It is one of those regulatory chains that you have to trace back.
Sec 623(a)(7) refers to "customer" and points to the Privacy Statute with the GLBA.
So, if you go to the privacy regulations, customer means a consumer and a consumer means:
an individual who obtains or has obtained a financial product or service from you that is to be used primarily for personal, family, or household purposes, or that individual's legal representative.
So, reporting in relationship to a SBA loan would not be covered.
The opinions expressed here should not be construed to be those of my employer: PPDocs.com