then seeks to reuse that data for a subsequent covered application submitted one year later, it must update the data to reflect that the applicant has been in business for five years.

ii. If a financial institution previously collected data on a prior covered application that the applicant had been in business less than two years (and was not aware of the business’s actual length of time in business at the time), and then seeks to reuse that data for a subsequent covered application submitted 18 months later, the financial institution reports time in business on the subsequent covered application as over two years in business.

9. Minority-owned business status, women-owned business status, and principal owners’ ethnicity, race, and sex. A financial institution may not reuse data to satisfy § 1002.107(a)(18) and (19) unless the data were collected in connection with a prior covered application pursuant to this subpart B. If the financial institution previously asked the applicant to provide its minority-owned business status and women-owned business status, and principal owners’ ethnicity, race, and sex for purposes of § 1002.107(a)(18) and (19), and the applicant declined to provide the information (such as by selecting “I do not wish to provide this information” or similar on a data collection form or by telling the financial institution that it did not wish to provide the information), the financial institution may use that response when reporting data for a subsequent application pursuant to § 1002.107(d). However, if the applicant failed to respond (such as by leaving the response to the question blank or by failing to return a data collection form), the financial institution must inquire about the applicant’s minority-owned business status, women-owned business status, and principal owners’ ethnicity, race, or sex, as applicable, in connection with a subsequent application because the data were not previously obtained. See also comment 107(a)(19)-11 concerning previously collected ethnicity, race, and sex information.