Regulation B — Equal Credit Opportunity Act
Credit decisions, fair lending, adverse action and record retention.
Current text
THE RULES BEHIND THE NEWS
126 official sourcesPolicy library
Official laws, rules and guidance for credit, banking and financial technology.
Reviewed September 27, 2026
126 of 126 sources
Foundations89
Core authorities and reference frameworks.
Regulation C — Home Mortgage Disclosure Act
Mortgage data collection, reporting and disclosure.
Current text
Regulation E — Electronic Fund Transfers
Consumer transfers, error resolution, unauthorized payments and remittances.
Current text
Regulation F — Fair Debt Collection Practices Act
Debt-collection communications, validation information and prohibited practices.
Current text
Regulation G — Mortgage loan originator registration
Federal registration requirements for covered residential mortgage loan originators.
Current text
Regulation H — SAFE Act state compliance
State mortgage licensing and registration framework.
Current text
Regulation M — Consumer Leasing
Consumer lease disclosures and advertising requirements.
Current text
Regulation P — Privacy of Consumer Financial Information
Privacy notices and limits on disclosure of nonpublic personal information.
Current text
Regulation V — Fair Credit Reporting Act
Consumer reporting, furnishing information, disputes and related obligations.
Current text
Regulation X — Real Estate Settlement Procedures Act
Mortgage settlement, servicing, escrow and loss-mitigation requirements.
Current text
Regulation Z — Truth in Lending Act
Consumer-credit disclosures, cards, mortgages and ability-to-repay provisions.
Current text
Regulation DD — Truth in Savings
Deposit-account disclosures, interest calculations and advertising.
Current text
Ability to repay and qualified mortgages — 12 CFR 1026.43
The mortgage ATR/QM provisions in Regulation Z.
Current text
UDAAP authority — 12 USC 5531
Federal authority concerning unfair, deceptive or abusive acts or practices.
Statutory text
Safety and soundness standards — 12 USC 1831p-1
Section 39 authority for operational and managerial standards and compliance plans.
Statutory text
Brokered and reciprocal deposits — 12 USC 1831f
Section 29 authority. The linked code edition may precede Public Law 119-101; use section 902 of that law for the enacted reciprocal-deposit formula.
Code text; check 2026 amendments
Servicemembers Civil Relief Act — interest limitation
Interest-rate protections for qualifying obligations incurred before military service.
Statutory text
Military Lending Act — 32 CFR Part 232
Consumer-credit protections for covered service members and dependents.
Current text
FTC Holder Rule — 16 CFR Part 433
Preservation of consumer claims and defenses in covered credit contracts.
Current text
FTC Safeguards Rule — 16 CFR Part 314
Information-security requirements for financial institutions within FTC jurisdiction.
Current text
Fair Housing Act regulations — 24 CFR Part 100
Discriminatory housing practices, including relevant residential lending provisions.
Current text
OCC licensing and chartering — 12 CFR Part 5
Applications, notices and corporate activities for OCC-supervised institutions.
Current text
OCC safety and soundness — 12 CFR Part 30
Standards, compliance-plan procedures and appendices.
Current text
FDIC safety and soundness — 12 CFR Part 364
Safety-and-soundness standards for covered FDIC-supervised institutions.
Current text
OCC capital rules — 12 CFR Part 3
Regulatory capital and risk-weighted asset requirements.
Current text
Federal Reserve capital rules — Regulation Q
Capital adequacy requirements for covered Federal Reserve-regulated organizations.
Current text
FDIC capital rules — 12 CFR Part 324
Capital requirements for covered FDIC-supervised institutions.
Current text
Regulation O — Insider lending
Loans to executive officers, directors and principal shareholders.
Current text
Regulation W — Transactions with affiliates
Restrictions and requirements governing covered affiliate transactions.
Current text
Current text
Regulation CC — Funds availability and check collection
Availability, collection and return of checks and related disclosures.
Current text
Regulation J — Federal Reserve payment services
Check collection, Fedwire funds transfers and FedNow transfers.
Current text
Deposit insurance coverage — 12 CFR Part 330
Ownership categories, aggregation and deposit-insurance coverage rules.
