Five compliance traps catch new private lenders most frequently: lending without required state licensing, skipping TILA/Reg Z disclosures on consumer-purpose loans, running advertising that violates UDAAP or Reg Z trigger-term rules, handing off servicing without a RESPA transfer notice, and failing to maintain loan files that meet federal and state retention requirements. Each trap carries enforcement exposure that a professional servicer’s documented workflow eliminates before it accumulates.

Key Takeaways

  • State licensing thresholds for private lenders vary by state — some states require a license at the first loan, others exempt lenders who stay below a transaction count or dollar threshold — and operating above the threshold without a license triggers regulatory enforcement regardless of whether borrowers complain.
  • TILA/Reg Z disclosure obligations attach based on the loan’s purpose, not the lender’s size — a single consumer-purpose private mortgage loan carries the full disclosure requirement, and the failure to deliver the required disclosures creates a borrower right of rescission on refinanced transactions.
  • Advertising compliance under UDAAP and Reg Z’s trigger-term rules applies to every channel where a private lender promotes loan terms — social media posts, email campaigns, and word-of-mouth referral materials are all covered when they state a specific rate, payment, or loan amount.
  • RESPA’s servicing-transfer notice requirement at 12 U.S.C. §2605 is mandatory on federally related mortgage loans — the borrower must receive written notice before and after the transfer, and a servicer who begins collecting payments without delivering this notice is in violation from the first payment cycle.
  • Federal record-retention minimums under RESPA and TILA establish floors, not ceilings — state law in many jurisdictions requires longer retention periods, and a private lender who destroys records at the federal minimum before the state minimum has passed faces state-level enforcement exposure.

Table of Contents

Related Topics

This pillar anchors the private lender compliance cluster for NoteServicingCenter.com. Connected coverage:

What Is a State Licensing Threshold and Do You Need a License to Lend Privately?

State licensing requirements for private mortgage lenders are not uniform — they vary by state, by loan purpose (commercial versus consumer), by the lender’s entity type, and by the number of transactions the lender completes in a given period. The result is a compliance geography problem: a private lender operating across multiple states faces a different licensing analysis in each jurisdiction, and operating above the applicable threshold without a license exposes the lender to regulatory enforcement regardless of whether any borrower files a complaint.

Most states regulate private mortgage lending through one of three licensing frameworks: a mortgage lender or broker license administered by the state’s Department of Financial Institutions — a consumer-finance or consumer-lending license for loans made to individuals for personal, family, or household purposes, or a commercial lending exemption that allows unlicensed lending on business-purpose loans above a specified principal amount. The National Conference of State Legislatures maintains a state mortgage lending law database that maps the licensing requirements by jurisdiction — this is the starting point for any multi-state licensing analysis.

The exemption structure matters as much as the licensing requirement itself. Many states exempt lenders who make fewer than a defined number of loans per calendar year, lenders who are natural persons lending their own funds, or lenders making commercial-purpose loans above a specified threshold. These exemptions are transaction-count specific and loan-purpose specific — a lender who qualifies for a consumer lending exemption based on transaction count loses that exemption the moment they exceed the threshold, and the licensing obligation attaches prospectively to the next transaction. The licensee exemption satellite covers the specific exemption structures in detail for the states where private lending is most active.

The practical failure mode: new private lenders assume that because they are lending their own money and the transactions are negotiated privately, no regulatory framework applies. That assumption is wrong. The regulatory obligation attaches based on the loan’s purpose, the borrower’s classification (individual or business entity), the state where the collateral is located, and the lender’s transaction volume — not based on whether the lender is a bank or a private individual. Consult qualified legal counsel before originating loans in any new state to confirm the licensing framework that applies to your specific entity type and loan structure.

NSC’s loan boarding process includes a state-compliance check at intake that flags jurisdiction-specific servicing requirements — including transfer-notice obligations and periodic-statement requirements — that apply to each loan based on the state where the collateral is located.

Expert Take: The Licensing Trap New Lenders Walk Into

When Does TILA/Reg Z Apply to a Private Mortgage Loan?

