Identify the event rather than a generic review cycle
An initial lending decision and a later change to an existing agreement are not identical events. The creditor should examine what obligation is being created or increased and whether the governing law requires a new or updated creditworthiness assessment. Potential events include entering into a new credit agreement, materially changing the available amount, refinancing, renewed lending or granting further credit. An internal annual account review might be prudent risk management without being the exact statutory trigger for every product. Policy should distinguish a legally required pre-decision assessment, a customer-service review after hardship and an optional portfolio-monitoring exercise. Record the event date, contractual terms, customer information age and the actual legal provision that applies.
CCD2 before agreement and significant increase
Article 18 of Directive (EU) 2023/2225 governs assessment before relevant credit agreements and addresses reassessment before a significant increase in the total amount of credit where specified conditions apply. Whether an increase is significant and the process required must be assessed under national implementation. Implementing measures generally apply from 20 November 2026, with transition; for earlier lending the existing national law may still govern. A lender should not treat the original decision as permanently sufficient merely because all earlier instalments were paid. Changes in income, expenses and debt commitments can affect capacity to meet an increased obligation. Preserve updated evidence and link it to the revised credit terms rather than overwriting the file for the initial agreement.
UK CONC 5.2A reassessment obligations
FCA CONC 5.2A addresses assessments before relevant regulated credit agreements and specified significant increases in credit or credit limits. A firm should examine the exact provisions and any product exclusions rather than selecting a fixed numerical increase threshold without support. The assessment must be reasonable in light of the customer's circumstances and the amount and cost of credit. Existing records can inform a new assessment where still reliable, but their age and any signs of financial difficulty matter. Reassessment may require updated income or expenditure evidence, consideration of other current debts and investigation of material inconsistencies. Documentation should identify the point before the increase when the decision was completed. Automated batch increases must not bypass that check.
US law uses product-specific triggers
US federal consumer credit law does not impose one assessment refresh schedule equivalent to UK CONC 5.2A for all loans. Certain mortgage transactions are subject to Regulation Z ability-to-repay requirements, while other products have distinct rules on credit decisions and account changes. ECOA and Regulation B govern prohibited discrimination and adverse action, with defined meanings and exceptions for existing accounts. State laws can add requirements affecting refinancing or revolving credit. A portfolio model that updates a credit score monthly does not by itself establish compliance with a particular pre-credit obligation. Identify whether the action is a new application, a counteroffer, a revised agreement or an existing account adjustment before mapping notice and decision rules.
Information freshness and material changes
A decision record should distinguish the previous assessment date from the date of the proposed new credit commitment. Income can change after job loss, existing liabilities can rise and data providers can correct inaccurate bureau records. A blanket rule to reuse all earlier fields may conceal important deterioration in the customer's circumstances. Conversely, requiring entirely new documentation for every minor servicing event can collect unnecessary information and confuse the actual legal requirement. Define data validity periods according to product risk, source reliability and applicable law. Flag material discrepancies, substantial new obligations, missed payments and repeated small limit increases for additional review as appropriate. Keep the old and new assumptions identifiable so an auditor can understand why the later decision was reasonable.
Workflow, communications and evidence
Design event-driven controls that pause an increase or new agreement until required assessment checks are completed. Capture the requested amount, current and proposed limits, customer profile, data-source dates, underwriting rule version and decision time. Record whether a significant-increase condition applied and the rationale. Communicate outcomes under the relevant agreement and adverse-action rules, which may be separate from the underlying assessment duty. Include human review or complaint routes where relevant, and do not imply that a declined increase always creates the same notice as a rejected new application. Regression tests should cover multiple incremental increases, refinancing, delayed disbursement and changes to the loan before signing. Review control failures and customer distress patterns after deployment.
Frequently asked questions
Can a model or dataset alone prove compliance?
No. The assessment must meet applicable legal requirements and use relevant, permitted and reliable evidence.
Are EU, UK and US requirements interchangeable?
No. Their product scope, implementation and consumer protections differ.
When do new CCD2 measures generally apply?
20 November 2026, subject to national law and transition.
Primary sources
Directive (EU) 2023/2225 ↗FCA CONC 5.2A ↗Regulation B Section 1002.9 ↗CFPB Circular 2022-03 ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.