12 CFR § 1002.9: Adverse Action Notice Triggers, Timing, and Content

Under Regulation B of the Equal Credit Opportunity Act, the adverse action notice requirements oblige a creditor to tell an applicant, in writing and within set deadlines, that it has denied credit, approved it on different terms, closed or worsened an existing account, or refused to increase a limit. The notice has to identify the creditor, name the federal agency that oversees its ECOA compliance, state the applicant’s rights against credit discrimination, and either give the specific reasons for the decision or explain how to request them. When a credit report factored into the decision, a separate set of Fair Credit Reporting Act disclosures rides along in the same document.

What Triggers the Notice

Adverse action is broader than a denial. Under Regulation B, it covers a refusal to approve credit on roughly the terms or amount requested, a refusal to increase a credit limit, an account termination, and an unfavorable change to the terms of an existing account when the change targets a specific customer rather than a whole class of accounts.1eCFR. 12 CFR 1002.2 – Definitions A counteroffer is not adverse action if the applicant accepts or uses it.

Several situations look like adverse action but are excluded. No notice is required when the creditor changes terms the applicant expressly agreed to, acts on an account that is currently in default or delinquent, declines a routine point-of-sale authorization, cannot lawfully make the loan requested, or simply does not offer the type of credit involved.1eCFR. 12 CFR 1002.2 – Definitions The delinquency carve-out is narrower than it looks: it applies to a current delinquency on the account in question, not to a past delinquency that has been cured.

When the Notice Must Be Sent

Regulation B runs three separate clocks:

  • For a completed application, the creditor has 30 days after receiving it to notify the applicant of the decision.2eCFR. 12 CFR 1002.9 – Notifications
  • For adverse action on an existing account, the notice must go out within 30 days of the decision.2eCFR. 12 CFR 1002.9 – Notifications
  • For a counteroffer the applicant neither accepts nor uses, the creditor has 90 days from the date it presented the counteroffer to send a full adverse action notice.2eCFR. 12 CFR 1002.9 – Notifications

Incomplete applications work differently. If information is missing that the applicant can supply, the creditor has 30 days to either act on the application or send a written notice of incompleteness. That notice must identify the specific information needed, set a reasonable deadline for providing it, and warn that the application will receive no further consideration if the deadline passes.2eCFR. 12 CFR 1002.9 – Notifications The creditor can start by asking for the missing information informally by phone or in person, but if the application stays incomplete, a written notice has to follow. Once the applicant delivers the requested information, the 30-day clock for a completed application begins. If the applicant never responds, the obligation ends.

What the Notice Must Say

The written notice has to contain each of the following:

  • A statement of the action taken, such as denial, closure, or credit-limit reduction.
  • The name and address of the creditor.
  • The ECOA anti-discrimination statement, covering race, color, religion, national origin, sex, marital status, age, receipt of public assistance income, and exercise of rights under the Consumer Credit Protection Act.
  • The name and address of the federal agency that oversees the creditor’s ECOA compliance.
  • Either the specific reasons for the adverse action, or a disclosure of the applicant’s right to request those reasons.2eCFR. 12 CFR 1002.9 – Notifications

The reasons carry the most compliance risk. The creditor must identify the principal factors behind the decision, and official CFPB commentary indicates that disclosing more than four is unlikely to help the applicant, so most notices cap at four.3Consumer Financial Protection Bureau. Comment for 1002.9 – Notifications Generic language such as “did not meet internal standards” or “insufficient score” does not satisfy the rule. The reasons need to be specific enough for the applicant to see what actually drove the outcome.

If the creditor uses the alternative approach, the notice must tell the applicant they may request the reasons within 60 days, and include the name, address, and phone number of the person or office that will provide them. When the applicant makes that request in time, the creditor has 30 days to respond in writing. Oral responses are permitted, but the applicant must be told they can get written confirmation within 30 days of a written request.2eCFR. 12 CFR 1002.9 – Notifications

FCRA Disclosures When a Credit Report Was Used

If the adverse action was based even partly on information from a consumer report, the Fair Credit Reporting Act adds its own required content:

  • The name, address, and phone number of the reporting agency, including a toll-free number if it is a nationwide agency.
  • A statement that the reporting agency did not make the decision and cannot explain it.
  • The applicant’s numerical credit score, if one was used, along with the key factors that affected it.
  • Notice that the applicant can request a free copy of the report from that agency within 60 days.
  • Notice of the right to dispute inaccurate or incomplete information with the reporting agency.4Office of the Law Revision Counsel. 15 USC 1681m – Requirements on Users of Consumer Reports

Because a credit report is behind most credit decisions, the standard adverse action notice combines Regulation B’s content with these FCRA elements in a single document. The credit score disclosure, added later than the rest, is one of the more commonly missed pieces.

How the Rules Change for Business Applicants

Regulation B splits business credit at a $1 million gross-revenue line, measured from the preceding fiscal year.

For businesses with gross revenues of $1 million or less, the requirements track consumer credit with two changes: the statement of action can be delivered orally, and specific reasons only need to be provided if the applicant makes a written request within 60 days of the notification.5eCFR. 12 CFR 1002.9 – Notifications

For businesses above the $1 million line, and for trade credit, factoring, and similar commercial credit, the notification must go out within a “reasonable time” rather than 30 days. It can be oral or written. A written statement of reasons and the ECOA notice are required only if the applicant asks for them in writing within 60 days.5eCFR. 12 CFR 1002.9 – Notifications

What Happens If a Creditor Gets It Wrong

A creditor that violates the notification rules faces civil liability under the ECOA. The applicant can recover actual damages. Courts can add punitive damages of up to $10,000 in an individual action, or in a class action, the lesser of $500,000 or one percent of the creditor’s net worth. Courts weigh the frequency of the failure, whether it was intentional, and the creditor’s resources. Prevailing plaintiffs can recover attorney’s fees and costs.6Office of the Law Revision Counsel. 15 USC 1691e – Civil Liability Patterns of notification failures also draw enforcement attention from the CFPB or the creditor’s prudential regulator.

One narrow safe harbor exists. A failure that results from a genuine inadvertent error, meaning a mechanical, electronic, or clerical mistake that occurred despite reasonable compliance procedures, is not treated as a violation. Computer malfunctions, printing errors, and calculation mistakes are the kind of thing this covers. An error of legal judgment does not qualify, and the creditor has to correct the problem as soon as it is discovered.