Private lender compliance covers licensing, required disclosures, servicing conduct rules, recordkeeping obligations, and regulatory examination readiness. Each obligation carries legal exposure when ignored. A professional servicer manages the day-to-day compliance burden so lenders keep their capital productive without becoming accidental violators of federal or state law. Consult qualified legal counsel before taking any compliance action on your portfolio.

Key Takeaways

• Most states require a license to originate or service private mortgage loans — and the exemptions are narrower than lenders assume.
• Federal disclosure law under 12 CFR Part 1026 (TILA/Reg Z) applies to many private loans secured by 1-to-4 family residences regardless of whether a licensed institution originates them.
• Servicing a loan in default triggers additional compliance obligations under 12 CFR §1024.41 that do not apply to current loans — and the documentation must exist in the file before the default action proceeds.
• Recordkeeping failures are the most common examination finding — not because lenders lack records, but because the records are not in the format regulators expect.
• Outsourcing servicing to a qualified servicer shifts the compliance execution burden off the lender and creates the auditable paper trail that protects the portfolio.

Private lending operates at the intersection of federal regulation and state-by-state licensing law — a combination that creates compliance traps for lenders who entered the space through real estate investing rather than banking. The questions below cover the compliance obligations that arise most frequently across licensing, disclosures, servicing conduct, recordkeeping, and regulatory examinations. For the strategic overview of how compliance failures damage private lending operations, see the parent pillar: 5 Private Mortgage Servicing Traps New Lenders Must Avoid.

Licensing

Do private lenders need a state license to make mortgage loans?

In most states, yes — and the threshold for triggering the licensing requirement is lower than many private lenders expect. State mortgage lending laws were written broadly, and the exemptions require specific criteria: a minimum loan size threshold, a maximum number of loans per year, or lender-to-borrower relationship requirements that most portfolio lenders do not satisfy. The National Conference of State Legislatures mortgage lending summary documents how each state structures its licensing requirement — but that summary is a starting point, not a compliance determination. The specific exemption language in each state’s statute controls. Consult qualified legal counsel licensed in the states where your loans are originated and secured before concluding that an exemption applies.

Does the license requirement apply to the servicer as well as the originator?

Yes — in most states, loan servicing is a separately licensed activity from origination. A lender who holds a mortgage origination license and then services their own loans without a servicing license is operating without authorization in states that require both. The requirement applies to whoever collects payments, manages escrow, communicates with borrowers about their loan, and processes payoff requests — regardless of whether the servicer is the original lender or a third party. Private lenders who self-service frequently discover the servicer license requirement only when a state regulator opens an examination. A professional servicer holds active licenses in the states where they operate — which is one of the primary compliance benefits of outsourcing servicing rather than managing the portfolio in-house. See What Is the Licensee Exemption in Private Lending? for how exemptions are structured.

What is the licensee exemption, and does it apply to individual private lenders?

The licensee exemption is a carve-out in many state mortgage laws that allows licensed depository institutions — banks, credit unions, and similar chartered entities — to originate and service mortgage loans without obtaining a separate state mortgage license. Individual private lenders are not depository institutions and do not qualify for the licensee exemption. The exemption exists because chartered depositories are already subject to federal and state banking supervision. A private lender operates outside that supervisory framework and therefore requires independent state licensing in jurisdictions where their activity triggers the requirement. See What Is the Licensee Exemption in Private Lending? for the full statutory analysis.

Disclosure and Advertising

What federal disclosure requirements apply to private mortgage loans?

The Truth in Lending Act, implemented by 12 CFR Part 1026 (Regulation Z), requires creditors to disclose specific loan cost information before consummation on covered transactions. For loans secured by a 1-to-4 family dwelling, required disclosures include the annual percentage rate, the finance charge, the amount financed, the total of payments, and the payment schedule. The coverage threshold is transactional — not institutional. A private lender who makes consumer-purpose loans secured by residential real property qualifies as a creditor under Reg Z if they satisfy the frequency-of-extending-credit threshold in the regulation. The CFPB’s 12 CFR §1026.2 definitions establish who qualifies. Consult qualified legal counsel to evaluate whether your lending activity falls within Reg Z coverage.

What advertising restrictions apply to private lenders?