Current text
FDIC signs and insured-status representations — Part 328
Official signs, advertising and representations about deposit insurance.
Current text
Bank computer-security incident notification — Part 53
OCC notification requirements for covered incidents and bank service providers.
Current text
Bank Secrecy Act general rules — 31 CFR Part 1010
General definitions, reporting, records and information-sharing requirements.
Current text
Bank Secrecy Act rules for banks — Part 1020
Bank-specific AML, customer identification, reporting and recordkeeping rules.
Current text
Customer due diligence — 31 CFR 1010.230
Beneficial-owner identification and verification requirements for covered institutions.
Current text
Section 314(b) — 31 CFR 1010.540
Voluntary information sharing, eligibility, notice and safe-harbor conditions.
Current text
Bank suspicious activity reports — 31 CFR 1020.320
Bank SAR obligations, timing, records and confidentiality.
Current text
OFAC reporting and enforcement — 31 CFR Part 501
Sanctions-related reporting, procedures and enforcement guidelines.
Current text
TCPA calling and texting rules — 47 CFR 64.1200
Restrictions on telemarketing, calls and texts; check the operative provisions and dates.
Current text
Credit risk retention — 12 CFR Part 244
Regulation RR requirements for asset-backed securitizations.
Current text
Interagency third-party relationship guidance
Planning, diligence, contracts, monitoring and termination; tailored to risk.
Supervisory guidance
Community-bank third-party risk management guide
Practical considerations for community-bank third-party relationships.
Voluntary guide
Third-party deposit arrangements — joint statement
Responsibility, records and risks in bank-fintech deposit programs.
Supervisory statement
OFAC Framework for Compliance Commitments
Sanctions risk assessment, internal controls, testing, training and management commitment.
Agency framework
Section 314(a) information-sharing resources
Law-enforcement requests and the separate mandatory information-sharing process.
Agency resource
Understanding deposit insurance
Coverage basics and ownership-category rules; complements the regulatory text.
Agency explanation
NIST AI Risk Management Framework
AI governance and risk-management framework; not a banking regulation.
Voluntary framework
NIST Generative AI Profile — AI 600-1
Generative-AI risk considerations and suggested actions.
Voluntary framework
Utah Financial Institutions Act — Title 7
Utah banking, financial-institution and related charter authorities.
State statutory text
Utah Consumer Credit Code — Title 70C
Utah consumer-credit requirements and applicable exemptions.
State statutory text
Utah DFI financial-institution laws and rules
State-regulator entry point to financial-institution law and administrative rules.
Agency resource
Regulation D — Reserve requirements and deposit definitions
Deposit definitions, reserve-account requirements and interest on reserve balances. Useful for distinguishing deposit classification from the rates a bank pays customers; consult current amendments before applying a numerical threshold.
Codified rule
Regulation II — Debit interchange and network routing
Debit-card interchange standards, exemptions, fraud-prevention adjustments and network-routing restrictions. Relevant to issuer economics and merchant acceptance; coverage differs across issuers and provisions.
Codified rule
Regulation WW — Liquidity coverage and stable funding
Liquidity coverage ratio and net stable funding ratio provisions for covered institutions. Provides the regulatory treatment of liquid assets, outflows and funding stability; applicability and tailoring matter.
Codified rule
Lending limits — 12 CFR Part 32
Single-borrower lending limits, combination rules and exceptions for covered OCC-supervised institutions. A useful starting point for concentration controls and connected-borrower analysis.
Codified rule
Real estate lending and appraisals — 12 CFR Part 34
Real-estate lending standards, appraisal requirements and appraisal-management provisions. Distinguish underwriting standards from property valuation and the exceptions applicable to a particular transaction.
Codified rule
Deposit-insurance recordkeeping — 12 CFR Part 370
Recordkeeping and information-system capabilities that enable timely insurance determinations at covered institutions. Relevant to depositor records, account ownership and resolution readiness; the rule does not apply to every insured bank.
Codified rule
Independent audits and reporting — 12 CFR Part 363
Independent audit, management reporting and audit-committee requirements for covered insured institutions. Check the applicable asset thresholds and effective dates rather than assuming one requirement applies to every bank.
