The CFPB rule that would've kept medical debt off credit reports is dead. Here's what's still protecting you

A federal court killed the Consumer Financial Protection Bureau's rule that would have stripped medical debt off consumer credit reports nationwide. If you've seen headlines calling that a rollback, the more useful question is simpler: what actually changed for the medical debt sitting on your credit report today? The answer is close to nothing — and the reason why is worth understanding.

The rule that never actually took effect

The CFPB finalized the rule on January 7, 2025. It would have barred credit reporting agencies from including medical debt information on consumer reports and barred lenders from considering it in credit decisions. Its effective date was set for March 17, 2025.

It never got there. On February 6, 2025, the court in Cornerstone Credit Union League v. CFPB (Case No. 4:25-cv-00016, U.S. District Court for the Eastern District of Texas) granted an unopposed motion staying that effective date. On July 11, 2025, the CFPB and the plaintiffs — credit unions and the Consumer Data Industry Association — jointly asked the court to vacate the rule outright, and the court agreed, finding it exceeded the bureau's authority under the Fair Credit Reporting Act (FCRA). The CFPB's own final-rule page now confirms the vacatur and notes the rule's materials are "for reference only."

Net effect: a rule most people believed was already protecting them never protected anyone. Nothing "went back" to how it was, because it never left.

What's actually kept medical debt off your report since 2023

The real protection most consumers have came from a decision the three nationwide credit bureaus made themselves, two years before the CFPB rule existed. On April 11, 2023, Equifax, Experian, and TransUnion jointly announced they would remove all paid medical collection debt from credit reports, regardless of the amount, and remove unpaid medical collections under $500 entirely. They'd already extended the reporting delay on unpaid medical debt from 6 months to a full year in 2022, giving people more time to resolve a bill — through insurance, a payment plan, or a dispute — before it can appear on a report at all.

The CFPB's own May 2023 blog post on the change estimated it would help roughly half of Americans with medical debt on their credit file. None of that depended on the vacated rule, and none of it was touched by the Cornerstone ruling. It's a private, voluntary policy the bureaus can change again on their own — but as of today, it's still the operative baseline.

The state-law question the ruling didn't actually settle

Separate from federal action, roughly 15 states have passed their own laws restricting medical debt on credit reports, most of them since 2023. The Cornerstone court's opinion included a line stating that a state law barring credit reporting agencies from including coded medical debt information "would be inconsistent with FCRA and therefore preempted."

That sounds like it settles the question. It doesn't, on its own. Per the National Consumer Law Center's tracking of the case, that preemption language was dicta — commentary outside what the court was actually deciding, since no specific state law was a party to the case or before the court.

The CFPB has since moved to firm up that position anyway. On October 28, 2025, the bureau published a formal interpretive rule — Fair Credit Reporting Act; Preemption of State Laws — stating that FCRA's preemption clause is "broad and categorical" and displaces state laws governing what can appear in a consumer report, including state medical-debt reporting bans. That rule expressly revokes a narrower 2022 interpretive rule (issued under the prior administration) that had left states more room to legislate here. But per NCLC's own analysis of the 2025 rule, the CFPB's guidance "does not have the force or effect of law," and the bureau itself says courts, not the agency, are the ultimate arbiters of preemption. No state medical-debt law has actually been struck down as a result of either the Cornerstone ruling or the October 2025 interpretive rule. If you live in a state with its own medical-debt credit-reporting law, it's still on the books; whether it survives a direct court challenge is unresolved, and the CFPB has now signaled it wants that challenge to happen.

If a medical debt shouldn't be on your report

None of the above replaces your baseline FCRA dispute rights. If a medical debt is inaccurate, already paid, under the $500 threshold, or reported before the one-year window has passed, you can dispute it the same way you'd dispute any credit report error: directly with the credit reporting agency first. We've written up the current CFPB complaint process step by step, including the 45-day-first requirement the bureau now enforces before it will accept a complaint about a reporting error.

What this isn't

This is a description of a finalized-then-vacated federal rule, a 2023 industry policy change, and an ongoing legal question about state law — not legal advice, and not a guarantee about what will appear on any specific credit report. Rules, bureau policy, and state law can all change again; check the primary sources linked above, or your own state's current statute, before relying on any of this for a specific dispute.

Where this fits

Same instinct as how we walk through the CFPB's own complaint process: a regulatory headline and the actual, current rule are often two different things, and the gap between them is exactly where people get caught off guard. The fix isn't a hot take on whether the rule should have existed — it's reading what the bureau's own final-rule page and the credit bureaus' own announcements actually say, which is what we did here.