While Republicans have argued that the Consumer Financial Protection Bureau's oversight is too broad and needs to be dialed back, Director Richard Cordray is using the Equifax data breach to float the idea of expanded agency authority over the credit reporting bureaus.

The CFPB is the only regulator with supervisory examination authority over Equifax, Experian and TransUnion, which were designated in 2012 as "larger participants" in the credit reporting market. But the primary regulator in charge of enforcing cybersecurity standards of nonbanks is the Federal Trade Commission, which lacks direct supervisory authority.

Subscribe Now

Access to a full range of industry content, analysis and expert commentary.

30-Day Free Trial

No credit card required. Access coverage of the securitization marketplace, including breaking news updated throughout the day.