Codified rule
Brokered deposits and funding restrictions — 12 CFR Part 337
Includes brokered-deposit acceptance restrictions, waivers and related funding provisions. Read the regulatory text alongside statutory amendments and the institution’s capital category.
Codified rule
Resolution and receivership — 12 CFR Part 360
Rules addressing FDIC resolutions and receiverships, including claims and selected contractual and securitization issues. Useful for separating the failed bank, the receivership and an acquiring institution.
Codified rule
FTC Credit Practices Rule — 16 CFR Part 444
Prohibited credit-contract provisions, cosigner notices and late-charge practices within FTC jurisdiction. Bank applicability requires separate analysis; this is not a universal rule for every lender.
Codified rule
Consumer-report disposal — 16 CFR Part 682
Reasonable measures for disposing of consumer-report information and records held for a business purpose. Relevant to retention schedules, document destruction and disposal service-provider oversight.
Codified rule
Payday and covered high-cost loans — 12 CFR Part 1041
Covered-loan definitions, payment-transfer restrictions, consumer notices and recordkeeping. The text identifies reserved provisions; read it with current implementation and enforcement materials rather than applying removed underwriting requirements.
Codified rule
Credit-card billing errors — 12 CFR 1026.13
Direct access to billing-error notices, creditor investigation and resolution procedures, and treatment of disputed amounts. Useful for tracing disputes across a bank, servicer and technology partner.
Codified rule
Credit-card protections and claims — 12 CFR 1026.12
Special card provisions covering issuance, unauthorized use, claims and defenses, and selected account practices. Claims-and-defenses rights have their own conditions and should not be conflated with billing-error procedures.
Codified rule
Electronic-transfer error resolution — 12 CFR 1005.11
The operational rule for error notices, investigations, provisional credit and resolution communications. Includes exceptions and official interpretations relevant to building an investigation timeline.
Codified rule
Unauthorized-transfer liability — 12 CFR 1005.6
Consumer-liability rules for unauthorized electronic fund transfers, including the effect of notice timing and access-device loss. Read alongside error-resolution procedures, rather than treating fraud classification alone as the liability decision.
Codified rule
Adverse-action notices — 12 CFR 1002.9
Notification timing, incomplete applications, specific reasons and business-credit variations under Regulation B. Relevant to automated underwriting and the evidence supporting the reasons given to an applicant.
Codified rule
Furnisher direct disputes — 12 CFR 1022.43
Scope, notice content, investigation duties and exceptions for disputes sent directly to a furnisher. Helps distinguish direct-dispute workflows from disputes routed through a consumer reporting agency.
Codified rule
Debt-validation notices — 12 CFR 1006.34
Validation information, itemization and delivery requirements for covered debt collectors. Applicability turns on the FDCPA and Regulation F definitions; originating creditors are not automatically covered debt collectors.
Codified rule
Credit-card ability to pay — 12 CFR 1026.51
Ability-to-pay requirements for opening card accounts and increasing credit limits, including special rules for younger consumers. Separate from the mortgage ability-to-repay and qualified-mortgage framework.
Codified rule
Customer Identification Program — FFIEC examination guidance
Bank CIP examination guidance covering identification, verification, recordkeeping and reliance arrangements. Links the operating controls to their BSA regulatory authority; using a vendor does not by itself satisfy the bank’s program obligations.
Examination guidance
Funds-transfer records and Travel Rule — 31 CFR 1010.410
Recordkeeping provisions for financial institutions, including funds-transfer information and transmission requirements. Relevant to payment-chain data quality; apply the rule’s definitions, thresholds and exceptions.
Codified rule
SBA business lending — 13 CFR Part 120
Regulatory framework for SBA business-loan programs, including 7(a) and 504 requirements and lender oversight. Business lending is distinct from consumer credit; program eligibility and guaranty conditions require separate review.
Codified rule
E-SIGN — electronic records and consumer consent
Statutory recognition of electronic signatures and records, with conditions for electronic delivery of legally required consumer disclosures. Useful for consent, retention and reproducibility controls in digital account opening.
Statutory text
Utah commercial-financing registration and disclosures
DFI’s official implementation resource for Title 7, Chapter 27, including registration, transaction disclosures and links to statutory requirements. Relevant to business financing and merchant finance; review the Act’s exemptions.
