Independent credit compliance guidanceFor lending, compliance and risk teams
CreditCompliance.help
EU, UK and US comparative framework · Research guide

How to Identify Regulations Applicable to a Credit Product

To identify the regulations applicable to a credit product, document the actual borrower, agreement, provider, distribution activities and jurisdictions, then test those facts against each relevant law's definitions, scope provisions, exclusions and application dates. Record the result in a source-based product scope assessment rather than assuming that a commercial product label determines legal treatment.

Sources checked · 2026-10-12 · 4 min read

Create a factual product description before choosing a rule

Begin with the proposed agreement, not a predetermined legislative checklist. Identify whether the borrower is an individual or organisation, the purpose of borrowing, the identity of the creditor and any intermediaries. Record the funds or goods provided, total amount, repayment schedule, charges, term, security, optional extensions and consequences of missing payments. Distinguish an instalment loan from an overdraft, a credit card, deferred payment or a leasing arrangement according to its substance. Map the places where the borrower and regulated entities operate. A product name such as interest-free or business finance may suggest questions for review but cannot, by itself, establish an exclusion. Obtain contract drafts and customer screens as evidence.

Apply legal definitions and scope provisions

For every potentially relevant legal instrument, identify the defined consumer, creditor, credit intermediary and agreement type. Read the provision establishing coverage alongside exclusions, exemptions and any limits on product type or borrowing purpose. An exception may depend on the creditor, charges, term, relationship between parties and contractual rights. Avoid copying a simplified summary from another product's legal file. A product might be outside one disclosure regime while still subject to equality, licensing or data-protection requirements. The US Equal Credit Opportunity Act and Regulation B, for example, have a broader credit-transaction scope than some consumer-only disclosure provisions. Record reasons why each significant rule applies or does not apply and where the interpretation remains disputed.

Distinguish current law from future measures

A scope analysis must include legal status and timing. Record whether a text is enacted, in force, nationally transposed, applicable to new agreements or subject to transition. Directive (EU) 2023/2225 has been adopted and is in force, but its national implementing measures are required to apply from 20 November 2026. Assess existing domestic laws and the relevant implementing measures rather than presenting all CCD2 requirements as already operational in every Member State on 12 October 2026. A public consultation, draft bill or regulator speech may inform a change project but should not be recorded as binding law. Include the official source URL, provision, jurisdiction, publication status and last-verified date for every conclusion.

Identify the responsible entity and authority

Once the product's scope is understood, map each regulated activity to the legal entity carrying it out. Granting credit, broking, advertising, introducing customers and servicing debts may be distinct activities with separate permissions or responsibilities. A branded platform and a lender may not be the same contractual person. Record the competent regulator, any authorisation or registration relevant to the particular activity, and how the firm's operational responsibilities have been allocated. A broker's contractual promise to perform a disclosure does not by itself transfer every statutory duty away from a creditor. The matrix should show both public-law responsibility and operational task owner. Check how geography affects each function before approving a new sales channel.

Translate requirements into a lifecycle matrix

Map applicable provisions to the stages at which obligations arise: product design, advertising, application, creditworthiness, disclosure, contracting, payment servicing, arrears and consumer remedies. For each stage, distinguish actual statutory obligations from optional control methods. Examples include approved marketing language, the timing of prescribed information, decision records and agreements reflecting the accepted terms. Include exceptions such as manual applications, amended loan amounts and account transfers. A credit product may need multiple regimes considered together. The objective is not to fill every cell with a rule but to capture each provision that genuinely attaches to the product and to make a reviewer able to trace the source and scope decision.

Record decisions, exclusions and unresolved questions

Use a product scope register with columns for product version, borrower, purpose, credit terms, creditor, intermediary, jurisdiction, instrument, operative article, exemption analysis, current status, assigned reviewer and supporting documents. Cite primary official law whenever possible and distinguish guidance from the statute. Mark a conclusion as pending rather than inventing certainty when the source does not resolve an unusual arrangement. Link the decision to actual agreements and customer journeys. A working memo can explain why a regulation was considered but excluded, preventing the same issue being rediscovered at every review. Have legal specialists review high-impact or ambiguous exclusions before relying on them operationally.

Make the review repeatable when products change

The applicable law can change when the company introduces a fee, changes payment periods, adds a broker, sells receivables, enters another jurisdiction or alters the intended borrower. A scope assessment should therefore have an owner, approval date, version and concrete review triggers. Compare new proposals against earlier assumptions instead of simply updating an old checklist heading. Monitor legislation, official national implementing laws, regulator guidance, judgments and the 20 November 2026 CCD2 application milestone. Retain superseded decisions to explain historical transactions. For complex multi-country offerings, use one factual product record linked to separate jurisdiction analyses rather than duplicating generic country templates that conceal differences.

Frequently asked questions

Does a credit product have one universal compliance framework?

No. Requirements depend on product, borrower, activities and jurisdictions, including national law and relevant exclusions.

Can a contract's governing law determine every regulatory requirement?

No. Public-law licensing and mandatory consumer protections require separate territorial assessment.

When should the legal analysis be reviewed?

After material product or entity changes, new market entry, legal amendments and updated national implementation measures.

Operating frameworks on this page are editorial suggestions. Apply the legal text and current national requirements to the actual product facts; these methods do not determine compliance.

Primary sources

Directive (EU) 2023/2225 ↗FCA Handbook PRIN 3 territorial scope ↗CFPB Regulation B territorial interpretation ↗CFPB Regulation Z ↗FCA consumer credit ↗

Read the source in its current version. National implementing measures and product-specific applicability may require additional research.

Related research

credit compliance fundamentals ↗

Credit Compliance Across the Lending Lifecycle ↗