BrokerLumen logo, AI governance for mortgage brokersBrokerLumen logo, AI governance for mortgage brokers

Home / Rules Library / ECOA and Regulation B

Mortgage AI Rules Library

ECOA and Regulation B: adverse action and fair lending when you use AI

Last reviewed: October 28, 2026. General information, not legal advice. Regulation B has no AI-specific section. These rules apply no matter what tool helped make the decision. Quotes come from the eCFR; each is followed by a plain-English line.

Specific reasons for adverse action

"The statement of reasons for adverse action required by paragraph (a)(2)(i) of this section must be specific and indicate the principal reason(s) for the adverse action."12 CFR 1002.9(b)(2)

In plain English: If an AI model or scoring tool contributed to a denial, you still need to give the real principal reasons. “The system said no” is not a reason.

Notice timing

"30 days after receiving a completed application concerning the creditor's approval of, counteroffer to, or adverse action on the application;"12 CFR 1002.9(a)(1)(i)

In plain English: The creditor has 30 days from a completed application to tell the applicant what it decided.

Notices sent through a broker

"A notice given by a third party shall disclose the identity of each creditor on whose behalf the notice is given."12 CFR 1002.9(g)

In plain English: When a broker sends adverse action notices for lenders, each notice must name the lenders it covers.

Fair lending

"A creditor shall not discriminate against an applicant on a prohibited basis regarding any aspect of a credit transaction."12 CFR 1002.4(a)

In plain English: Using AI does not change the core rule: no discrimination on a prohibited basis, anywhere in the loan process.

"The Act does not provide that the “effects test” applies for determining whether there is discrimination in violation of the Act."12 CFR 1002.6(a), as amended April 22, 2026

In plain English: The current Regulation B text says the effects test does not apply under ECOA. Other laws, such as the Fair Housing Act and state laws, may still apply, so ask counsel before relying on this.

The withdrawn CFPB AI circulars

The CFPB's Consumer Financial Protection Circular 2022-03 (adverse action and complex algorithms) and Circular 2023-03 (adverse action and the sample forms) are listed on the CFPB's withdrawn guidance page as withdrawn on May 12, 2025, by a Federal Register notice published that day (90 FR 20084). We do not summarize them as current guidance. The specific reasons rule in 12 CFR 1002.9(b)(2) still applies.

A Regulation B checklist for AI tools

  1. For every AI or scoring tool in your credit workflow, confirm you can get the principal reasons behind an adverse outcome.
  2. Check that adverse action notices go out within 30 days.
  3. If you send notices for lenders, name each creditor on whose behalf you send them.
  4. Best practice: keep prohibited basis data out of AI prompts and tools used in credit decisions.
  5. Best practice: have a person review AI output before any credit decision.
  6. In Colorado, check that your notice also covers SB 26-189.

Put human review and disclosures in writing

The $99 AI Policy Starter gives you an editable AI acceptable use policy, a readiness checklist and a staff acknowledgment form. Every BrokerLumen kit is priced under $1,000. The AI Policy Starter includes a staff acknowledgment form; the AI Policy Kit (3 months) and AI Team Kit (a full year) include Small Shop portal access with staff sign-off tracking built in.

Get the AI Policy Starter, $99AI Policy Kit, $349Compare kits

Frequently asked questions

Does Regulation B allow an AI model to be the reason for a denial?

The statement of reasons for adverse action must be specific and indicate the principal reasons. Saying the applicant failed to reach a qualifying score on the creditor’s scoring system is insufficient, so the actual reasons have to be given.

Are CFPB Circulars 2022-03 and 2023-03 still in effect?

No. The CFPB lists both as withdrawn on May 12, 2025, under a Federal Register notice published that day (90 FR 20084).

How long does a creditor have to send an adverse action notice?

Generally 30 days after receiving a completed application, under 12 CFR 1002.9(a)(1)(i).

Can a broker send adverse action notices for lenders?

Yes. Under 12 CFR 1002.9(g), a notice given by a third party must disclose the identity of each creditor on whose behalf it is given.