Agency implementation resource
Utah Consumer Privacy Act — official implementation resources
Official explanation of consumer data rights, covered-business thresholds and privacy responsibilities, with a link to the Act. Check statutory exclusions and financial-services exemptions before applying the general requirements.
Agency explanation of state law
Utah Office of Artificial Intelligence Policy — regulatory resources
Official access point for Utah AI policy, regulatory-relief work and the supervised AI Sandbox. Program participation and proposed policy changes should not be treated as general exemptions from financial-services law.
State policy and program resources
New York cybersecurity requirements — 23 NYCRR Part 500
Official regulation, coverage guidance, exemptions, incident reporting and compliance resources for DFS-covered entities. State licensing and the applicable exemption determine coverage; a federal bank charter alone is not the test.
Regulation and compliance resources
NIST Cybersecurity Framework
Official framework, implementation resources and profiles for organizing cybersecurity risk management. A voluntary framework for most private-sector users; distinguish its outcomes from binding banking requirements.
Voluntary framework
Security and privacy controls — NIST SP 800-53 Rev. 5
A customizable security and privacy control catalog. The official page links Release 5.2.0, issued August 27, 2025, and its changes. Useful for mapping controls; adopting the catalog is not evidence that controls operate effectively.
Technical control catalog
Independent credit risk review — SR 20-13
Interagency guidance on independent, ongoing credit review and communication of portfolio performance to management and the board. Discusses tailoring review systems to the institution’s size, complexity and risk profile.
Supervisory guidance
FFIEC BSA/AML Examination Manual
Official examination modules for BSA/AML programs, regulatory requirements and selected products and customer risks. Sections carry their own update dates; the manual explains examination procedures and does not replace the underlying rules.
Examination manual
Credit Card Lending — Comptroller’s Handbook
Examiner guidance on card-bank operations, associated risks, risk management and regulatory requirements. Useful for reviewing underwriting, account management and credit-card portfolio governance.
Examination guidance
Installment Lending — Comptroller’s Handbook
Guidance on closed-end consumer lending risks and controls. The booklet distinguishes installment credit from open-end cards and complements the OCC’s broader portfolio and supervision materials.
Examination guidance
Merchant Processing — Comptroller’s Handbook
Examiner guidance on card-payment merchant processing and related risk management. Merchant acquiring and processing differ from card issuance, making this a useful companion to issuer and POS-lending controls.
Examination guidance
Recent developments37
Recent laws, rulemaking, guidance and court decisions. Newest first.
GENIUS Act — Federal Reserve implementation proposals
September proposals covering substantive requirements and application procedures.
Proposed
Impersonation scams and platforms — FTC 2026 advance notice
Seeks input on possible changes to the government-and-business impersonation rule, including the role of platforms and services in facilitating scams. An advance notice explores options; it does not impose the contemplated new duties.
Advance notice; not final
Cybersecurity supervision — OCC 2026-48
Updates the structure and references of the Cybersecurity Supervision Work Program and rescinds the 2023 bulletin. The OCC says the update adds no procedures and establishes no new regulatory expectations.
Updated examiner work program
CFPB reform — adopted committee substitute
BARR_154 substitute adopted September 16; proposed changes are not current law.
Committee-approved substitute
CLARITY Act — September 15 Senate action
Official floor record of the unsuccessful cloture vote on proceeding.
Procedural record
Third-party risk management — September 2026 proposal
Proposes tailored interagency guidance and replacement of existing guidance if finalized. Comments are due November 16, 2026; the proposal itself does not replace the current framework.
Proposed; comments due Nov 16
CLARITY Act — September Senate substitute
September 14 proposed substitute EHF26724; not enacted law.
Proposed legislation
Unsafe or unsound practices — OCC/FDIC final rule
Final definitions and related supervisory standards; future effective date.
Effective November 2, 2026
CFPB Accountability and Reform Act — H.R. 10184
Introduced text; compare with the subsequently adopted committee substitute.
Introduced legislation
Beneficial ownership reporting — August 2026 final rule
Revises CTA reporting; distinct from a bank’s customer due-diligence obligations.