The Truth in Lending Act — implemented through Regulation Z at 12 CFR Part 1026 — applies to consumer-purpose credit transactions. The key trigger is the loan’s purpose: a private mortgage loan made to an individual for personal, family, or household purposes is a consumer credit transaction subject to Reg Z’s disclosure requirements. A private mortgage loan made to a business entity, or made to an individual for a business purpose, is not subject to Reg Z’s consumer disclosure requirements — it is a commercial transaction, and a different regulatory framework applies.

The purpose determination is made at origination and is based on the borrower’s stated and documented intent for the funds, not on the collateral type. A private lender who takes a first position mortgage on a single-family residence used as the borrower’s primary home as security for a loan the borrower takes to consolidate personal debt is making a consumer-purpose loan — Reg Z applies regardless of the collateral being real property. A private lender who takes a first position mortgage on the same property as security for a loan the borrower takes to fund a business venture is making a business-purpose loan — Reg Z does not apply, but the lender must document the business purpose to support that determination.

The entity-type shortcut that new lenders rely on — “I only lend to LLCs, so Reg Z doesn’t apply” — is incomplete. Lending to an LLC that is the alter ego of a single individual operating a micro-business, where the loan proceeds flow directly to the individual’s personal expenses, raises the question of whether the loan’s actual purpose is consumer or business. Regulators and courts look at economic substance, not just entity form. A documented business-purpose certification signed by the borrower at origination is the minimum protection — and even that certification is tested against the facts if the loan’s actual use of proceeds tells a different story.

The CFPB’s Regulation Z resource page provides the full regulatory text, including the definition of consumer credit at 12 CFR §1026.2(a)(12) and the business-purpose exemption at 12 CFR §1026.3(a). Consult qualified legal counsel before finalizing the purpose classification on any private mortgage loan where the borrower’s use of proceeds is mixed or ambiguous — the classification determines the entire disclosure obligation at origination.

What Disclosures Does Reg Z Require on a Consumer-Purpose Private Mortgage?

Regulation Z requires a covered lender to deliver a Truth in Lending disclosure statement to the borrower before consummation of a consumer credit transaction secured by real property. The disclosure must contain specific items in a specified format — the disclosure format requirements are not optional, and a disclosure that contains the right information in the wrong format does not satisfy the regulatory obligation.

The required disclosure items for a closed-end consumer mortgage under 12 CFR Part 1026 include: the annual percentage rate (the cost of credit expressed as a yearly rate, calculated using the standard APR methodology that includes fees as well as interest), the finance charge (the total dollar amount the credit costs the borrower, expressed as a dollar figure), the amount financed (the net credit amount the borrower receives after prepaid finance charges are deducted), the total of payments (the sum of all scheduled payments the borrower makes over the loan’s full term), and the payment schedule (a complete schedule of each payment amount and due date over the loan’s term).

The annual percentage rate calculation is where new private lenders most frequently make errors. The APR is not the same as the stated interest rate — it is the stated interest rate adjusted for all prepaid finance charges that are included in the finance charge, expressed as an annual rate using the actuarial method. An origination fee, a discount point, and certain closing costs are included in the finance charge calculation and therefore affect the APR. A private lender who discloses the stated rate without calculating and disclosing the correct APR has delivered an inaccurate Reg Z disclosure — and an inaccurate APR disclosure on a refinance transaction secured by the borrower’s principal dwelling triggers the borrower’s extended right of rescission under 12 CFR §1026.23.

For higher-cost mortgage loans defined under the Home Ownership and Equity Protection Act provisions at 12 CFR §1026.32, additional disclosure and substantive requirements apply — restrictions on prepayment penalties, balloon payment limitations, and mandatory pre-loan counseling requirements that exceed the standard Reg Z disclosure obligation. Private lenders whose loans carry rates or fees above the HOEPA thresholds must meet these additional requirements in addition to the standard disclosure obligation. Consult qualified legal counsel before originating any private mortgage loan at a rate or fee level that approaches the HOEPA threshold.

NSC’s compliance overview describes how the servicing workflow integrates with origination-side disclosure requirements — the data captured at loan boarding forms the basis for ongoing periodic statements that must accurately reflect the loan’s terms as disclosed at origination.

