Skip to content
RiskTemplates · The Daily Brief Saturday, July 25, 2026
Wire FinCEN's Student Aid Fraud Alert: The ACH Refund Pattern Banks Need to Tune Now JUL 23

Feature Regulatory Compliance

10 Days to July 21: The SPCP Changes Every For-Profit Lender Missed in the Reg B Overhaul

While everyone was reading about disparate impact, a harder compliance problem was buried in the CFPB's Reg B overhaul: for-profit lenders can no longer use race, national origin, or sex as SPCP eligibility criteria. Here's the checklist before July 21.

Table of Contents

TL;DR

  • The CFPB’s July 21, 2026 Reg B final rule prohibits for-profit creditors from using race, color, national origin, or sex as eligibility criteria in Special Purpose Credit Programs — a change that got buried under the disparate-impact headlines
  • The CFPB simultaneously rescinded its 2020 SPCP advisory opinion (June 17, 2026), eliminating the explicit safe harbor that let for-profit institutions use race-based SPCP criteria
  • Programs already extended before July 21 are grandfathered; credit extended on or after that date under a noncompliant SPCP is not
  • Ten days left: audit your SPCP written plans, identify race/sex/national origin eligibility criteria, and restructure or sunset affected programs before the deadline

The CFPB’s April 2026 Regulation B overhaul generated weeks of analysis. Disparate impact is gone from ECOA. AI credit models still need explainable adverse action notices. The Fair Housing Act still applies to mortgage lending. Every compliance team in financial services read at least one memo on this.

Most of them missed the SPCP provision.

Buried inside the same final rule — published April 22, 2026, effective July 21 — is a change that directly affects any for-profit lender with a Special Purpose Credit Program. If your institution runs an SPCP with eligibility criteria that reference race, national origin, sex, or color, that program is noncompliant in ten days.

And on June 17, 2026, the CFPB made it worse. The Bureau rescinded its 2020 advisory opinion on SPCPs — the opinion that had explicitly told lenders that ECOA permits race and national origin as common characteristics in for-profit programs designed to serve underserved communities. That safe harbor is gone. The rule and the rescission together close a door that many compliance teams didn’t know was still open.


What the 2020 Advisory Opinion Said — and Why the CFPB Pulled It

The CFPB’s 2020 advisory opinion was a response to a real gap in Reg B’s SPCP guidance. For-profit lenders who wanted to create targeted credit programs for underserved communities faced uncertainty about whether using race or national origin as eligibility criteria would violate ECOA’s anti-discrimination provisions. The 2020 opinion resolved that ambiguity by clarifying that ECOA permits for-profit organizations to use race, national origin, and sex as common program characteristics — specifically to help members of those groups who would not otherwise qualify for credit.

Community banks and CDFIs relied on this. Minority business lending programs, lending circles for underbanked immigrants, programs targeting women entrepreneurs — many were structured with explicit demographic eligibility criteria under the safe harbor the 2020 opinion provided.

The April 2026 final rule flatly contradicts the 2020 position. New § 1002.8(b)(3) prohibits any SPCP offered or participated in by a for-profit organization from using the common characteristic of race, color, national origin, or sex — or any combination thereof — as a factor in determining eligibility for the program.

The 2020 opinion was rescinded on June 17, 2026, published in the Federal Register at 36518-36520. The Bureau’s stated reason: the advisory opinion no longer reflects current law because the April rule amended SPCP provisions in material ways the opinion simply did not address. The explicit conflict cited: the 2020 opinion stated that participants “may be required to share one or more common characteristics (for example, race, national origin, or sex).” The April rule now prohibits exactly that for for-profit programs. The CFPB also cited constitutional concerns: courts scrutinize government involvement in programs that classify individuals by race, sex, or national origin. Rescission, the Bureau said, helps address potential constitutional issues.

Whatever the legal theory, the practical effect is the same. The safe harbor is gone. Programs built on it need to change.


Who This Affects

The rule restricts for-profit organizations — banks, credit unions structured as for-profits, fintech lenders, CDFI loan funds organized as for-profit entities, and for-profit minority depository institutions. Nonprofit CDFIs and nonprofit community development organizations operating SPCPs under § 1002.8(a)(2) are not subject to the new prohibition on protected-class eligibility characteristics.

That distinction matters for institutional structure decisions. A for-profit bank that partners with a nonprofit CDFI on an SPCP should get explicit legal analysis of whether the for-profit restriction applies to the arrangement as a whole.

