---
title: "Review a consumer-data access agreement against section 1033"
url: "https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/review-an-open-banking-or-consumer-data-sharing-participation-agreement/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A24-T1-R12-US"
practice_area: "Technology, Media & Telecommunications / IT Contracts"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# Review a consumer-data access agreement against section 1033

> List the data fields the draft agreement says will be made available, the person who may request them, and any fee the draft states. Do not decide that the agreement complies.

Canonical page: https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/review-an-open-banking-or-consumer-data-sharing-participation-agreement/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Technology, Media & Telecommunications / IT Contracts](https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | List the data fields the draft agreement says will be made available, the person who may request them, and any fee the draft states. Do not decide that the agreement complies. |
| What the lawyer must review | 12 U.S.C. § 5533(a): subject to rules prescribed by the Bureau, a covered person shall make available to a consumer, upon request, information in the covered person's control or possession concerning the consumer financial product or service the consumer obtained from that person, including transaction and account information and costs, charges, and usage data, in an electronic form usable by consumers. Subsection (b) says the section does not require disclosure of confidential commercial information, including an algorithm used to derive credit or risk scores, information collected to prevent fraud or money laundering or to detect or report unlawful conduct, information that other law requires to be kept confidential, or information the covered person cannot retrieve in the ordinary course of business. Subsection (c) imposes no duty to keep information. The CFPB page states that a final rule was released on 22 October 2024 and that, on 22 August 2025, the Bureau issued an advance notice of proposed rulemaking reconsidering who may be a representative, fees, data security, and data privacy. These pages do not state a compliance date and do not state that the 2024 rule has been set aside. You confirm which text governs before you rely on the agreement. |
| Written for | United States |
| Applies to | [Review an open-banking or consumer-data-sharing participation agreement](https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/review-an-open-banking-or-consumer-data-sharing-participation-agreement.md) |

## Checking plan

- What the AI does: List the data fields the draft agreement says will be made available, the person who may request them, and any fee the draft states. Do not decide that the agreement complies.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- The statute is expressly subject to Bureau rules. The 22 August 2025 reconsideration is open on the CFPB page.
- Do not treat an Australian consumer-data-right participation rule as applying.

## Sources

- [12 U.S.C. § 5533, Consumer rights to access information](https://www.law.cornell.edu/uscode/text/12/5533) (checked 2026-10-22)
- [CFPB, Personal financial data rights](https://www.consumerfinance.gov/personal-financial-data-rights/) (checked 2026-10-22)

## Forms and precedents for this task

| Form or precedent | Kind | AI level | Summary |
| --- | --- | --- | --- |
| [Consumer Data Right: data holder obligations on the CDR site](https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/cdr-data-holder-obligations.md) | Checklist | Yellow | Checklist of data holder obligations as the Consumer Data Right site states them, including authorisation, the 12-month maximum, withdrawal within two business days, and twice-yearly reports.… |

Signed-in accounts can read the full text of each one.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*