Equal Credit Opportunity Act (ECOA)

The Equal Credit Opportunity Act (ECOA, 1974) — codified at 15 U.S.C. §§ 1691–1691f and implemented through the CFPB's Regulation B (12 C.F.R. Part 1002) — prohibits credit discrimination based on race, color, religion, national origin, sex, marital status, age (if 18+), receipt of public assistance income, or the exercise of any rights under consumer protection laws. ECOA applies to any creditor that regularly extends credit: mortgage lenders, credit card issuers, auto dealers, banks, finance companies, and retailers. Two key procedural rights flow from ECOA: (1) when a creditor takes adverse action (denying credit, reducing a credit line, or changing terms unfavorably), it must notify the applicant with specific reasons for the decision — vague responses like "insufficient income" are insufficient; and (2) applicants have the right to receive a copy of any appraisal used in a mortgage transaction. The practical impact is enormous for lending: ECOA bans any consideration of prohibited characteristics in underwriting, pricing, or terms. Enforcement comes from multiple directions — the CFPB, DOJ, OCC, Federal Reserve, and FDIC all conduct fair lending examinations of regulated institutions, looking for both disparate treatment (intentional discrimination) and disparate impact (neutral policies with discriminatory effects). Violations expose lenders to actual damages, punitive damages up to $10,000 per individual or $500,000 per class action, plus attorney's fees. The rise of AI-based underwriting has created new ECOA tension: CFPB guidance requires lenders to provide specific adverse action reasons even when an algorithm makes the decision — "the model declined you" is not a compliant reason.

Current Law (2026)

Parameter	Value
Core statute	Equal Credit Opportunity Act (1974), 15 U.S.C. §§ 1691-1691f
Implementing regulation	Regulation B (12 C.F.R. Part 1002)
Enforcement	CFPB (rulemaking, supervision); DOJ (pattern-or-practice litigation); federal banking regulators; private right of action
Protected classes	Race, color, religion, national origin, sex (including sexual orientation and gender identity), marital status, age, receipt of public assistance income, exercise of rights under the Consumer Credit Protection Act
Coverage	ALL creditors — banks, credit unions, mortgage companies, auto dealers, credit card companies, retail stores, anyone who regularly extends credit
Adverse action notice	Required within 30 days; must state specific reasons for denial or adverse change
Civil liability	Actual damages; punitive damages up to $10,000 (individual) or $500,000/1% of net worth (class action); attorney fees

Legal Authority

15 U.S.C. § 1691(a) — Scope of prohibition (it shall be unlawful for any creditor to discriminate against any applicant on a prohibited basis with respect to any aspect of a credit transaction)
15 U.S.C. § 1691(b) — Activities not constituting discrimination (age may be considered if statistically related to creditworthiness; income from public assistance must be treated like other income; inquiry into marital status is permitted for secured credit in community property states)
15 U.S.C. § 1691(d) — Adverse action notice (within 30 days of taking adverse action, the creditor must notify the applicant of the action, provide a statement of specific reasons, and disclose the applicant's right to request reasons if not provided)
15 U.S.C. § 1691e — Civil liability (any creditor who violates ECOA is liable for actual damages, punitive damages up to $10,000 individually or lesser of $500,000 or 1% of creditor's net worth in class actions, plus costs and attorney fees)

How It Works

ECOA is the federal law that makes it illegal to discriminate in any aspect of a credit transaction. It applies to every creditor and every type of credit — from mortgages to credit cards to auto loans to business loans — and prohibits discrimination on a wider range of bases than almost any other federal civil rights law.

ECOA prohibits discrimination in every aspect of a credit transaction — marketing, applications, underwriting, terms and conditions, servicing, and collection — across every type of credit from mortgages to credit cards to business loans. The protected classes go beyond the familiar race, color, religion, national origin, and sex to include marital status (creditors cannot refuse credit to a single applicant or require a spouse's signature on an individual application), age (with limited exceptions for statistically valid scoring models), receipt of public assistance (Social Security, SNAP, TANF, and disability benefits must be treated like any other income), and exercise of Consumer Credit Protection Act rights (no retaliation for disputing a billing error or exercising other consumer credit rights). The law covers both intentional discrimination (disparate treatment) and facially neutral policies that produce discriminatory results without business justification (disparate impact). It works alongside the Truth in Lending Act and Fair Credit Reporting Act as the core framework of federal consumer credit law.

When a creditor denies credit, reduces a credit limit, or takes any other adverse action, ECOA requires a written adverse action notice within 30 days — not generic language, but specific reasons: "insufficient length of employment," "excessive obligations in relation to income." If a credit score was used, the notice must include the score and the key factors that hurt it. This transparency requirement creates a paper trail for fair lending reviews and helps consumers understand and address their creditworthiness. Enforcement increasingly focuses on disparate impact: auto lending markups where dealer discretion results in minority borrowers paying more, credit scoring models that use zip codes or educational institutions as proxies for race, and underwriting criteria that disproportionately exclude protected classes without business justification. DOJ and CFPB have brought major fair lending cases with hundreds of millions in settlements. As credit decisions shift to algorithmic models, CFPB has affirmed that ECOA's adverse action notice requirements apply regardless of model complexity — creditors using AI/ML models must still be able to explain why an applicant was denied.

