The US Consumer Financial Protection Bureau is seeking answers to questions around bank fees and customer authorization as it reshapes a rule governing personal-finance information after JPMorgan Chase & Co. proposed charging outside parties to access the data.

The CFPB is asking stakeholders — banks, financial-technology companies, data aggregators and other interested parties — to weigh in on questions around whether customers can authorize fintechs to act as their authorized representatives to collect and share data, and if the CFPB can legally bar banks from charging for access to that valuable information.

The law requiring the creation of rules for accessing personal financial data “is quite sparse and does not specifically address several important questions that arise from the rights it creates,” the CFPB said in the request, known as an “advance notice of proposed rulemaking.” The agency submitted the solicitation to the Federal Register’s public-inspection section Thursday, and it’s likely to be formally released Friday.

The agency didn’t immediately respond to a request for comment on the solicitation. Comments will be due 60 days after the solicitation’s formal publication in the Federal Register.

This is the first step in the agency returning to the drawing board to revise the rule after the largest US bank began informing fintechs that it would begin levying a fee each time its customers’ data were accessed. PNC Financial Services Group Inc. said soon after that it would consider doing the same. If the CFPB ultimately allows banks to charge for access to customer data, the agency wants to know whether it should set a cap on those fees.

Read More: JPMorgan Renews Fight With Fintechs for Customer Data

A new final rule is likely to take several years to complete and faces potential litigation once it’s done. The CFPB, in its full list of 36 questions, also included a series of queries about cybersecurity measures and the costs of protecting customer data, as well as limits on the licensing and use of client information.

The CFPB is embarking on the rulemaking process after a federal appeals court last week approved the Trump administration’s plans to fire most of the agency’s employees.

Read More: Trump Gets Nod to Fire Most CFPB Workers as Court Lifts Hold

The original CFPB rule, released in October 2024, prohibits banks from charging fintechs for accessing data, saying that it goes against what Congress intended when it mandated a rule allowing customers to easily share their financial data in the 2010 Dodd-Frank Act. The CFPB’s rule was limited to deposit and credit card accounts and was challenged in court by bank lobbying groups almost immediately.

–By Evan Weinberger (BLAW) and Paige Smith (Bloomberg)