Purpose and coverage
Regulation B, codified at 12 CFR Part 1002, implements the Equal Credit Opportunity Act. It governs covered credit transactions and includes requirements on discrimination, applications, decisions, customer notices, record retention and certain appraisal matters. Consumer credit, business credit and residential mortgage applications may be covered under different circumstances. A firm should start with the definitions of creditor, applicant, application, and adverse action. A single rule may contain exceptions or altered procedures depending on the transaction, so product classification is necessary before designing operational checks. A compliance inventory should identify the responsible team, applicable creditor or reporting role, exact legal rule and effective date. Record how consumers encounter the process, and preserve the original document or system event. A generic internal label does not establish which statutory definition applies.
Current legal framework
The 2026 amendments to Regulation B materially changed the federal regulatory text concerning disparate impact, applicant discouragement and special purpose credit programs. The amendments took effect July 21, 2026. The creditor's policy should be reviewed against the amended requirements and related authority rather than restating an older version of the regulation. This is especially important when training materials describe prohibited practices or special-purpose program eligibility. Record when a legal interpretation was approved and which version governs decisions made at different times. Where current law has changed recently, legal review should confirm the amendment against official text and note any relevant transitions. Do not reproduce an older requirement as the present rule. Train operational staff on the difference between mandatory practices, internal policy and future proposals.
Application and data controls
Section 1002.5 addresses requests for applicant information and restrictions with defined exceptions. Section 1002.6 concerns evaluation of creditworthiness and describes some information that may or may not be considered. Monitoring information for specified mortgage applications receives separate treatment in section 1002.13. Firms must distinguish required collection for compliance from unrelated marketing uses. The application should capture enough information to assess credit without using questions or instructions prohibited by the governing provision. Changes to digital forms should undergo product-specific review and testing. A workflow should address both ordinary applications and exceptions. Test incomplete or inaccurate inputs, consumer questions and information collected by third-party partners. Ensure the responsible firm can correct data without relying on a stale copy or an undocumented email exchange.
Decision notices and consumer rights
Section 1002.9 contains requirements for action-taken notifications, including distinct treatment of completed applications, incompleteness, counteroffers and adverse action. The appropriate notice depends on the application and decision facts. Statements of principal reasons must be specific and accurate; a generic reason is insufficient if it was not what actually caused the decision. Automated underwriting tools must make underlying explanations available to notice processes. Document deadlines and required content from current authoritative text rather than relying on one companywide response window for every case. Notice testing should establish what triggered the communication, when it was required and whether the delivered content matched the recorded decision. Store the approved template version and underlying reasons so the sequence can be reconstructed. Escalate unsupported statements rather than publishing a misleading explanation.
Monitoring and operational risk
Section 1002.12 contains record-retention requirements, with periods and triggers that depend on the type of credit and records. Section 1002.14 addresses copies of appraisals and other written valuations in its specified scope. Those duties should not be conflated with general loan contract disclosure requirements. A mortgage workflow may need dedicated delivery and acknowledgement controls. Preserve the final documents, timestamp, consumer contact information and evidence of timely handling. Testing should include requests made through a broker, automated portal or branch. Policies should be supported by actual case samples, not simply staff attestations. Compare historic data with outcomes and identify repeat issues across branches, models or service providers. Log the root cause and independently verify that a corrective action reached all affected systems.
Interactions with other credit rules
Regulation B overlaps with other requirements without replacing them. A creditor using a consumer report may have Fair Credit Reporting Act duties in addition to ECOA action-taken notices. TILA and Regulation Z control many credit cost disclosures but do not supply the complete fair lending framework. State laws can add requirements, and special federal provisions affect some types of institution or transaction. A legal change tracker should distinguish regulations currently effective from proposals, withdrawn guidance and historical descriptions. The presence of more than one federal statute can create overlapping but distinct controls. A rule map should identify the separate triggering conditions and responsible owner. Keep state and product variations visible rather than creating a misleading nationwide standard.
Evidence and testing
Build a rule-to-control map for application questions, underwriting, overrides, adverse action, information retention and valuations. Sample approved, denied, incomplete and counteroffer cases across products. Compare decision inputs with notice reasons and verify the right template was used. Monitor inconsistencies between customer service scripts and formal rules. Retain versioned policies and forms. When an error is found, assess whether it affects a broader population rather than correcting only the sample account. Revisit controls whenever final amendments or applicable judicial rulings change the analysis. Where a sample fails, determine whether the defect resulted from a rule interpretation, data input, technology configuration or employee practice. Correct the underlying process, communicate with affected consumers where required and retain the reasoning used to close the finding.
Frequently asked questions
Does every credit decision require the same notice?
No. Coverage, triggering action and statute determine notice duties.
Do FCRA and ECOA impose identical obligations?
No. They address overlapping but separate credit reporting and fair lending requirements.
Primary sources
CFPB Regulation B ↗Federal Reserve updated Regulation B July 2026 ↗CFPB Regulation V ↗CFPB FCRA compliance resources ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.