Start with the regulated activity rather than the authority's name
Consumer credit supervision begins with the product, agreement, borrower, legal entity and jurisdiction. A credit intermediary, bank, non-bank lender and debt servicer can fall into different regulatory categories. The authority responsible for authorisation may not be the only body able to enforce consumer protection law. Some requirements belong to banking supervision, some to market conduct and others to data protection or competition. A firm should therefore maintain a regulatory perimeter assessment and an authority map that records who supervises each obligation. Claims such as all European lenders report to one EU consumer-credit regulator or the CFPB licenses every US lender are inaccurate. Legal status and institutional powers require source-specific verification.
The EU framework depends on national competent authorities
Directive (EU) 2023/2225 provides the revised EU consumer-credit framework. Article 41 calls for Member States to designate competent authorities with suitable powers and resources. The European Commission performs roles within the EU legislative and implementation system but is not a single substitute for national supervisors' day-to-day functions. The European Banking Authority contributes to EU financial-sector regulatory work within its mandate; that does not make it the sole enforcer of every consumer credit rule. Identify the actual national implementing instrument, designated authority, permissions regime and enforcement process for each Member State concerned. On 12 October 2026, the Directive is in force but national implementing measures are due to apply from 20 November 2026, subject to transition.
United Kingdom: the FCA and other relevant authorities
In the United Kingdom, the Financial Conduct Authority is the principal conduct regulator for firms undertaking regulated consumer-credit activities within its remit. Its authorisation materials cover lenders, hirers and credit brokers, and the FCA Handbook sets out relevant conduct requirements. Certain banks and other firms may also have the Prudential Regulation Authority as their prudential supervisor, but prudential oversight is not interchangeable with consumer-credit conduct supervision. The Financial Ombudsman Service resolves eligible complaints within its jurisdiction and is not the same type of regulator as the FCA. The Information Commissioner's Office can be relevant to handling personal data. Map each institution by its legal function instead of placing every consumer issue under the FCA alone.
United States: federal and state responsibilities
The Consumer Financial Protection Bureau administers and enforces important federal consumer financial laws, but responsibility is shared. Relevant agencies can include the Federal Reserve, Office of the Comptroller of the Currency, Federal Deposit Insurance Corporation, National Credit Union Administration and Federal Trade Commission, with powers determined by statute and institution type. State banking and financial services regulators may license or supervise lenders and brokers, while state attorneys general may enforce consumer protection laws. The CFPB's own official materials explain the allocation of some federal consumer financial law enforcement responsibilities. A lender should avoid assuming that the same federal agency handles all examinations, all licensing, all complaints and all actions for a given product.
A single credit product may involve several oversight systems
Consider a digital personal loan distributed through a comparison platform and originated by a regulated bank. The bank's supervisor, the intermediary's permissions regime, consumer protection enforcement powers and data privacy obligations may involve different authorities. Credit reporting, payment services and financial crime rules add further regulatory relationships. Cross-border distribution can make the picture more complex because borrowers, marketing channels and contracting entities may be in different territories. The firm needs to distinguish the competent consumer-credit authority from other authorities exercising separate powers. Multiple supervisors do not necessarily mean duplication: they may apply different instruments to distinct legal responsibilities and stages of the customer journey.
What to record in a regulator inventory
A practical regulator inventory should contain the authority's legal name, jurisdiction, supervisory role, source of power, relevant regulated entity, credit product, licensed activity and reporting or disclosure obligations. Include official registry links where available and the date the information was checked. Link each authority to the corresponding statute or national implementing measure rather than relying on a website category description. For an outsourced service or credit broker relationship, explain which entity has the underlying public-law duty. If an obligation is contested or an authority's jurisdiction is unclear, note that uncertainty and obtain specialist review. The inventory should be maintained alongside, but separately from, the firm's product inventory.
Supervision and legal frameworks change over time
Changes in statutory powers, national designations, firm licences and regulatory guidance can alter which authority matters. A legislative proposal or consultation does not immediately change the supervisory perimeter. A regulator press release about enforcement may clarify supervisory priorities without amending the substantive law. For CCD2, country-specific implementation and the 20 November 2026 application date are concrete review triggers. In the US, institutional classification, business model changes and state market entry should trigger a new authority assessment. Preserve historical versions of the inventory when an agreement was entered into under a different set of rules. This helps explain what was applicable at the relevant point in time.
Frequently asked questions
Does one regulatory framework govern all lenders?
No. Each product, legal role and jurisdiction requires its own scope analysis and official legal sources.
Is regulator guidance equivalent to legislation?
No. Guidance may explain supervisory expectations but should be distinguished from binding statutory or regulatory requirements.
When should this analysis be reviewed?
Review when legislation, national implementation, regulator interpretation, credit products or legal entities change.
Primary sources
Directive (EU) 2023/2225 Article 41 ↗FCA consumer credit ↗CFPB consumer law enforcement authorities ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.