Regulation Z imposes advertising rules on any entity whose advertising triggers a finance charge or credit term under 12 CFR Part 1026. If a private lender advertises a specific interest rate or payment amount, the ad must include all required triggering terms — the annual percentage rate, the down payment or equity requirement, the repayment terms, and the total amount of payments over the loan term. Advertising a rate without the accompanying required terms is a Reg Z violation regardless of whether the advertiser is a bank or a private individual lender. State consumer protection laws add a second layer: deceptive advertising of credit terms triggers state unfair and deceptive acts and practices statutes independently of any federal violation. See How to Build a Private Lender Compliance Checklist for a structured approach to documenting your advertising review process.

Servicing Rules

What federal servicing rules apply when a private loan goes into default?

When a private mortgage loan secured by the borrower’s principal residence goes into default, the servicer’s obligations under 12 CFR §1024.41 (Regulation X) activate. The servicer must acknowledge receipt of a loss mitigation application within a specified period, evaluate a complete application for all available loss mitigation options, and provide the borrower with a written notice of the evaluation outcome. The servicer is restricted from taking certain default enforcement actions while a complete loss mitigation application is pending.

These obligations exist independent of whether the lender wants to pursue a workout or proceed directly to enforcement — the regulation requires the evaluation process to occur and be documented before enforcement proceeds on covered loans. A servicer who skips the loss mitigation evaluation on a covered loan in default creates exposure that follows the loan through every subsequent proceeding. Consult qualified legal counsel before initiating any default enforcement on a loan secured by a borrower’s principal residence.

Do state servicing rules differ from the federal requirements?

Yes — significantly, and state rules apply regardless of whether the loan is also covered by federal regulation. States impose their own notice requirements, default cure period rules, and borrower communication mandates that operate in parallel with the federal framework. A private lender with loans in multiple states must apply each state’s specific requirements to each loan in that state — there is no uniform standard that satisfies all state requirements simultaneously. A servicer who applies a single-state procedure to a multi-state portfolio creates compliance exposure in every state where their procedure diverges from local law. The in-house versus outsourced servicer comparison covers how a qualified servicer maintains state-specific compliance workflows across an entire portfolio. Consult qualified legal counsel before initiating any default enforcement on a multi-state portfolio.

What is required before accepting a partial payment on a non-performing note?

Before accepting a partial payment on a non-performing note, the servicer must have a documented policy for how partial payments are handled and must implement that policy consistently. Accepting a partial payment without a written reservation of rights — a document that explicitly states the lender is not waiving any default rights by accepting less than the full contractual amount — creates a risk that the acceptance is treated as a modification of the original loan terms under applicable state law.

The reservation of rights must accompany every partial payment acceptance, not just the first one. A servicer who accepts three partial payments with reservations and then accepts a fourth without one creates a course-of-dealing argument in favor of the borrower. The payment must also be posted to the ledger correctly — applied against arrearage, not as a current payment against the next installment due. Consistent, documented partial payment handling is a core servicing compliance discipline. See the parent pillar 5 Private Mortgage Servicing Traps New Lenders Must Avoid for how partial payment mismanagement creates downstream enforcement problems.

Recordkeeping

What records must a private lender maintain for each loan?

A private lender must maintain a complete, auditable file for each loan that includes the original executed loan documents, all closing disclosures and required notices, the payment ledger from origination to current date, all borrower correspondence and communication logs, any escrow account records including annual escrow analysis, and documentation of every servicing action taken — modification agreements, reinstatement letters, workout evaluation records, and notices sent under state or federal law. The CFPB’s Regulation X at 12 CFR Part 1024 specifies minimum retention periods for servicer records on covered loans. A private lender who self-services frequently maintains records in whatever format is convenient — email chains, spreadsheets, paper files — rather than the structured, searchable format regulators expect in examination. See How to Build a Private Lender Compliance Checklist for the recordkeeping elements a structured compliance program requires.

How long must loan records be retained?

Federal regulation under Regulation X requires servicers to retain records related to a serviced account for a minimum period after the account is paid off, transferred, or otherwise closed. State law sets independent retention requirements that vary by jurisdiction — some states require retention for the full statute of limitations period applicable to contract claims on a mortgage, which extends beyond the federal minimum. A lender with loans in multiple states must apply the longest applicable retention period across their portfolio. Record destruction before the applicable period has passed creates exposure if a borrower later disputes the loan balance, the payment history, or the servicer’s conduct during a workout. Consult qualified legal counsel to establish the retention schedule appropriate for your portfolio and the states where your collateral is located.

