Regulation Z / TILA – Truth in Lending

Regulation Z (12 CFR Part 1026) implements the Truth in Lending Act, 15 U.S.C. § 1601 et seq. It governs how creditors disclose the cost and terms of consumer credit and gives consumers specific rights around rescission, billing-error resolution, and credit-card protections. The CFPB administers it; the federal banking agencies share enforcement authority. Every fintech that originates, services, or partners on consumer credit – cards, personal loans, BNPL, lines of credit, mortgages – has Regulation Z obligations.

Products covered

• Closed-end consumer credit: auto loans, personal loans, mortgages, private student loans
• Open-end consumer credit: credit cards, lines of credit, HELOCs
• BNPL: the CFPB's 2024 interpretive rule classified pay-in-four products as credit cards for Regulation Z purposes
• Charges and fees: any charge that meets the finance-charge definition is in scope, regardless of label

The disclosure regime

Regulation Z is built on prescribed disclosures – specific content, specific format, specific timing. For closed-end credit, the core disclosures are the APR, the finance charge, the amount financed, the total of payments, and the payment schedule. For open-end credit, account-opening disclosures, periodic statements, change-in-terms notices, and the credit-card application and solicitation Schumer Box are required. Mortgages, HELOCs, private student loans, and reverse mortgages have additional product-specific regimes layered on top.

APR – the most-litigated number in consumer finance

The Annual Percentage Rate is a measure of the cost of credit expressed as a yearly rate, calculated according to specific finance-charge inclusion rules. Under-disclosing APR – by omitting fees that should have been included in the finance charge, or by misclassifying a charge as not a finance charge – is one of the most-cited Regulation Z violations and a frequent class-action target. Statutory damages on top of regulator action create exposure that often exceeds the original credit volume.

Right of rescission

TILA Section 125 and Regulation Z § 1026.23 give consumers a three-business-day right to rescind certain credit transactions secured by their principal dwelling – refinances, HELOCs, and certain second-lien products. The clock starts when the consumer signs, receives the required notices, AND receives the required disclosures. Missing or defective disclosures extend the rescission window up to three years. Rescission cures are technical and the documentation has to be exactly right; this is where Regulation Z enforcement most often costs a creditor real money.

CARD Act overlay

The Credit Card Accountability Responsibility and Disclosure Act of 2009 layered substantial amendments onto Regulation Z for credit-card products:

• Limits on rate increases on existing balances
• Restrictions on certain fees and fee structures
• Strict ability-to-pay assessment at account opening and on credit-line increases
• Mandatory 21-day grace period
• Restrictions on marketing to consumers under 21
• Prescribed payment-allocation rules across rate buckets

Card programs operated through sponsor banks must satisfy these requirements at the program level. The sponsor bank's name on the regulator's door does not insulate the fintech operator from accountability when the CFPB evaluates how the consumer-facing program functioned.

BNPL after 2024

The CFPB's May 2024 interpretive rule classified pay-in-four BNPL products as credit cards for purposes of Regulation Z. The practical effect: pay-in-four providers must offer Regulation Z billing-error resolution rights, refund-allocation rules, and periodic-statement-style disclosures. Longer-term BNPL or interest-bearing BNPL was already squarely within TILA. The treatment of any specific BNPL product depends on its structure; counsel involvement is required.

Evidence examiners want

• Disclosure templates with version history
• Per-consumer record of disclosures shown, when, and through which channel
• APR and finance-charge calculations linked to the disclosure version they produced
• Billing-error logs with the consumer's notice, the investigation, and the resolution
• Rescission notices and any rescission-related cure or extension records
• Card-program ability-to-pay assessments per account opening and per line increase
• Vendor oversight records for any third party generating disclosures or computing APR

How FinQub supports Regulation Z compliance

Every disclosure shown to a consumer is versioned in FinQub alongside the APR calculation and the consumer record at the time. Adverse decisions, billing-error responses, and rescission events are first-class audit-trail entries linked to the underlying account and the disclosure version that was active. Examiner queries by consumer or by date range return the complete disclosure history without manual reconciliation.

FinQub does not generate the disclosure content or compute APR for you – that remains your decisioning system's responsibility. What FinQub provides is the evidence layer that demonstrates the program operated as designed when the CFPB asks, which is the question every Regulation Z exam ultimately turns on.