Guidelines for Use, Access, and Responsible Disclosure of Financial Data Act
Summary
HR 8398 (GUARD Financial Data Act) proposes amendments to GLBA Title V to impose data minimization, opt-in consent for sensitive data, and consumer deletion rights on financial institutions. The bill is in early legislative stages — referred to House Financial Services Committee with 4 cosponsors. No funding is authorized. Near-term market impact is low, but compliance software vendors like FIS and JKHY could see incremental demand if the bill advances.
See which stocks are affected
Key takeaways, market implications, full AI analysis, and connected signals are available to HillSignal members.
Already have an account? Log in
Key Takeaways
- 1.HR 8398 is an early-stage bill with 4 Republican cosponsors; no Democratic support yet
- 2.No funding authorized — the bill imposes regulatory compliance costs on financial institutions
- 3.FIS and JKHY are best positioned to benefit from compliance software demand if the bill advances
- 4.Palantir faces neutral-to-mixed impact: reduced data availability vs. compliance tool demand
Market Implications
Near-term market impact is minimal — the bill is in committee with no scheduled hearings. If the bill gains momentum (e.g., bipartisan cosponsors, committee markup), FIS and JKHY could see modest upside as the market prices in compliance upgrade cycles. Palantir's financial services revenue is a small portion of total (~5-10% of government-heavy mix), so any impact is secondary. Investors should monitor committee activity and cosponsor additions as leading indicators.
Full Analysis
On April 21, 2026, Rep. Huizenga (R-MI) introduced HR 8398, the GUARD Financial Data Act, which was referred to the House Committee on Financial Services. The bill amends the Gramm-Leach-Bliley Act to require financial institutions to limit collection and disclosure of nonpublic personal information to what is adequate, relevant, and reasonably necessary (data minimization). It also mandates opt-in consent for sensitive nonpublic personal information, establishes consumer rights to request deletion of data, and requires regulators to consider small financial institutions when writing rules. The bill has 4 cosponsors (all Republicans) and is in early stage — no hearings, markup, or floor votes scheduled.
The bill authorizes zero dollars — it is a regulatory mandate, not a spending bill. The money trail runs through compliance costs for financial institutions and revenue opportunities for technology vendors that sell data governance, consent management, and core banking platforms. There is no appropriation; if enacted, the Federal Reserve, CFPB, FTC, and state insurance regulators would write implementing rules, with costs borne by the private sector.
Structural winners are compliance software vendors: FIS and JKHY serve the banking and credit union market and can embed new GLBA requirements into their platforms, driving upgrade cycles and professional services revenue. Palantir (PLTR) faces a mixed impact — its Foundry platform could see reduced data availability from financial clients, but its Gotham/government compliance tools could see demand if financial institutions adopt Palantir for data governance. Larger diversified tech firms (MSFT, ORCL) have financial services cloud businesses but the bill's impact is too diffuse to materially affect their revenue.
No real market data was provided for stock prices. The competitive landscape shows FIS and JKHY as dominant vendors to US banks and credit unions, with established relationships and recurring revenue models. Both have compliance and risk management product lines that directly address the bill's requirements.
The legislative timeline is uncertain. The bill is in the 119th Congress (2025-2027) and has only been referred to committee. It must pass the House Financial Services Committee, the full House, the Senate (likely via Banking Committee), and be signed by the President. With 4 Republican cosponsors and no Democratic support yet, passage is not guaranteed. The bill's early stage and lack of bipartisan sponsorship suggest a low probability of enactment in the current session, though it could serve as a marker for future financial data privacy legislation.
Intelligence Surface
Cross-referenced against federal contracts, SEC insider filings & congressional trade disclosures
Limited confirming evidence — causal thesis exists but few external signals
What the bill does
Data minimization mandate and opt-in requirement for sensitive nonpublic personal information under GLBA amendments
Who must act
Financial institutions covered by GLBA that use core banking and payment processing platforms
What happens
Banks and credit unions must update their data collection and consent management systems to comply with new minimization and opt-in rules, creating demand for compliance software and consulting services.
Stock impact
FIS provides core banking platforms, payment processing, and risk/compliance software to financial institutions. The bill's requirements for data minimization, opt-in consent, and consumer deletion requests will drive demand for FIS's compliance and data governance modules. FIS is positioned to sell upgrades and professional services to its existing client base of thousands of banks.
What the bill does
Data minimization mandate and opt-in requirement for sensitive nonpublic personal information under GLBA amendments
Who must act
Financial institutions covered by GLBA that use core banking and digital banking platforms
What happens
Banks and credit unions must update their data collection and consent management systems to comply with new minimization and opt-in rules, creating demand for compliance software and consulting services.
Stock impact
Jack Henry & Associates provides core processing and digital banking solutions primarily to community and regional banks and credit unions. These smaller institutions typically lack in-house compliance resources and will rely on vendors like JKHY to implement GLBA changes. JKHY can embed the new data minimization and opt-in requirements into its platform updates, generating recurring revenue from compliance modules.
Connected Signals
Matched on shared policy language across AI analyses, with ticker & timing weight
A joint resolution providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Bureau of Consumer Financial Protection relating to the withdrawal of the rule relating to "Debt Collection Practices (Regulation F); Pay-to-Pay Fees".
NCUA Central Liquidity Facility Enhancements Act
Enhanced Cybersecurity for SNAP Act of 2026
Recover COVID Unemployment Fraud in Banks Act
Bringing the Discount Window into the 21st Century Act
Community Bank Relief Act
FERMI FORWARD DISCOVERY GROUP, LLC: $2.4B Department of Energy Contract
DELL FEDERAL SYSTEMS L.P: $1.0B Department of Veterans Affairs Contract
Related Presidential Actions
Executive orders & memoranda affecting the same sectors or companies
Adjusting Imports of Polysilicon and its Derivatives into the United States
This proclamation invokes Section 232 of the Trade Expansion Act to impose a minimum import price (MIP) program on polysilicon and its derivatives, a 15% ad valorem tariff on polysilicon derivatives, and directs the Secretary of Commerce to offer incentives for domestic production. It aims to protect and revive the U.S. polysilicon industry by restricting imports that threaten national security, particularly for semiconductor and solar supply chains.
Presidential Determination Pursuant to Section 101 of the Defense Production Act of 1950, as Amended, on Recoverable Critical Minerals and Materials
This memorandum invokes the Defense Production Act (DPA) Section 101 to declare that recoverable critical minerals and materials (such as black mass, end-of-life rare-earth magnets, and scrap) are essential to national defense and that the U.S. cannot meet defense needs without disrupting civilian markets. It directs the Secretary of Commerce to issue regulations and take actions—including priority contracts and supply-chain interventions—to rapidly expand domestic recovery and processing of these materials, while explicitly excluding copper scrap already covered by a separate proclamation.
Securing America’s Defense Supply Chains and Ensuring Domestic Acquisition of Critical Materials
This executive order restricts waivers for foreign-sourced critical materials in defense contracts, effective January 1, 2027, and mandates that defense contractors map their supply chains from raw materials to end products, vet subcontractors for risks, and prohibit covered materials from unreliable foreign suppliers. It directs the Secretary of War to enforce strict compliance, including requiring mitigation plans for any non-compliant materials and establishing penalties for fraud or willful noncompliance.
Free — no credit card
Get the next market-moving signal before the news does
HillSignal scores every Congressional bill, federal contract, and insider filing for market impact and emails you the high-conviction ones — free, no credit card.
Weekly digest — the congressional activity that actually moved markets that week, in plain English. Free, one email.
Free forever plan · No credit card · Unsubscribe in one click
Want the live terminal too? Create a free account →