Programs most likely affected:

  • Minority business enterprise (MBE) lending programs that explicitly require the borrower to be a racial or ethnic minority-owned business as an eligibility condition
  • Women-owned business lending programs with sex-based eligibility criteria at the business-owner level
  • Immigrant and underbanked community programs with national-origin eligibility requirements
  • CRA-motivated credit programs designed to generate credit for minority borrower lending that used protected-class status as the eligibility shortcut
  • Diversity-focused personal loan programs with race or national origin eligibility criteria at the consumer level

If your institution has an SPCP, pull the written plan now. If the eligibility section uses any of the four prohibited characteristics — race, color, national origin, sex — as a common characteristic of program participants, the program needs to change before July 21.


The Tightened “Would Not Receive Credit” Standard

The Reg B overhaul also tightened a second SPCP element that’s been under-examined. Under prior guidance, for-profit SPCPs could rely on statistical assumptions or group-level evidence to establish that program participants were disadvantaged in the conventional credit market — that they “probably would not” qualify for credit without the SPCP.

The April 2026 rule raised that bar. New § 1002.8(b)(4) requires that for-profit creditors provide evidence for each participant that the participant would not receive the relevant credit absent the program, based on that participant’s specific characteristics.

This matters for programs using other permitted common characteristics — income, census-tract residence, length of credit history, employment sector. If your SPCP uses a neutral characteristic as the common trait, your documentation process needs to show individualized underwriting assessment, not a statistical proxy for program need.

The compliance question: does your current SPCP intake process generate participant-level documentation that would survive this standard? If you’ve been doing class-level need assessments, you have documentation work to do.


What Lenders Can Still Do

The new rule doesn’t prohibit SPCPs — it restricts how for-profit lenders structure eligibility criteria. Programs targeted at economically disadvantaged applicants, residents of specific census tracts, applicants with thin credit files, or applicants with prior credit events such as bankruptcy discharge are not restricted by the prohibited-characteristic prohibition.

Geographic eligibility criteria remain valid. A program targeting small businesses in a designated census tract or low-income area isn’t using race as an eligibility factor even if the target population is predominantly a racial minority. Income-based eligibility thresholds — applicants at or below a percentage of area median income — are similarly unaffected.

The practical path for lenders with currently noncompliant programs: map your existing eligibility criteria onto legally permissible substitutes. If your MBE lending program requires race-based certification as an eligibility condition, the question is whether you can achieve similar program reach through income, geography, or credit-characteristic criteria. Your fair lending counsel needs to validate the redesign.

Some programs may not survive the transition cleanly. If the core rationale for a program was precisely the protected-class characteristic — and no neutral substitute achieves the same eligibility footprint — the program may need to be sunset for for-profit participation. Nonprofit entities can still operate the program; for-profit participation becomes the problem.


CRA Credit and the SPCP Restructuring Question

For community banks with CRA obligations, SPCP restructuring isn’t just a fair lending question — it potentially touches Community Reinvestment Act credit. Many institutions structured race-based SPCPs partly to generate CRA credit for lending to minority borrowers in their assessment areas.

CRA credit for community development lending isn’t based on the demographic characteristics of borrowers — it’s based on geographic focus and community development purpose. Restructured SPCPs using income-based or census-tract eligibility criteria can still generate CRA credit if they meet the community development purpose standards. But if your CRA strategy assumed race-based SPCP eligibility as the bridge to CRA credit documentation, your CRA officer needs to revalidate the credit rationale before July 21.

This is especially acute for institutions approaching a CRA examination in the next 12-18 months. An SPCP noncompliant with Reg B’s new eligibility restrictions creates exam risk across both fair lending and CRA frameworks simultaneously.

For the Section 1071 small business lending data dimensions of this compliance shift, our earlier analysis of Section 1071’s 2026 compliance timeline is worth revisiting alongside SPCP restructuring.


The 10-Day Checklist

With July 21 ten days away, here’s what needs to happen before the effective date:

1. SPCP inventory. Compile a complete list of every active SPCP your institution offers or participates in. Include programs where you’re a funding partner to a nonprofit SPCP if there’s for-profit participation in eligibility decisions.

2. Eligibility criteria audit. For each SPCP, pull the written plan and identify every eligibility criterion. Flag any that reference race, color, national origin, or sex — directly or through certification requirements (e.g., requiring SBA 8(a) certification, which uses race as a criterion).

3. Participant documentation review. For programs using permitted common characteristics, assess whether your participant intake generates individual-level “would not receive credit” evidence that satisfies the new standard.

