Section 2: Understanding the regulatory landscape

Federal regulations set the baseline

The federal regulatory framework establishes minimum standards applicable nationwide, with state regulations layering additional requirements creating multi-state complexity. Understanding this structure proves essential for compliance program design.

The Truth in Lending Act (TILA) mandates disclosure of credit terms allowing consumers to compare offers. While TILA exempts commercial loans over $58,300, many business loans fall below this threshold requiring compliance. Key requirements include clear disclosure of finance charges, annual percentage rate calculations, payment schedules, and total amount financed. TILA violations carry statutory damages of $500-$5,000 per violation plus actual damages and attorney fees.

The Equal Credit Opportunity Act (ECOA) prohibits discrimination in credit transactions based on protected characteristics. ECOA applies to all business credit regardless of size, requiring adverse action notices when denying credit, retention of application records for 12-25 months, and collection of demographic data for loans under $1 million. Violations trigger actual damages, punitive damages up to $10,000 for individuals or $500,000 for class actions, plus attorney fees.

The Fair Credit Reporting Act (FCRA) governs use of consumer credit reports in business lending decisions. When personal credit influences business loan underwriting, FCRA requires permissible purpose for accessing reports, adverse action notices citing credit report influence, and reasonable procedures ensuring accuracy. Willful violations carry statutory damages of $100-$1,000 per violation plus punitive damages.

The Military Lending Act (MLA) provides special protections for active duty servicemembers and dependents. The 36% APR cap includes all fees and charges, mandatory disclosures must be provided before consummation, and prohibited terms include prepayment penalties and mandatory arbitration. MLA violations void contracts and trigger administrative enforcement actions.

Bank Secrecy Act (BSA) and Anti-Money Laundering (AML) requirements apply to many non-bank lenders. Customer identification programs verify borrower identities, suspicious activity monitoring detects potential money laundering, currency transaction reporting documents large cash transactions, and recordkeeping maintains required documentation. BSA violations carry civil penalties up to $250,000 per violation plus potential criminal prosecution.

State disclosure laws create the compliance maze

The patchwork of state commercial financing disclosure laws represents the greatest compliance challenge for multi-state operators. California's SB 1235 pioneered requirements in 2018, with New York, Connecticut, Utah, Florida, Georgia, and Virginia following with variations creating operational complexity.

California's requirements prove most prescriptive, mandating specific formatting, terminology, and calculations. Disclosures must include total amount financed, finance charges itemized by type, annual percentage rate calculated per prescribed methodology, total payment amount, payment frequency and amounts, prepayment policies and penalties, and average monthly payment. The "Sopiko Letter" from DFPI clarifies formatting requirements including specific fonts and sizes, column widths and alignment, decimal points in calculations, and prescribed disclosure order.

New York's disclosure law covers transactions up to $2.5 million—significantly higher than California's $500,000 threshold. Requirements mirror California with additions including broker compensation disclosure, double-dipping fee explanations, and specific terminology requirements. Unique New York provisions mandate disclosure delivery timing, re-disclosure for material changes, and enhanced recordkeeping requirements.

Connecticut takes a different approach, requiring annual registration by October 1, 2024, with specific requirements for sales-based financing. Disclosures must show estimated term length, payment frequency, methodology for payment calculation, and reconciliation provisions. Utah requires registration with Department of Financial Institutions, prohibits certain practices like confession of judgment, and mandates specific APR calculation methods unique among states.

Florida and Georgia recently enacted laws with compliance dates in 2024-2025, while Virginia's requirements became effective January 2023. Each state adds unique provisions: Florida exempts transactions over $500,000, Georgia requires specific broker disclosures, and Virginia mandates annual registration with State Corporation Commission.

The variations create operational nightmares. APR calculations differ by state—California uses nominal rate while New York requires actuarial method for certain products. Disclosure timing varies from "at time of specific offer" to "before consummation." Formatting requirements range from prescriptive (California) to principles-based (Connecticut). Coverage thresholds span $500,000 to $2.5 million. Registration and licensing obligations differ completely by jurisdiction.

Licensing requirements compound complexity

Beyond disclosure laws, state lending licenses add another compliance layer. Virginia's Consumer Finance Act requires licenses for loans under $25,000 with application fees of $500-$1,500, net worth requirements of $25,000-$50,000, surety bonds of $10,000-$50,000, and annual assessments based on loan volume. Processing takes 60-120 days assuming clean applications.

California's Finance Lenders Law (CFL) governs commercial loans under $5 million for non-exempt lenders. Requirements include $25,000 minimum net worth, $25,000-$50,000 surety bonds, audited financial statements, detailed business plans, and background checks with fingerprinting. The multi-month process demands extensive documentation and legal support.

State-by-state licensing decisions require strategic analysis. Factors include deal flow from each state, average transaction sizes, competitive landscape, regulatory burden versus revenue opportunity, and operational capability to maintain compliance. Lenders often phase expansion: domicile state plus reciprocal states initially, high-volume states warranting investment second, selective expansion based on proven demand third, and comprehensive coverage only after achieving scale.

Registration requirements add complexity separate from licensing. Connecticut requires commercial financing providers complete annual registration with the state banking commissioner by October 1, 2024. Utah mandates registration with the Department of Financial Institutions. Missouri requires $100 initial registration plus $50 annual renewals. Virginia requires annual registration with the State Corporation Commission. These registration requirements apply even when full lending licenses are not required, creating administrative burdens for multi-state operations.