; and (2) in subsection (h)— (A) by striking paragraph (1) and inserting the following: (1) Financial institution The term financial institution means— (A) any partnership, company, corporation, association (incorporated or unincorporated), trust, estate, cooperative organization, or other entity that engages in any financial activity; and (B) in each of the two calendar years preceding the first day of the safe harbor period described in subsection (g)(4)(B), originated not less than 500 credit transactions for small businesses. ; and (B) by striking paragraph (2) and inserting the following: (2) Small business The term small business means any entity with gross annual revenues of $1,000,000 or less in the most recently completed fiscal year preceding the first day of the safe harbor period described in subsection (g)(4)(B). . IV Bank Loan Privacy 401. Rulemaking requirement Section 704B(e)(4) of the Equal Credit Opportunity Act ( 15 U.S.C. 1691c–2(e)(4) ) is amended— (1) by striking The Bureau may, and inserting: (A) In general The Bureau may, ; and (2) by adding at the end the following: (B) Rulemaking requirement The Bureau shall, before deleting or modifying data under this paragraph issue, through advance notice and comment, a rule that includes a description of what modifications and deletions the Bureau intends to make to the data and how such modifications and deletions will advance a privacy interest. .