Examinations and Audits

Who can examine a private lender’s compliance with mortgage servicing laws?

State mortgage regulators have examination authority over any entity required to hold a state mortgage license. If a private lender holds a state mortgage lender or servicer license, the state regulator can conduct a compliance examination covering licensing, disclosure, advertising, servicing conduct, and recordkeeping — without advance notice in some jurisdictions. The CFPB has examination authority over larger participants in the mortgage servicing market, as documented in the CFPB’s mortgage examination procedures. State attorneys general also have enforcement authority under state consumer protection statutes regardless of whether the lender is licensed. Operating without a required license is itself the violation subject to enforcement action. Consult qualified legal counsel if your private lending activity has not been reviewed for licensing compliance in each state where you originate or service loans.

What do examiners look for in a private lender’s servicing files?

Examiners evaluate three core areas: whether required disclosures were provided at origination and at the correct time; whether the payment ledger is accurate, complete, and reconcilable from origination to examination date; and whether loss mitigation procedures on non-performing loans followed the applicable regulatory sequence with documentation at each step. The most common finding is not deliberate noncompliance — it is that records exist but are not organized in the format the examiner expects. An email chain documenting borrower contact is not the same as a structured loss mitigation log with dated entries, contact method notation, borrower response records, and evaluation outcome documentation. A professional servicer maintains examination-ready files as a standard operating procedure. See 7 Compliance Mistakes Private Lenders Make for the specific file deficiencies examiners identify most frequently.

Expert Take: What Examination Readiness Actually Requires

What happens if a private lender fails a regulatory examination?

A failed examination results in a written finding that identifies each area of noncompliance and specifies a remediation deadline. Minor findings produce a corrective action plan. Repeated findings or material violations produce escalated enforcement action — license suspension, license non-renewal, or referral to the state attorney general’s office for consumer protection enforcement. Remediation of examination findings is more operationally disruptive than prevention: correcting a multi-year recordkeeping deficiency while simultaneously operating requires resources and attention that harm the ongoing portfolio. The cost of building compliant servicing infrastructure before an examination is a fraction of the cost of remediating violations after one. See 7 Compliance Mistakes Private Lenders Make for the violation patterns regulators identify most frequently. Consult qualified legal counsel immediately upon receipt of any examination finding.

Sources & Further Reading

• CFPB — 12 CFR Part 1024 (Regulation X) — Full text of RESPA’s implementing regulation covering servicer obligations from loan setup through default and loss mitigation.
• CFPB — 12 CFR Part 1026 (Regulation Z / TILA) — Federal Truth in Lending Act implementing regulation covering disclosure requirements, creditor definitions, and advertising rules for mortgage credit.
• Cornell LII — 12 CFR §1024.41 (Loss Mitigation Procedures) — The specific loss mitigation regulation governing servicer obligations on covered loans in default, including application timelines, evaluation requirements, and notice obligations.
• CFPB — Mortgage Origination Examination Procedures — The CFPB’s published examination manual identifying what examiners review in mortgage origination and servicing compliance examinations.
• NCSL — State Mortgage Lending Laws — National Conference of State Legislatures summary of state-by-state mortgage lending licensing requirements and exemption structures.
• Cornell LII — 12 CFR §1026.2 (TILA Definitions) — Regulatory definitions for “creditor,” “consumer,” and “credit” that determine whether a private lender’s activity triggers federal Truth in Lending coverage.

Next Steps: Work with Note Servicing Center

Private lender compliance is not a one-time checklist — it is an ongoing operational requirement that touches every loan in the portfolio, every borrower interaction, and every default action. A servicer who builds compliance discipline into their daily workflow protects the lender’s portfolio, their license, and their ability to keep deploying capital.

Note Servicing Center services private mortgage portfolios with a compliance framework built for the specific obligations private lenders face — state licensing coverage, federal disclosure tracking, examination-ready recordkeeping, and structured loss mitigation workflows on non-performing loans. Contact NSC’s servicing team to discuss your portfolio’s current compliance posture and what professional servicing looks like for your note count and property states.