4. Restructure or suspend before July 21. If a for-profit SPCP uses prohibited characteristics, you have three options: (a) restructure eligibility around permitted neutral criteria before the effective date; (b) convert to a nonprofit-operated structure where appropriate; or (c) suspend new credit extensions under the program until restructuring is complete. Credit extended before July 21 under existing program terms is grandfathered.

5. Update written plans. Any restructured SPCP needs an updated written plan before the first credit extension under the new terms. Document the permissible common characteristics, the targeted disadvantaged group, the evidence standard for participant need, and the non-discriminatory credit terms.

6. Legal review. Get fair lending counsel to sign off on redesigned eligibility criteria — particularly any geographic-targeting approach that might be challenged as a race proxy.

If your institution uses AI or algorithmic tools to underwrite SPCP applicants, our analysis of what the July 21 rule means for AI credit models is worth revisiting alongside the SPCP restructuring checklist. Algorithmic underwriting doesn’t change the eligibility restriction problem — it just adds a second documentation layer on the back end. The July 21 overview from June 29 covers the full scope of changes hitting simultaneously.


So What?

The SPCP provision wasn’t in the headline of any memo about the Reg B overhaul. Disparate impact got the coverage. But for institutions with race-targeted SPCPs, the practical compliance deadline isn’t about AI model bias-testing documentation — it’s about pulling an eligibility criterion out of your written plan and replacing it with something that works under the new rules.

Ten days. The Federal Register doesn’t care how buried the provision was.

For institutions that need a structured approach to risk-assessing their AI-driven underwriting for SPCPs as part of the compliance restructure, the AI Risk Assessment Template & Guide provides a model inventory, documentation framework, and bias testing protocol designed to sit alongside SPCP compliance work.


Sources:

◆ Need the working template?

Start with the source guide.

These answer-first guides summarize the required fields, evidence, and implementation steps behind the templates practitioners search for.

◆ Immaterial Findings · Weekly

Sharp risk & compliance insights. No fluff.

◆ FAQ

Frequently asked questions.

What does the July 21, 2026 Reg B final rule actually change for SPCPs?
Three things: for-profit creditors can no longer use race, color, national origin, or sex as common eligibility characteristics in their SPCPs; the 'would not receive credit' standard was tightened to require individualized evidence per participant rather than class-wide assumptions; and the CFPB's 2020 advisory opinion that explicitly permitted race-based SPCP criteria was rescinded on June 17, 2026.
Can nonprofits still run race-targeted SPCPs after July 21?
Yes. The prohibition on race, sex, and national origin as common characteristics applies only to SPCPs offered or participated in by a for-profit organization. Nonprofit lenders and CDFIs aren't subject to this specific restriction. However, if a for-profit bank participates in a nonprofit SPCP as a funding partner, both entities should get legal counsel on whether the for-profit restriction attaches to the arrangement.
What happens to SPCP loans that were already extended before July 21?
They're grandfathered. The rule applies prospectively — credit extended under an SPCP on or after July 21 must comply with the final rule. Credit extended before the effective date is evaluated under the rule in place when that credit was extended.
If I redesign my SPCP around neighborhood-level data instead of race, am I compliant?
Probably, but not automatically. Geographic eligibility criteria — census tracts, zip codes, majority-minority area designations — don't directly use race and aren't prohibited under the new Reg B. But if the targeting is so granular it functions as a race proxy in practice, disparate treatment risk doesn't disappear. Get legal sign-off on the redesigned eligibility methodology before July 21.
What is the 'would not receive credit' evidence requirement and how do I satisfy it?
Under the April 2026 final rule, for-profit creditors running an SPCP under bases other than race/sex/national origin must demonstrate for each participant that, absent the program, the participant would not receive the relevant credit. Statistical assumptions about a group no longer satisfy this standard — you need individualized underwriting documentation showing the credit would have been denied without the program benefit.
Does the SPCP rule change affect CRA credit for minority business lending programs?
Indirectly, yes. If your SPCP for minority-owned businesses used race or ethnicity as an eligibility factor to generate CRA credit, that program must be restructured before July 21. Income-based eligibility, census-tract targeting, or business-sector targeting are valid alternatives. Losing the race-based eligibility criterion doesn't automatically mean losing CRA credit — the justification just has to shift from demographic status to geographic or income basis.
Rebecca Leung

Author

Rebecca Leung

Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.

◆ Related framework

AI Risk Assessment Template & Guide

Comprehensive AI model governance and risk assessment templates for financial services teams.

Immaterial Findings · Newsletter

The brief, in your inbox.

Enforcement of the week, a framework breakdown, and the prompts that are actually worth running. Delivered to your inbox. Free.