What Is Regulation B? Protections, Notices, and Appraisal Rights

Regulation B is the Consumer Financial Protection Bureau’s rule implementing the Equal Credit Opportunity Act (ECOA). Codified at 12 CFR Part 1002, it tells anyone who regularly extends credit what they can and cannot do at every stage of a credit transaction, from the questions on the application to the notice you receive if you’re turned down. Congress passed ECOA in 1974 to stop lenders from making credit decisions based on who you are rather than whether you can repay, and Regulation B is how that mandate becomes operational.

Who Has to Follow It and Who Enforces It

Regulation B reaches any entity that regularly extends credit, whether that’s a national bank issuing mortgages, a credit union writing auto loans, or a retailer offering a store card. Enforcement is shared. The CFPB is the primary rulemaker, but supervision and enforcement authority is split among the Office of the Comptroller of the Currency, the Federal Reserve Board, the Federal Deposit Insurance Corporation, the National Credit Union Administration, the Department of Justice, and the Federal Trade Commission.¹ Which agency handles a specific complaint depends on the type of lender involved. The CFPB accepts complaints about most types of credit and routes them to the appropriate regulator.

The Protected Characteristics

The heart of Regulation B is a defined list of “prohibited bases” in 12 CFR 1002.2(z). A lender cannot use any of the following to deny credit, offer worse terms, or discourage you from applying:

Race, color, religion, or national origin
Sex or marital status
Age, as long as you’re old enough to sign a contract in your state
Income derived from public assistance, including Social Security, SNAP benefits, and disability payments
Your good-faith exercise of any right under the Consumer Credit Protection Act, such as filing a complaint or disputing a charge

A lender that crosses any of these lines, whether through an explicit policy or through more subtle steering, faces liability under the statute.² The prohibition also covers discouragement: statements made in advertising, in person, or over the phone that would deter a reasonable person from applying because of a protected characteristic violate the rule even if no application is ever filed.³

What Lenders Cannot Ask You

Section 1002.5 governs the information-gathering stage. Lenders can request most kinds of information in connection with a credit application, but several categories are off-limits or restricted.

Questions about your plans for having or raising children are flatly prohibited. A lender cannot ask about birth control, intentions to have children, or your ability to bear children. It can ask about the number and ages of your dependents and dependent-related expenses, but only if the questions are asked of everyone regardless of sex or marital status.⁴

Questions about a spouse or former spouse are tightly restricted. A lender generally cannot ask for information about a spouse unless one of these exceptions applies: the spouse will be a joint applicant, the spouse will be authorized to use the account, you live in a community property state, or you are relying on your spouse’s income or assets to qualify.

The Spouse Signature Rule

One of the most consequential protections in Regulation B is the spouse signature rule under 12 CFR 1002.7. If you independently qualify for credit on your own income and creditworthiness, a lender cannot require your spouse to co-sign. A lender also cannot treat a joint financial statement as an application for joint credit just because both names appear on it.⁵

When a lender does decide it needs a cosigner or guarantor to support your creditworthiness, it still cannot dictate that your spouse fill that role. You can choose any creditworthy person. A spouse’s signature can only be required when state law genuinely requires it to make specific property available as collateral or to satisfy the debt.⁵

Rules for How Lenders Evaluate You

Regulation B does not stop at the front door. Section 1002.6 controls how lenders actually score and weigh information during underwriting. A lender can consider any information it obtains, so long as that information is not used to discriminate on a prohibited basis. Specific rules constrain what lenders do with certain data:

A statistical credit scoring model can include age as a variable, but it cannot assign a negative score to elderly applicants. In a judgmental system, age can only be used to evaluate a particular element of creditworthiness, not as a standalone negative factor.
A lender cannot assume that someone in a particular demographic group is likely to have children and therefore experience reduced income. Aggregate statistics about childbearing or childrearing cannot factor into a credit decision.
A lender cannot discount income simply because it comes from part-time work, an annuity, a pension, or another retirement benefit. If you rely on alimony, child support, or separate maintenance, the lender must treat those as income to the extent they are likely to continue.
A lender cannot penalize you for not having a phone listed in your name, though it can consider whether you have a phone at your residence.
If a lender looks at credit history for similarly qualified applicants, it must consider accounts that both spouses were allowed to use, not just accounts in one spouse’s name.⁶

Notice of the Decision and the 30-Day Clock

Once you submit a completed application, the lender is on the clock. Under 12 CFR 1002.9, it must notify you of its decision within 30 days of receiving the completed application. This applies whether the decision is an approval, a denial, or a counteroffer with different terms. The same 30-day window applies when a lender takes adverse action on an existing account, such as reducing your credit limit or closing your line of credit.⁷

If the lender makes a counteroffer and you do not accept or use the credit within 90 days, it must then send an adverse action notice.⁸ Incomplete applications get the same 30 days: the lender must tell you what is missing and give you a reasonable opportunity to provide it.

An adverse action notice is not just a rejection letter. It must contain the specific reasons for the denial or inform you of your right to request them. Vague explanations like “did not meet internal credit standards” do not satisfy the requirement. The lender needs to cite concrete factors such as insufficient income, short employment history, or a high debt-to-income ratio. The notice must also identify the federal agency responsible for overseeing that particular lender’s compliance with ECOA.⁷

Your Right to Appraisal Copies on Home Loans

For any loan that would be secured by a first lien on a dwelling, 12 CFR 1002.14 requires the lender to give you copies of all written appraisals and valuations developed during the application. You get the copies whether you are approved, denied, or withdraw the application.⁹

The lender must provide each appraisal promptly after it is completed, or at least three business days before closing, whichever comes first. You can waive the three-day advance delivery, but the lender still has to hand over the copies no later than closing. The lender cannot charge you for the copies, though it can pass along the actual cost of ordering the appraisal.