What Advertising Rules Govern Private Mortgage Lenders?

Advertising compliance is the trap that new private lenders overlook most thoroughly, because they do not think of themselves as advertisers. A private lender who posts on LinkedIn that they are “offering private mortgage loans at competitive rates” has published an advertisement subject to regulatory scrutiny. A private lender who sends an email to a prospective borrower network describing available loan terms has distributed a regulated advertisement. The channel — social media, email, printed flyer, website, word-of-mouth referral card — does not determine whether the communication is an advertisement. The content does.

Regulation Z at 12 CFR §1026.24 governs advertising for closed-end consumer credit transactions secured by real property. The core rule: if an advertisement states any of the specific terms that Reg Z defines as “trigger terms” — a specific interest rate (other than an APR), a finance charge amount, a down payment amount, the number of payments, a specific payment amount, or a period of repayment — the advertisement must also disclose the annual percentage rate, and must disclose all other required terms if any of the trigger terms appear. A private lender who promotes a specific interest-rate number in an advertisement has triggered the full APR disclosure requirement in that same advertisement.

The Consumer Financial Protection Bureau’s UDAAP authority — Unfair, Deceptive, or Abusive Acts or Practices — provides an independent basis for enforcement against private mortgage advertising that is misleading even when the specific Reg Z trigger terms are not present. A statement that is technically accurate but misleading in context — “no closing costs” on a loan that rolls costs into the rate, “fast approvals” in advertising aimed at distressed borrowers who are being harmed by the urgency — is a potential UDAAP violation regardless of whether specific trigger terms appear. The CFPB’s Reg Z advertising guidance at 12 CFR §1026.24 covers the specific trigger-term requirements and the disclosure obligations they activate.

The practical failure mode for new private lenders: they treat their lending activity as private transactions between known parties, and their marketing as informal networking. Once the activity crosses the threshold of advertising — communicating available credit terms to a class of potential borrowers rather than negotiating with a specific identified party — the advertising rules apply. The compliance checklist satellite includes an advertising review section for private lenders who want to confirm their current marketing materials against the Reg Z and UDAAP standards. Consult qualified legal counsel before publishing any material that states specific loan terms, rates, or conditions.

Expert Take: Advertising Compliance in the Age of Social Media

What Is Reg X and When Does It Apply to a Private Lender?

Regulation X — implemented through 12 CFR Part 1024 — is the CFPB’s implementation of the Real Estate Settlement Procedures Act (RESPA). RESPA applies to “federally related mortgage loans” — a defined category that includes most loans secured by first or subordinate liens on 1-to-4 family residential real property where the loan is made by a lender, creditor, dealer, or other person who makes or invests in residential real estate loans aggregating more than a specified volume per year, or where the loan is made in connection with a real estate transaction in which a federally regulated lender, government agency, or government-sponsored enterprise is involved.

The “federally related” threshold catches more private lenders than they expect. A private lender who uses a federally chartered bank to hold servicing escrow accounts, who sells loans to a Fannie Mae-eligible counterparty, or whose loan is originated in connection with a transaction involving a government-insured title policy qualifies the loan as federally related. The RESPA scope is not limited to bank lenders — it extends to any lender whose transaction meets the federally related definition, regardless of the lender’s entity type or regulatory charter.

When RESPA applies, the obligations are substantial. At origination, the lender is required to provide a Loan Estimate and Closing Disclosure in compliance with the integrated TILA-RESPA disclosure requirements at 12 CFR §§1026.37–1026.38. During servicing, the servicer is required to administer escrow accounts under 12 CFR §1024.17, respond to qualified written requests within the regulatory deadline under 12 CFR §1024.35–1024.36, deliver periodic statements under 12 CFR §1026.41, provide early-intervention contact on delinquent loans under 12 CFR §1024.39, and evaluate loss-mitigation applications under 12 CFR §1024.41.

