Two regulators are moving in opposite directions on the same underlying question: does a lending rule count for anything if nobody checks whether it's actually running. In the United States, a federal court has frozen the CFPB's open banking rule while the agency rewrites it. In India, the Reserve Bank has set June 30 as the date by which every digital lender must show its borrower protections are live, not just written down.
The US: a rule with a compliance date and no enforcement behind it
The CFPB finalized its Personal Financial Data Rights rule, built on Section 1033 of the Dodd-Frank Act, in October 2024. It set a phased compliance schedule beginning April 1, 2026, for the largest banks and data providers, meant to give consumers a right to their own financial data and let them authorize third parties, including fintechs, to pull it.
That schedule never took effect as planned. On October 29, 2025, the US District Court for the Eastern District of Kentucky enjoined the CFPB from enforcing the rule, ruling in favor of Forcht Bank, the Kentucky Bankers Association and the Bank Policy Institute. Judge Danny Reeves found the plaintiffs were likely to succeed on their claim that the rule exceeded the CFPB's statutory authority, reasoning that Section 1033 lets banks share data with consumers and their fiduciaries, not with commercial third parties such as fintech companies, and that the Bureau hadn't adequately weighed the security risk of the sharing arrangements it was requiring, according to PYMNTS.
The practical effect: the April 2026 deadline passed without becoming a binding trigger, and the ruling froze compliance dates that would otherwise have forced some institutions to be ready by June 2026, per Cozen O'Connor's client alert on the case. The CFPB opened an Advance Notice of Proposed Rulemaking in August 2025 to reconsider the rule and has since sent a new proposal to the Office of Information and Regulatory Affairs for review, according to Consumer Finance Monitor's June 26 coverage of the reconsideration process. The rule remains on the books in the Code of Federal Regulations. It is simply unenforceable until the rewrite lands.
Banks describe this as relief from wasted compliance spend on a rule that might change shape. Fintech trade groups have said the opposite: that freezing implementation delays a system where consumers can actually move their own data. Both sides are, in effect, waiting on the same open question, which is what a rewritten Section 1033 rule will require and when.
India: the deadline is not the release, it's the demonstration
The RBI took a different approach entirely, one aimed less at defining new rights and more at forcing existing ones to actually function. The Reserve Bank of India (Digital Lending) Directions, 2025 took effect on May 8, 2025, consolidating the RBI's 2022 digital lending guidelines, its default loss guarantee framework, and its outsourcing rules for digital channels into a single set of directions covering all regulated entities involved in digital lending, per S.S. Rana & Co.'s summary of the notification.
The directions require loan disbursal and repayment to flow directly between the borrower's bank account and the regulated entity, a standardized Key Fact Statement before a loan is sanctioned, a capped default loss guarantee between the lender and any lending service provider, and a cooling-off period for borrowers. Reporting requirements for digital lending apps took effect June 15, 2025, and multi-lender arrangement provisions took effect November 1, 2025.
What makes this relevant to a June 18 read is the deadline sitting less than two weeks out. By June 30, 2026, regulated entities must demonstrate operational compliance, meaning functioning systems, live disclosures and working grievance-redressal mechanisms, not policy documents that describe them. Complaints must be resolved within 30 days; if a lender misses that window, the borrower can escalate directly to the RBI's Ombudsman.
The distinction between the two regulators' approaches is the story. The CFPB wrote a rule and then had it stopped in court before enforcement began. The RBI wrote a rule over a year ago and is now checking whether the systems behind it are real. One country is stuck on whether the rule survives judicial review. The other has moved past that question and is auditing operational reality.
Why the split matters beyond either country
Embedded finance providers building for both markets are now working against two very different compliance clocks. In the US, the operative question is legal: will Section 1033 survive in something close to its current form, or will the CFPB's rewrite narrow who counts as an authorized third party. Fintechs that built data-sharing infrastructure anticipating the original rule now have no enforcement deadline to build against.
In India, the question is operational: can a lender's grievance-redressal system actually close a complaint in 30 days, and can it prove it. That is a harder bar to fake and a shorter runway to clear. Digital lending platforms that treated the May 2025 directions as a documentation exercise have roughly two weeks left to make that true in practice.
What to watch next
The CFPB's new Section 1033 proposal, now under OIRA review, will set the terms of the next fight once it reaches the Federal Register for public comment. In India, expect the RBI to publish enforcement data or supervisory findings tied to the June 30 deadline, which will show whether "operationally live" was a real bar or a soft one.
Sources: Court Halts CFPB's Open Banking Rule as Banks, FinTechs Await Rewrite (PYMNTS) · Section 1033 Compliance Date: Open Banking Rule Enjoined and Under Reconsideration (Cozen O'Connor via JD Supra) · Open banking regulation in 2026: federal regulation resurfaces (Consumer Finance Monitor) · RBI Introduced Digital Lending Direction, 2025 (S.S. Rana & Co.) · RBI Digital Lending Guidelines 2025: Key Rules & CIMS Portal (Lawrbit)