Scope and governing framework
US credit regulation combines federal consumer protection statutes, implementing regulations, and state lending laws. Coverage depends on the credit product, creditor identity, transaction purpose, consumer location, and legal exclusions. The same institution can face different disclosure and licensing duties across mortgages, cards, and personal loans. Establish a product inventory before assigning compliance duties. An operational review should identify which entity is legally responsible and preserve the authority for that conclusion. Different customer channels can create different evidence, so examine the actual application or servicing event, not only a policy description. Where status is uncertain, flag it for legal analysis before making public claims.
Core requirements and interpretation
The Truth in Lending Act and Regulation Z address consumer credit terms, costs and certain substantive protections. The Equal Credit Opportunity Act and Regulation B govern fair lending and action-taken notices. The Fair Credit Reporting Act and Regulation V impose rules for consumer reports, users and furnishers. Different statutes can apply to the same application; satisfying one does not establish compliance with the others. This rule is relevant only where the statute and its implementing definition cover the transaction. Document the triggering facts, customer communications and the version effective at the decision date. A compliance worksheet should explain its inputs and exceptions so another reviewer can reproduce the conclusion.
Credit products and disclosure distinctions
Loan structure determines disclosure and servicing requirements. Regulation Z separates open-end plans from closed-end transactions, with additional provisions for credit cards and mortgages. An installment loan's finance charge calculation is not interchangeable with a card's periodic-statement APR. Map fees, repayment schedule, security, dwelling status and borrower purpose. Retain evidence of the product classification used when the agreement was offered. Product-specific requirements must be verified against the contract and actual data flow. Consider whether a third-party servicer or software vendor prepares information on the lender's behalf. Outsourcing an activity does not necessarily transfer the underlying statutory responsibility. Test disclosures across web and paper journeys.
Decision and consumer protection controls
Fair lending controls should extend from marketing and application questions to underwriting, account management and collection decisions. ECOA prohibits discrimination on specified grounds and Regulation B includes notification duties for covered actions. Reasons supplied in adverse-action notices must accurately describe the decision, including when automated models are used. Review current regulatory amendments and effective dates rather than relying on historical formulations of the law. The evidence should show which information was considered, who approved the outcome and what explanation was actually communicated. Automated systems can hide missing or inconsistent facts, making exception sampling essential. Compare the recorded reason and underlying decision rather than assuming the generated notice is correct.
Advertising, account data and notices
FCRA obligations depend on whether the entity obtains consumer reports, furnishes information or operates as a consumer reporting agency. Permissible purpose, adverse-action disclosure and accuracy investigations may be relevant at different stages. A loan denial involving a credit report may trigger both ECOA and FCRA notice analysis. Record data sources and dispute results, and correct inaccurate information across the affected systems. Consumer-facing accuracy depends on synchronising lender, bureau, partner and marketing records. Establish practical correction routes when a fee, status or statement is wrong. Relevant legal timelines and content requirements must be determined from the applicable provision, not a universal internal customer-service target.
Jurisdiction and special rules
States can impose lending licence, interest-rate, fee, servicing and collection rules. Coverage may vary by product, institution charter, borrower state and federal preemption. A website serving consumers nationwide does not eliminate state-law review. Track each product-state combination with the current legal authority, responsible owner and renewal or reporting dates. Evaluate activities of brokers and third-party servicers separately from those of the creditor. A state-by-state and product-by-product view helps avoid unsupported nationwide claims. Document exemptions, effective dates and any legal interpretation used. Revisit the assessment when adding a new credit product, acquiring a business or expanding distribution to another state or channel.
Evidence, testing and remediation
A working program should map each rule to a transaction step, control, responsible team and preserved evidence. Sample advertisements, rate disclosures, approval and denial decisions, credit reporting, statements and complaints. Test irregular cases such as returned payments, fee changes and disputed data. Review rule changes and enforcement developments for actual operational effect. Independent educational materials are a starting point, not a substitute for current authoritative law. The quality review should include complaints, unusual payment schedules, data corrections and third-party interactions. Preserve dated test results and remediation decisions. A control passes only when it can be shown to work for the transactions and rights within its actual regulatory scope.
Frequently asked questions
Do all loans follow the same federal lending rules?
No. Product, creditor status, transaction and exemption requirements vary.
Can state laws apply alongside federal requirements?
Yes, subject to the applicable federal and state legal framework.
Primary sources
CFPB Regulation Z ↗CFPB Regulation B ↗CFPB consumer reporting regulation ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.