How It Affects You

If you've been denied credit or received worse terms than expected: ECOA gives you two immediate rights. First, within 30 days of the adverse action (denial, reduced credit limit, rate increase, or unfavorable term change), you must receive a notice with specific reasons — not vague language. Specific means concrete factors: "insufficient length of employment," "too many recent inquiries," "debt-to-income ratio exceeds guidelines." If you only get a credit score notice with generic factors, that may not satisfy ECOA. Second, if a credit score was used, the notice must include the actual score and the key factors that hurt it. Read the reasons carefully — they tell you what to address before reapplying. If you believe the adverse action involved discrimination based on race, sex, national origin, age, marital status, or receipt of public assistance, you have multiple options: (1) file a complaint with the CFPB at consumerfinance.gov/complaint (the CFPB will investigate and forward to the creditor); (2) file a complaint with the DOJ Civil Rights Division for pattern-or-practice discrimination; (3) consult a consumer law attorney about a private lawsuit (ECOA allows actual damages plus punitive damages up to $10,000 individually, plus attorney fees — many attorneys take ECOA cases on contingency). Discriminatory adverse actions are often pattern issues, not isolated incidents — the CFPB monitors for patterns across thousands of applications, not just yours.

If you're applying for credit individually as a married person: A creditor cannot require your spouse to co-sign an application or be a joint applicant if you qualify on your own. The only exceptions: (1) if the credit will be secured by jointly-owned property in a non-community-property state; (2) if the spouse's income is necessary for you to qualify; or (3) if you're in a community property state (Arizona, California, Idaho, Louisiana, Nevada, New Mexico, Texas, Washington, Wisconsin), where spousal signature may be required for certain secured credit. A creditor also cannot ask about your spouse's income if you don't rely on it — and cannot ask whether you're married, separated, or divorced on an individual unsecured credit application (except for community property states). If you're widowed or divorced, you cannot be denied credit solely because you lost access to a spouse's income — the creditor must evaluate your own income and creditworthiness independently.

If you receive Social Security, disability, TANF, SNAP, or other public assistance income: Creditors must count your public assistance income the same way they count employment income. They cannot discount it, exclude it, or treat it as less stable simply because it comes from the government rather than an employer. If a lender tells you your Social Security disability income "doesn't count" or can only be used at a reduced rate, that's an ECOA violation. The only exception: a creditor may consider the remaining term of income from a public assistance program if that duration is shorter than the term of the loan — which is a legitimate business consideration, not discrimination. Document every interaction. If your income is being discounted, ask the loan officer to explain in writing why your income was excluded or reduced, and file an ECOA complaint with the CFPB.

If you're a lender, credit officer, or compliance professional: ECOA applies to your institution's entire credit lifecycle — from marketing and outreach (are you avoiding or discouraging applications from protected classes?) to underwriting, pricing, servicing, and collections. Fair lending examiners from the CFPB, OCC, FDIC, and Federal Reserve look for both disparate treatment (are protected-class applicants being treated differently?) and disparate impact (are facially neutral policies producing discriminatory outcomes?). Discretionary pricing — where loan officers have latitude to set rates above the risk-based floor — is a major disparate impact risk area and the subject of major DOJ auto lending settlements. Algorithmic underwriting requires particular care: the CFPB has clarified that creditors using AI/ML models must still provide specific, explainable adverse action reasons — "model declined" is not compliant. Section 1071 of Dodd-Frank (small business lending data collection) requires lenders to collect and report demographic data on small business credit applications, creating a new compliance obligation with significant fair lending enforcement implications.

State Variations

Many states have their own fair lending laws that provide additional protections
Some states add protected categories beyond ECOA (source of income, military status, sexual orientation in states where not yet covered federally)
State enforcement varies — some state attorneys general have active fair lending enforcement programs
Municipal fair lending ordinances may add additional requirements in some cities; payday lending has been a particular focus of state and local fair lending enforcement

Implementing Regulations

The CFPB's ECOA implementing regulations are at 12 CFR Part 1002 — Regulation B. Key provisions:

§ 1002.4 — General rule: a creditor shall not discriminate against an applicant on a prohibited basis regarding any aspect of a credit transaction; a creditor also shall not make any oral or written statement that would discourage a reasonable person from applying — the anti-discouragement rule extends the prohibition beyond formal decisions to marketing, outreach, and pre-application communications
§ 1002.5 — Rules on requesting information: creditors may generally request any information relevant to creditworthiness; however, creditors may not request information about race, color, religion, national origin, or sex in most circumstances; marital status information may only be requested on applications for joint credit or credit secured by property in community property states; the section defines when inquiry into an applicant's sex or national origin is permitted (for HMDA monitoring on home loan applications)
§ 1002.6 — Rules for evaluating applications: creditors must evaluate all applications on a non-discriminatory basis; statistical credit-scoring models may consider age only if it is empirically derived and statistically sound; income from public assistance must be evaluated the same as other income; a creditor may not consider whether an applicant's income derives from part-time employment, an annuity, or a pension as a basis for reducing or excluding it without an objective business justification
§ 1002.7 — Rules on extensions of credit: a creditor shall not refuse to grant an individual account to a creditworthy applicant on the basis of sex or marital status; a spouse's signature cannot be required on an individual credit application unless state marital-property law requires it or the spouse's income is necessary to qualify; the section also prohibits requiring that an account be redesignated from joint to individual upon separation, divorce, or death of a co-applicant — the account status must be maintained unless the surviving applicant fails to qualify individually
§ 1002.9 — Adverse action notifications: a creditor must notify an applicant of action taken within 30 days of receiving a completed application; if adverse action is taken, the notice must include the specific reasons or a disclosure of the applicant's right to request reasons within 60 days; if a credit score was a factor, the notice must include the score, the range, the date created, the name of the scoring model, and up to four key factors that adversely affected the score; a statement that the applicant has the right to a copy of the application upon written request
§ 1002.10 — Joint account credit reporting: a creditor that furnishes credit information must designate joint accounts to reflect both spouses' participation; both parties' credit histories must be reported — the rule prevents the historical practice of reporting joint account history only under the husband's name
§ 1002.13 — Monitoring information for home mortgage loans: for home purchase, home improvement, and refinancing loans secured by a dwelling, creditors must request information about the applicant's race, sex, marital status, and age — for monitoring purposes only; this information is not used in the credit decision; if an applicant declines to provide it, the creditor must note "applicant declined" on the application
§ 1002.14 — Appraisal copy rule: a creditor must provide applicants a copy of all written appraisals and valuations developed in connection with a mortgage loan application promptly after completion but no later than 3 business days before consummation (or account opening for open-end credit); this right may not be waived; applicants may waive the timing requirement (to receive the copy at closing) but not the right to receive the copy at all
§ 1002.15 — Self-testing privilege: creditors who voluntarily conduct fair lending self-tests may obtain a privilege for the self-test results — reports analyzing whether the creditor's lending practices comply with ECOA are protected from disclosure in legal proceedings if the creditor actually corrects any violation identified; this incentivizes proactive internal monitoring
§§ 1002.101–1002.114 — Small Business Lending Data (Section 1071 implementation): covered financial institutions must collect and report demographic data on small business credit applications — including race, sex, and ethnicity of principal owners, census tract, credit type, loan amount, action taken, and pricing information; data is reported annually to the CFPB and published publicly; financial institutions below certain origination thresholds are exempt; the collection must use a "firewall" ensuring those who collect demographic data cannot share it with persons involved in making credit decisions on the same application

The regulation creates a comprehensive anti-discrimination framework from initial marketing through final payment. Adverse action notice requirements — with their specific-reasons mandate — are Regulation B's most commonly enforced provisions; CFPB supervisory findings frequently cite inadequate adverse action notices. The Section 1071 small business data collection (§§ 1002.101–1002.114) is the most significant regulatory expansion since Regulation B's original adoption, creating a HMDA-like data system for commercial lending.

12 CFR Part 202 — Federal Reserve Board Regulation B: the FRB's legacy ECOA implementing regulation, substantively parallel to CFPB Part 1002 but maintained separately after Dodd-Frank transferred primary ECOA rulemaking authority to the CFPB in 2011. Part 202 continues to govern state member banks directly supervised by the Federal Reserve and preserves several provisions of historical significance: § 202.13 (monitoring information collection for home mortgage applications — same demographic data requirement as Part 1002.13, predating it by decades); § 202.14 (appraisal copy rule — applicants must receive appraisals before consummation); § 202.15 (self-testing privilege — creditors who conduct voluntary fair lending self-tests may shield the results from discovery if they correct identified violations, an incentive for internal compliance audits that CFPB preserved in § 1002.15); and § 202.17 (small business data collection for women-owned and minority-owned businesses, the FRB precursor to CFPB's Section 1071 implementation in §§ 1002.101–1002.114). In practice, most creditors use CFPB Part 1002 as their compliance reference; the Federal Reserve applies Part 202 in examinations of state member banks it directly supervises and uses it as the standard when referring fair lending violations to DOJ.

Pending Legislation

SJRES 154 — Block CFPB's withdrawal of Regulation B protections against credit revocations. Status: Introduced.
HR 166 (Rep. Green, D-TX) — Add sexual orientation, gender identity, ZIP to ECOA protections. Status: Introduced.

Recent Developments

CFPB has increased focus on algorithmic discrimination, issuing guidance that creditors using AI/ML models must comply with adverse action notice requirements
DOJ fair lending enforcement has resulted in major settlements with auto lenders, mortgage companies, and banks for disparate impact discrimination
The inclusion of sexual orientation and gender identity within ECOA's sex discrimination prohibition has been affirmed by CFPB
Alternative data in credit decisions (rent payments, utility payments, bank account data) raises both fair lending opportunity (expanding credit access) and risk (potential new sources of disparate impact)
Small business lending data collection under Section 1071 of Dodd-Frank is being implemented, requiring lenders to collect and report demographic data on small business credit applications