For private lenders who self-service, the qualified written request obligation alone creates significant exposure: a borrower who submits a written request for information about their loan account triggers a regulatory clock on the servicer’s response. The servicer’s failure to acknowledge and respond within the required periods is an independent RESPA violation regardless of whether the underlying loan information is accurate. NSC’s RESPA compliance operation manages the full set of Reg X obligations for every loan in administration — qualified written requests, escrow analysis, early intervention, and loss-mitigation evaluation — as built-in workflow components, not exceptions. The CFPB’s full Regulation X text is the authoritative source for the complete obligation set.

What Is the RESPA Servicing Transfer Notice Requirement?

Section 6 of RESPA — codified at 12 U.S.C. §2605 — establishes a federal notice requirement that applies whenever the servicing of a covered mortgage loan is transferred from one servicer to another. The obligation applies to the transferor servicer (who must provide notice before the transfer) and to the transferee servicer (who must provide notice after the transfer). The borrower must receive both notices, and both notices must contain specific information about the transfer — the effective date, the name and contact information of both the old and new servicer, and the borrower’s rights under the transfer.

The notice timing requirements under 12 U.S.C. §2605 are specific and non-negotiable on covered loans. The transferor servicer’s notice to the borrower must be sent no later than the statutory period before the effective date of the transfer. The transferee servicer’s notice must be sent no later than the statutory period following the effective date. The specific notice periods are set by statute — consult qualified legal counsel to confirm the current statutory notice periods applicable to your specific loan type and transfer structure, as modifications to the regulatory timeframes are subject to regulatory update.

The failure modes are predictable: a private lender who engages a servicer informally — through a referral or a personal relationship — does not think of the arrangement as a “servicing transfer” that triggers a federal notice obligation. But the regulatory obligation attaches the moment the servicer begins collecting payments on behalf of the lender — and a servicer who begins collecting payments without delivering the required notices is in technical violation of RESPA Section 6 from the first payment cycle. The borrower’s right to complain to the CFPB about a missed transfer notice does not require any actual harm — the failure to deliver the notice is itself the violation.

The in-house versus outsourced servicer satellite addresses the full compliance picture of the transfer decision — not just the transfer notice, but the ongoing Reg X obligations that transfer to the new servicer’s operational responsibility. NSC’s loan boarding workflow includes the generation and delivery of the required transfer notices as a standard boarding step — the lender does not need to manage the notice separately from the boarding process. The full text of 12 U.S.C. §2605 on Cornell LII provides the complete statutory notice requirements and the enforcement framework that applies to violations.

How Does a Servicing Handoff Go Wrong — and What Does It Cost the Lender?

The servicing handoff is where accumulated compliance errors surface. A private lender who has been self-servicing — collecting payments, maintaining a ledger, administering escrow where applicable — and who decides to transfer that portfolio to a professional servicer discovers at boarding that the self-servicing period created compliance gaps that the professional servicer must now document, remediate, or flag to the lender for resolution.

The most common boarding-discovery problems are: payment histories that do not reconcile to a complete and auditable ledger — payments received, payments applied to principal versus interest, escrow deposits and disbursements, and running balance from origination to transfer; escrow accounts that have not been analyzed annually as required under 12 CFR §1024.17 — resulting in escrow balances that are either deficient (creating lien risk from unpaid taxes or lapsed insurance) or over-collected (creating a refund obligation to the borrower); and origination documents that are incomplete — missing disclosures, unsigned documents, or disclosure forms that were delivered but not retained in the loan file.

A professional servicer who discovers at boarding that the prior self-servicing period produced an unauditable payment history faces a choice: either reconstruct the history from the available records, or board the loan with a disclosed gap in the payment record. The reconstruction process — pulling bank statements, matching deposits to scheduled payments, allocating each receipt to principal, interest, escrow, and fees in the order the note requires — is the operational equivalent of rebuilding the loan file from raw inputs. It consumes time the servicer charges for, and it uncovers errors the lender then has to decide whether to remediate with the borrower or carry as a documentation risk.