Effective August 14, 2026
21st Century ROAD to Housing Act — Public Law 119-101
Housing, mortgage and bank-funding provisions; includes Keeping Deposits Local in section 902.
Enacted; dates vary by section
Trump v. Slaughter — Supreme Court opinion
FTC commissioner removal protection and presidential control of executive officials.
Decided June 29, 2026
Trump v. Cook — Supreme Court opinion
Federal Reserve governor removal, statutory process and the limits of the stay ruling.
Stay denied June 29, 2026
Lending and loan portfolio risk management — OCC 2026-29
Introduces the updated Comptroller’s Handbook booklet and identifies superseded materials. Use the linked booklet for portfolio oversight and lending-risk examination practices, alongside product-specific guidance.
Updated examination guidance
Section 314(b) — updated fraud-sharing guidance
Links to the June 12, 2026 fact sheet and current participation resources.
Current agency guidance
Reputation risk — interagency guidance revisions
Removes additional reputation-risk references from interagency documents.
Updated guidance
Keeping Deposits Local — H.R. 3234 House-passed text
Legislative history: its upper tier differs from enacted Public Law 119-101 section 902.
Earlier bill; compare enacted law
Federal Reserve payment-account proposal
Separate limited-account proposal; does not expand statutory eligibility.
Proposed
CAMELS / UFIRS revisions proposal
Proposed changes to the Uniform Financial Institutions Rating System.
Proposed
Section 1071 small-business lending — 2026 final rule
Official implementation page links the May 1, 2026 final rule revising coverage, data collection and other provisions, with compliance extended to January 1, 2028. The CFPB notes that supporting implementation materials will be updated later.
Final; compliance Jan 1, 2028
Model risk management — revised SR 26-2 guidance
Replaces SR 11-7 and SR 21-8; emphasizes a tailored, risk-based approach.
Current supervisory guidance
GENIUS Act — AML and sanctions proposal
Treasury proposal for stablecoin issuer AML and sanctions compliance programs.
Proposed
FedNow intermediaries — Regulation J proposal
Would allow additional intermediaries in FedNow transfer chains.
Proposed
GENIUS Act — FDIC requirements proposal
Proposed standards for FDIC-supervised permitted payment stablecoin issuers.
Proposed
AML program reform proposal
April proposal concerning risk-based financial-institution AML programs.
Proposed
Reputation risk — OCC/FDIC final rule
Separate OCC/FDIC action; does not establish finality of the Fed proposal.
Final rule issued
Basel III Endgame and related capital proposals
Official release linking the March capital package, including standardized and G-SIB proposals.
Proposed
Promoting Access to Mortgage Credit — EO 14393
Directs consideration of mortgage, capital, liquidity and process reforms.
Issued; agency action varies
National bank chartering — OCC final clarification
Clarifies trust-company and related activities under Part 5.
Effective April 1, 2026
GENIUS Act — OCC proposed regulations
OCC proposal and links to implementing regulatory text.
Proposed
Reputation risk — Federal Reserve Part 262 proposal
Proposal to codify removal of reputation risk from Fed supervisory programs.
Proposed
FDIC digital signs and ATM disclosures — 2026 final rule
Amends Part 328 requirements for digital deposit-taking channels, ATMs and related signs. Effective March 2, 2026, with an April 1, 2027 compliance date for these amendments; distinguish this timetable from other Part 328 obligations.
Effective; compliance Apr 1, 2027
Section 1033 — current compliance and litigation status
CFPB status page notes the October 29, 2025 stay of compliance dates.
Compliance dates stayed
Section 1033 — reconsideration advance notice
Reconsideration questions on representatives, fees, security and privacy.
Advance notice
Digital identity — NIST SP 800-63-4
Final guidance on identity proofing, authentication and federation, replacing SP 800-63-3. Useful for evaluating assurance levels and vendor controls; it does not independently establish compliance with bank CIP requirements.
Final technical guidance
GENIUS Act — enacted stablecoin framework
Public Law 119-27. General effectiveness depends on the statutory timing trigger.
Enacted; implementation pending
Section 1033 — personal financial data rights rule text
Open-banking provisions; read with the compliance-status page and pending reconsideration.
Compliance dates stayed