This right covers only first liens on dwellings, defined as residential structures with one to four units, including condominiums, co-ops, and manufactured homes. Second-lien home equity lines and loans secured by commercial property fall outside this section.⁹

Special Purpose Credit Programs

Regulation B contains a built-in exception that allows lenders to target credit assistance to groups who would otherwise be underserved. Under 12 CFR 1002.8, a “special purpose credit program” can restrict eligibility to a particular class of applicants without violating the anti-discrimination rules, as long as it meets strict requirements. Three types qualify: credit assistance expressly authorized by federal or state law for an economically disadvantaged group; credit assistance offered by a tax-exempt nonprofit for its members or an economically disadvantaged class; and programs offered by or involving a for-profit organization to meet special social needs.

For-profit programs carry the heaviest requirements. They must operate under a written plan that identifies the class served, describes the credit procedures and standards, provides information supporting the need for the program, and either sets a specific duration or states when the program will be reassessed. They must also target applicants who, under the lender’s usual standards, would either be denied credit entirely or receive it on less favorable terms.¹⁰ Within these programs, lenders can request and consider demographic information that would otherwise be prohibited, strictly for determining eligibility.

Recent and Pending Changes

The 2026 Disparate Impact Rule

For decades, federal enforcement treated two types of discrimination as illegal under ECOA: intentional discrimination (“disparate treatment”) and facially neutral policies that disproportionately harm a protected group without a legitimate business justification (“disparate impact”). In April 2026, the CFPB finalized a rule change concluding that ECOA’s text does not support disparate-impact claims. The amended 12 CFR 1002.6(a) now states that the “effects test” does not apply under ECOA, and the rule takes effect on July 21, 2026.¹¹

Under the new rule, an applicant would need to show that a lender intentionally used a protected characteristic, or used a facially neutral criterion as a proxy with intent to advantage or disadvantage a protected group. The Bureau cited the Supreme Court’s reasoning in Loper Bright Enterprises v. Raimondo as the basis for the reinterpretation.¹¹ The change will likely face legal challenges.

Small Business Lending Data

Section 1071 of the Dodd-Frank Act added a demographic data collection requirement for small business lending. Under the 2023 final rule, covered lenders must collect and report information about small business applicants, including whether the business is minority-owned, women-owned, or LGBTQI+-owned, along with the ethnicity, race, and sex or gender of up to four principal owners.¹² The data is subject to a firewall: it must be kept separate from the application and cannot be used in credit decisions.

In November 2025, the CFPB proposed lowering the gross annual revenue threshold that defines a “small business” for data collection purposes from $5 million to $1 million.¹³ Court orders have tolled compliance deadlines for certain parties while litigation continues, so the ultimate scope and timeline remain in flux.

What You Can Do If a Lender Violates Regulation B

If you believe a lender has violated Regulation B, you have two main paths. The most accessible is filing a complaint with the CFPB through its online portal. The Bureau forwards the complaint to the appropriate enforcement agency based on the type of creditor, and depending on the severity and pattern of the violation, the agency may investigate, impose corrective measures, or refer the case to the Department of Justice.

You can also sue in federal district court or any other court with jurisdiction, with no minimum amount in controversy. Under 15 U.S.C. 1691e, you can recover:

Actual damages for any financial harm you can prove, such as the cost difference between the loan you received and the one you should have received
Punitive damages up to $10,000 per individual plaintiff; in a class action, total punitive damages cannot exceed $500,000 or 1% of the creditor’s net worth, whichever is less
Reasonable attorney fees and court costs if you win
Equitable relief, such as a court order requiring the lender to approve a wrongfully denied application or change a discriminatory policy

The $10,000 punitive damages cap has not been adjusted for inflation since the statute was enacted, which is low enough that many individual cases depend on actual damages and fee recovery to make litigation practical.¹⁴

You have five years from the date of the violation to file suit under ECOA. If a federal agency or the Attorney General starts an enforcement action within that five-year window, any individual victimized by the same discrimination gets an additional year from the date that proceeding began to file their own claim.¹⁴

Lenders have one significant defense. If they acted in good-faith reliance on an official rule, regulation, or interpretation issued by the CFPB, they face no liability even if that guidance is later overturned or rescinded.¹⁴ Given the current shifts around disparate impact, that defense may draw new attention during the transition.

1
Consumer Financial Protection Bureau. What You Need to Know About the Equal Credit Opportunity Act and How It Can Help You
2
eCFR. 12 CFR 1002.2 – Definitions
3
eCFR. 12 CFR 1002.4 – General Rules
4
eCFR. 12 CFR 1002.5 – Rules Concerning Requests for Information
5
eCFR. 12 CFR 1002.7 – Rules Concerning Extensions of Credit
6
eCFR. 12 CFR 1002.6 – Rules Concerning Evaluation of Applications
7
eCFR. 12 CFR 1002.9 – Notifications
8
eCFR. 12 CFR Part 1002 – Equal Credit Opportunity Act (Regulation B)
9
eCFR. 12 CFR 1002.14 – Rules on Providing Appraisals and Other Valuations
10
eCFR. 12 CFR 1002.8 – Special Purpose Credit Programs
11
Federal Register. Equal Credit Opportunity Act (Regulation B)
12
Consumer Financial Protection Bureau (CFPB). Small Business Lending Rule: Data Points Chart
13
Federal Register. Small Business Lending Under the Equal Credit Opportunity Act (Regulation B)
14
Office of the Law Revision Counsel. 15 USC 1691e – Civil Liability