NSC’s canonical boarding improvement — a 45-minute manual process reduced to one minute — applies precisely to this problem: structured intake that captures the complete loan data at boarding in a format the servicing system ingests without manual reconstruction. For loans transferred from self-servicing, the boarding process still requires the lender to deliver a complete and reconcilable loan file. NSC’s boarding documentation requirements specify what a complete loan file must contain. The compliance mistakes satellite covers the specific self-servicing failures that create boarding complexity in detail. Consult qualified legal counsel before transferring a portfolio that includes loans with known documentation gaps — the decision to disclose versus remediate those gaps is a legal question with enforcement implications.

What Records Must a Private Lender Retain — and for How Long?

Federal record-retention requirements for private mortgage lenders derive from two primary sources: RESPA/Regulation X and TILA/Regulation Z. Both regulations establish minimum retention periods for specific categories of records, and state law adds jurisdiction-specific retention requirements on top of the federal minimums. A private lender who retains records for the federal minimum period and then destroys them without checking the applicable state retention requirement is exposed to state enforcement for the period between the federal minimum and the state minimum.

Under Regulation Z at 12 CFR §1026.25, the lender must retain evidence of compliance with the disclosure requirements — including copies of the disclosure statements provided to the borrower at consummation — for two years from the date of the disclosure. For evidence of compliance with higher-cost mortgage requirements under 12 CFR §1026.32, the retention period extends to three years. These are federal minimums for disclosure-compliance documentation, not for the complete loan file.

Under Regulation X at 12 CFR §1024.38(c), the servicer must maintain policies and procedures that ensure the servicer retains records that document actions taken on each loan for a period that meets or exceeds the regulatory minimum. The servicer’s records must be sufficient to demonstrate compliance with the servicing obligations — qualified written request responses, escrow analysis results, periodic statement delivery, early-intervention contact documentation, and loss-mitigation evaluation records. The CFPB’s examination procedures for mortgage servicers specify the record categories that examiners review — and those categories extend beyond the regulatory minimums in scope.

State retention requirements vary. Many states require real estate transaction records to be retained for the period of the applicable statute of limitations for contract claims — which in some jurisdictions extends to six years or longer from the date of the last transaction on the loan. A servicer who transfers records to a lender at loan payoff, and a lender who then disposes of those records, must confirm that the disposal date meets both federal and applicable state retention requirements. NSC’s servicing operation maintains loan records for the duration of the servicing relationship and provides a complete file to the lender at loan termination. Consult qualified legal counsel to determine the retention period applicable to your specific loan types and states before establishing a records-disposal schedule.

What Is UDAAP and How Does It Reach Private Lenders?

UDAAP — Unfair, Deceptive, or Abusive Acts or Practices — is the CFPB’s broadest enforcement authority. Unlike TILA or RESPA, which apply to specific transaction types and generate specific, enumerated obligations, UDAAP applies to any “covered person” who offers or provides a consumer financial product or service. The CFPB’s enforcement authority extends to nonbank mortgage lenders — including private mortgage lenders who meet the threshold for regulatory coverage — under Section 1031 of the Dodd-Frank Wall Street Reform and Consumer Protection Act.

An act or practice is “unfair” if it causes or is likely to cause substantial injury to consumers, the injury is not reasonably avoidable, and the injury is not outweighed by countervailing benefits. An act or practice is “deceptive” if it involves a material representation, omission, or practice that is likely to mislead a consumer acting reasonably under the circumstances. An act or practice is “abusive” if it materially interferes with the ability of a consumer to understand a term or condition of the transaction, or if it takes unreasonable advantage of the consumer’s lack of understanding or inability to protect their interests.

UDAAP’s reach in private mortgage lending covers three main exposure areas: advertising (representations about loan terms that are accurate but misleading in context), servicing (practices that cause borrowers to pay more than the note requires or that obstruct their ability to understand their loan’s status), and loss mitigation (practices that steer borrowers away from available workout options that would benefit them toward resolution paths that benefit only the lender). The CFPB’s UDAAP enforcement action database documents the specific practices that have drawn enforcement attention — and the enforcement record reflects consistent attention to mortgage servicing practices.

