What it means
The rule bars a lender from treating an applicant worse because of race, colour, religion, national origin, sex, marital status or age, provided the applicant is old enough to contract. It also covers applicants whose income comes from public assistance and those who have exercised their rights under consumer credit law.
A lender can still say no for sound reasons such as weak income or a poor repayment record, but the reason must be a credit reason. Regulation B also governs the mechanics of an application.
A lender generally must tell the applicant what it has decided within 30 days of receiving a completed application. If it declines or offers worse terms than requested, it must give a written notice of adverse action (the formal "no") that includes a statement of the specific reasons or tells the applicant how to ask for them.
The rule shapes everyday questions on forms and in sales conversations. Lenders usually cannot ask about marital status on an individual unsecured loan, and they cannot require a spouse to co-sign when the applicant qualifies on their own.
They also cannot discourage a would-be applicant from applying on a prohibited basis. Many people assume the rule only protects consumers, but it also reaches business credit.
The notice requirements for business borrowers are lighter and vary by the size of the business, though the ban on discrimination still applies. That matters to a founder negotiating a working capital loan or a supplier extending trade credit on terms.
Modern lenders must also think about how their models behave. If a scoring model or an automated underwriting tool produces results that disadvantage a protected group without a sound business reason, that can create legal exposure even when no one intended it.
This is why compliance teams test models for fairness and why the reasons printed on a decline notice must reflect the factors actually used.
In practice
Real-world examples.
Example
A regional bank declines a small business loan for a bakery. The notice states that the reasons were insufficient cash flow and a high existing debt balance, and it arrives within the required time after the application was complete. The bank can show that the decision rested on credit factors only.
Example
A car dealership's finance desk asks a young applicant whose income comes partly from a government benefit to bring a co-signer, while it does not ask other applicants with identical income to do so. A review of the file shows the pattern. The dealership has to change its practice because treating benefit income as weaker income is not allowed.
Example
A fintech lender uses a model that scores applicants automatically. When an applicant is declined, the system prints the actual top factors behind the score on the notice rather than a generic line. The compliance officer checks each quarter that the factors listed match the model's real drivers.
Case study
Seen in the real world.
Harbourlight Credit is an illustrative, fictional lender that makes personal loans through a mobile app. After a year of growth its compliance lead noticed that applicants in one older age band were declined more often than others, despite similar incomes and repayment histories.
An internal review found that a data field called "years at current job" was acting as a stand-in for age and had little link to actual repayment in the lender's own history. Harbourlight removed the field, retrained the model and rewrote its decline letters so that each one listed the real factors. The illustrative lesson is that a neutral-looking input can still produce an unfair result, and that regular testing is cheaper than a regulator finding the problem first.
Watch out
Common mistakes.
- Thinking that the rule only applies to banks, when it applies to any creditor that regularly extends credit, including retailers, auto dealers and online lenders.
- Sending a decline letter that says only "you did not meet our criteria", which does not give the specific reasons or explain how to obtain them.
- Assuming that a model cannot discriminate because it never uses a protected characteristic directly, when other inputs can act as stand-ins for one.
Questions
People also ask.
Can a lender ever ask about a person's age?
Generally it may ask, as long as the age is not used to treat the applicant unfavourably, though it may take age into account where it is a legitimate part of a credit scoring system that is statistically sound.
Does the rule apply to credit for a company rather than a person?
Yes, business credit is covered, although the notice requirements for businesses are lighter and depend on the size of the business.
Who writes and enforces the rule?
The Consumer Financial Protection Bureau writes the main version, and several federal agencies supervise lenders for compliance depending on the type of institution.
From the founder's library

Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related