For private lenders, the practical UDAAP exposure is most acute in two situations: when the lender’s self-servicing practices — fee assessment, late-charge application, payment application order — are not consistently applied across all loans and are not documented in written servicing policies; and when the lender’s loss-mitigation approach favors enforcement over rehabilitation in ways that are inconsistent with the borrower’s actual circumstances. The in-house versus outsourced servicer satellite addresses how professional servicing creates documented consistency that reduces UDAAP exposure across these specific risk areas. Consult qualified legal counsel before establishing any fee-assessment or payment-application policy to confirm it does not expose the lender to UDAAP challenge.

Expert Take: Why Consistency Is the UDAAP Defense

How Does a Professional Servicer Close These Compliance Gaps?

A professional servicer who operates under documented policies and procedures closes the five compliance traps described in this pillar through structural workflow — not through reactive remediation after the exposure has accumulated. The difference between the lender who self-services and discovers compliance gaps at enforcement or portfolio sale, and the lender who transfers servicing to a professional servicer at origination, is the difference between building a loan file that supports enforcement and discovering at enforcement that the file does not.

On licensing: a professional servicer does not advise on the lender’s licensing obligations — that is a legal function. But a servicer who is properly licensed in the states where it operates, and who manages the state-specific servicing notice requirements for each loan based on the collateral’s location, ensures that the servicing side of the compliance picture is maintained. The lender’s licensing obligation is the lender’s to address — the servicer’s licensing obligation is the servicer’s, and a lender who transfers servicing to an unlicensed servicer in a state that requires servicer licensing has not solved the compliance problem, it has moved it.

On TILA/Reg Z: the servicer’s periodic statement obligation under 12 CFR §1026.41 requires that monthly or periodic statements accurately reflect the loan’s terms — the interest rate, the payment allocation, the escrow balance — consistently with the disclosures delivered at origination. A servicer who receives a loan file that contains accurate origination disclosures can deliver compliant periodic statements. A servicer who receives a loan file with missing or inaccurate origination disclosures is in a position of delivering periodic statements that are accurate to the actual loan terms but inconsistent with the disclosures the borrower received — a gap that the borrower, or a regulator reviewing the file, will identify.

On servicing transfer: the servicer generates and delivers the required transfer notices as part of the boarding workflow — the lender does not manage the notice separately. NSC’s boarding improvement — from a 45-minute manual process to one minute — reflects the systematization of exactly this type of structured intake step: the transfer notice is not an afterthought, it is generated from the boarding data at the point when the boarding data is captured.

On recordkeeping: the servicer maintains the complete servicing record — payment history, escrow analysis results, contact logs, loss-mitigation documentation, and notice delivery confirmations — throughout the servicing relationship. The lender’s recordkeeping obligation for origination documents remains with the lender; the servicer’s recordkeeping obligation for servicing records sits with the servicer. A lender who transfers servicing at origination has the servicer’s documentation infrastructure supporting the servicing side of the retention requirement from day one. NSC’s full servicing capability covers all five compliance areas as integrated workflow components. The compliance checklist satellite provides the origination-side checklist that complements the servicer’s servicing-side workflow.

Frequently Asked Questions

Do I need a license if I only make one or two private mortgage loans per year?

Transaction volume is one factor in the licensing analysis, but it is not the only factor. Some states require a license at the first consumer-purpose mortgage loan, regardless of volume. Others establish a threshold above which licensing is required. The loan’s purpose — consumer or business — matters as much as the count. Consult qualified legal counsel in each state where you plan to make loans before closing any transaction, and confirm the analysis annually because state legislatures amend licensing thresholds regularly.

What is the right of rescission and when does it apply to a private mortgage?

The right of rescission under 12 CFR §1026.23 gives a borrower in a consumer credit transaction secured by their principal dwelling the right to cancel the transaction within three business days of consummation. For a refinance or home equity transaction — not a purchase money mortgage — the rescission right applies. The lender must provide the borrower with a Notice of Right to Cancel form at consummation. If the required notice or Reg Z disclosures are inaccurate, the rescission period extends beyond the standard three business days. Consult qualified legal counsel before closing any consumer mortgage loan on a borrower’s principal dwelling to confirm the rescission notice requirement and the delivery method that satisfies it.

Does RESPA apply to loans secured by commercial property?

RESPA applies to “federally related mortgage loans,” a defined term that is limited to loans secured by 1-to-4 family residential real property. A loan secured by a commercial property — office building, retail center, industrial facility — is not a 1-to-4 family residential loan and is not subject to RESPA’s servicing requirements. However, a mixed-use property with residential units requires analysis of whether the loan qualifies as federally related based on the residential component. Consult qualified legal counsel to confirm the RESPA applicability analysis for any loan secured by property with both residential and commercial components.

What happens if I failed to deliver the RESPA transfer notice before the transfer was complete?

A failure to deliver the required transfer notice is a RESPA Section 6 violation. RESPA provides borrowers a private right of action for actual damages, plus additional statutory damages for pattern-or-practice violations. The CFPB also enforces RESPA’s servicing obligations through its supervisory and enforcement authority. A missed transfer notice does not void the loan or invalidate the servicing transfer — but it creates a regulatory exposure that the lender should address by delivering the notice as promptly as possible and documenting the remediation. Consult qualified legal counsel immediately if you discover a transfer notice was not timely delivered.

What is a qualified written request and what must a servicer do when it receives one?

A qualified written request (QWR) is a written correspondence from a borrower that includes the borrower’s name and account information and identifies the specific information the borrower is requesting or the specific error the borrower asserts. Under 12 CFR §1024.35 and §1024.36, a servicer who receives a QWR must acknowledge receipt within a regulatory deadline and must either provide the requested information or correct the identified error within the applicable response deadline. Failure to respond within the required period is an independent RESPA violation. Professional servicers maintain a QWR tracking system that logs receipt, acknowledgment, and response for every qualified written request in the portfolio.

Are hard-money loans subject to TILA disclosure requirements?

Hard-money loans are subject to TILA/Reg Z disclosure requirements when the loan is a consumer-purpose transaction — when the borrower is an individual and the loan proceeds are for personal, family, or household purposes. Hard-money loans made for business purposes — fix-and-flip acquisition loans to real estate investors, bridge loans to LLC-owned properties — are not consumer credit transactions and are not subject to Reg Z’s consumer disclosure requirements. The label “hard money” does not determine the regulatory treatment — the borrower’s purpose does. Consult qualified legal counsel before originating any hard-money loan to confirm the purpose classification and the disclosure obligations that apply.

What records do I need to keep from the origination of a private mortgage loan?

At minimum, the loan file must contain: the executed promissory note; the executed deed of trust or mortgage creating the security interest; the title insurance policy or title search confirming the lender’s lien priority; the origination disclosures required under TILA/Reg Z (for consumer-purpose loans), including the Truth in Lending disclosure statement; the appraisal or other collateral valuation; the executed closing disclosure; and the business-purpose certification (for business-purpose loans where TILA is not applicable). The servicer’s payment history and escrow records are maintained by the servicer during the servicing relationship and must be delivered to the lender at loan termination. Retain origination documents for the full federal and applicable state retention period — consult qualified legal counsel to determine the longer of the two in each state where you hold loans.

What is the difference between RESPA and TILA, and which one do I need to comply with?

RESPA governs real estate settlement procedures and mortgage servicing — it controls how loans are originated in real estate transactions (prohibiting kickbacks at settlement) and how they are administered after closing (escrow, periodic statements, loss mitigation, qualified written requests). TILA governs credit disclosures — it requires lenders to disclose the cost of credit to borrowers in a standardized format before consummation. Both apply to consumer-purpose mortgage loans that meet the respective statutory definitions. Most private lenders who make consumer-purpose mortgage loans on 1-to-4 family residential properties are subject to both RESPA and TILA. The two statutes work in parallel — compliance with one does not substitute for compliance with the other.

Can a private lender assess a prepayment penalty on a consumer mortgage?

The enforceability of a prepayment penalty on a consumer mortgage loan depends on the state where the collateral is located, the loan type, and — for higher-cost mortgage loans — the federal restrictions under 12 CFR §1026.32. Several states prohibit prepayment penalties on consumer mortgage loans entirely. For federally covered higher-cost mortgage loans, Reg Z at 12 CFR §1026.32(d)(6) restricts or prohibits prepayment penalties in specific circumstances. A prepayment penalty that is enforceable under state law for a conventional consumer mortgage is prohibited if the loan meets the HOEPA higher-cost threshold. Consult qualified legal counsel before including any prepayment penalty provision in a consumer-purpose private mortgage — the analysis is state-specific and loan-type-specific.

What is the difference between a servicer’s obligation and a lender’s obligation when a loan defaults?

The lender holds the note and the economic interest in the loan. The servicer administers the loan on the lender’s behalf — collecting payments, maintaining the ledger, managing escrow, and, on defaulted loans, executing the compliance workflow the regulations require. On covered loans, the servicer’s obligations under Reg X — early-intervention contact, loss-mitigation evaluation, notice sequences — run to the borrower, not just to the lender. The lender’s obligations under RESPA Section 6 run to the borrower as well — including the obligation to ensure that the servicer is properly licensed and that the transfer notices were delivered. A lender who transfers servicing to a non-compliant servicer retains exposure for the servicer’s compliance failures. Consult qualified legal counsel before selecting a servicer to confirm the due-diligence steps that protect the lender from the servicer’s compliance gaps.

Sources & Further Reading

  • CFPB — Regulation X, 12 CFR Part 1024 (RESPA) — Full regulatory text governing real estate settlement procedures and mortgage servicing obligations, including escrow administration, qualified written requests, early intervention, loss mitigation, and servicing transfer notices.
  • CFPB — Regulation Z, 12 CFR Part 1026 (TILA) — Full regulatory text governing consumer credit disclosures, including APR calculation, required disclosure items, advertising trigger-term rules, and higher-cost mortgage requirements under 12 CFR §1026.32.
  • Cornell LII — 12 U.S.C. §2605 (RESPA Section 6: Servicing of Mortgage Loans) — Full statutory text of RESPA’s servicing transfer notice requirement, qualified written request obligations, and the enforcement framework for violations, including borrower private right of action and regulatory enforcement authority.
  • NCSL — State Mortgage Lending Laws — National Conference of State Legislatures database mapping state-specific mortgage lender licensing requirements, exemption thresholds, and consumer protection statutes applicable to private mortgage lenders operating across multiple jurisdictions.
  • CFPB — UDAAP Enforcement Actions — Published database of CFPB enforcement actions documenting the specific unfair, deceptive, and abusive practices in mortgage origination and servicing that have drawn regulatory enforcement, including the practices applicable to nonbank mortgage lenders.
  • Cornell LII — 12 CFR §1026.24 (Reg Z Advertising Rules) — Full text of Regulation Z’s advertising requirements for closed-end consumer credit secured by real property, including the trigger-term definitions and the disclosure obligations they activate.

Next Steps: Work with Note Servicing Center

The five compliance traps covered in this pillar — licensing exposure, disclosure failures, advertising violations, servicing handoff errors, and recordkeeping gaps — all share one root cause: private lenders who treat their lending activity as a series of individual transactions rather than a regulated financial services operation that requires documented, consistent process at every stage.

A professional servicer does not cure a lender’s licensing obligation or retroactively fix origination disclosures that were never delivered. But a professional servicer builds the servicing-side compliance infrastructure that prevents the second, third, and fourth compliance gaps from compounding the first one. The RESPA transfer notice goes out on schedule. The escrow account is analyzed annually. Qualified written requests are logged and answered within the regulatory window. Loss-mitigation evaluations are documented and completed before enforcement proceeds. The payment history is complete, reconcilable, and audit-ready from the day of boarding.

Note Servicing Center administers private mortgage loans from boarding through payoff — performing loans on the automated payment workflow, delinquent loans through the documented default-management process. The 45-minute manual boarding process NSC reduced to one minute reflects the same systematic discipline that applies to every compliance workflow in the servicing operation: built-in, not bolted on.

Consult qualified legal counsel to confirm the licensing, disclosure, and advertising obligations that apply to your specific loan types and states. Then contact NSC’s servicing team to discuss transferring your portfolio — at origination or at any point in its lifecycle — to professional administration that eliminates the servicing-side compliance gaps before they accumulate.