Federal TILA (Reg Z) sets the floor for disclosure content on private mortgage loans secured by 1-to-4 family dwellings. State law then adds, modifies, and in some cases contradicts those federal requirements. Private lenders who serve both markets must reconcile the two frameworks before origination — not after the fact.

Key Takeaways

• TILA under 12 CFR Part 1026 (Reg Z) governs the form, timing, and content of disclosures for closed-end consumer credit secured by a dwelling — including most private 1-to-4 family loans.
• State disclosure laws layer on top of Reg Z; where state law grants borrowers more protection, the state rule controls even if it conflicts with federal form requirements.
• Private lenders face a dual compliance obligation: pass the federal checklist, then run the transaction through the applicable state disclosure matrix before closing.
• Failure on either level exposes the lender to loan rescission rights, statutory penalties, and borrower litigation — not just regulatory fines.
• A third-party servicer who tracks jurisdiction-specific disclosure status removes the reconciliation burden from the lender’s desk.

What Federal TILA Requires

The Truth in Lending Act, implemented through Reg Z (12 CFR Part 1026), mandates specific disclosures on consumer-purpose, closed-end mortgage credit. The core required line items are: the finance charge, the amount financed, the total of payments, and the payment schedule. These are not optional enhancements — they are mandatory disclosure fields, and their omission or miscalculation gives the borrower a right to rescission on owner-occupied transactions.

Beyond those four core fields, Reg Z requires the annual percentage rate (APR) be computed and disclosed in a standardized format. The APR calculation is not simply the interest rate — it folds in the finance charge relative to the amount financed across the life of the loan, which means origination fees, points, and certain third-party charges affect the figure. Private lenders who compute APR without a compliant loan origination system regularly produce errors that invite rescission claims.

TILA also mandates a right-of-rescission notice on refinances and home equity transactions secured by the borrower’s primary residence. This right extends to three business days from closing or delivery of the required disclosures — whichever is later. Courts have applied this rule strictly: an improperly delivered notice, a missing signature page, or a mis-dated form restarts the clock and extends the rescission window under 15 U.S.C. §1635.

Learn how disclosure compliance integrates with broader servicer obligations in the Disclosure Best Practices for Private Mortgage Lenders Playbook.

What State Disclosure Rules Add

Every state has its own mortgage lending disclosure regime. Some states adopt Reg Z’s form language verbatim and require nothing additional. Others mandate supplemental disclosure forms covering topics Reg Z does not address: prepayment penalty notices, balloon payment warnings in plain-language format, anti-predatory lending summaries, and in some jurisdictions, a separate disclosure of the lender’s licensing status.

State rules on timing are where friction most appears. Reg Z sets federal timing requirements keyed to consummation. Several states impose their own advance-delivery requirements — measured from application, from the date of the good-faith estimate equivalent, or from a state-mandated document delivery checkpoint. When the state’s timeline is shorter than Reg Z’s, the state timeline controls because it’s more protective of the borrower.

Anti-predatory lending statutes in a growing number of states add a separate disclosure layer for loans that carry higher rates or fees above a defined threshold relative to average market rates. These statutes require the lender to provide an additional written notice — sometimes in a specific font size and boxed format — before closing. Private lenders who price above the qualifying threshold and fail to deliver this notice face state penalties independent of any TILA violation.

The State-Specific Disclosure Compliance Guide maps these requirements by jurisdiction for private mortgage holders.

Federal vs. State: Where the Frameworks Conflict

Consult qualified legal counsel before publishing or modifying lender disclosures.

The Reconciliation Process Private Lenders Must Run

Reconciling TILA and state disclosure rules is a two-pass process. The first pass confirms federal compliance: the four core Reg Z disclosure fields are present, correctly computed, and properly labeled; the APR calculation is accurate; the right-of-rescission notice is delivered on owner-occupied refinances; and the timing requirements are met.

The second pass applies the state matrix for every jurisdiction where the collateral is located. This is not a one-time exercise — state disclosure rules change with each legislative session, and a lender who originates in multiple states must track updates across all of them. A loan closed in one state and later sold to a note investor is still subject to the disclosure requirements that applied at origination. The buyer of that note inherits any disclosure defects.

Private lenders who self-service loans frequently discover disclosure gaps only when a borrower raises a rescission claim or a state regulator conducts an examination. At that point, the cure is expensive: actual damages, attorney fees, and statutory penalties from both federal and state enforcement channels run independently of each other. A lender found to have violated TILA and a state anti-predatory lending statute simultaneously faces two separate penalty tracks.

The Private Lender Disclosures: Compliance, Clarity, and Confidence resource covers how to structure disclosure review as a repeatable workflow rather than a closing-day scramble.

Expert Take: What I See on the Servicing Floor

Frequently Asked Questions

Does TILA apply to all private mortgage loans?

TILA applies to closed-end consumer credit secured by a dwelling when the loan is made to a natural person for personal, family, or household purposes. Business-purpose loans — including loans to LLCs or corporations for investment properties — fall outside TILA’s scope. The key determination is the borrower’s purpose, not the property type. A lender who routinely originates both consumer and business-purpose loans must document the purpose determination for each transaction.

If a state disclosure rule conflicts with Reg Z, which one wins?

Federal preemption under TILA is limited. TILA preempts state rules that are inconsistent with federal requirements only where compliance with both is impossible or where the state rule frustrates the purposes of federal law. Where a state rule grants borrowers more protection — additional disclosures, longer rescission windows, earlier delivery requirements — the state rule survives preemption. In practice, this means most state disclosure additions stack on top of federal requirements rather than replacing them.

What happens if a lender delivers TILA disclosures late or with errors?

A late or defective TILA disclosure on an owner-occupied refinance extends the borrower’s right to rescind the transaction. The rescission window continues until the lender delivers accurate disclosures and the statutory period runs from that corrected delivery date. Beyond rescission, the borrower retains a private right of action for actual damages and statutory damages under 15 U.S.C. §1640, plus attorney fees. Consult qualified legal counsel before publishing or modifying lender disclosures.

Are note investors who buy already-closed loans responsible for prior disclosure defects?

A note buyer who takes assignment of a loan does not inherit liability for the original lender’s TILA violations in most circumstances — the private right of action under TILA runs against the creditor who made the loan. However, state laws vary. Some state consumer protection statutes impose assignee liability for disclosure defects that are apparent on the face of the loan documents. A note buyer conducting due diligence must review the state law governing the collateral’s jurisdiction before closing the purchase.

How does a third-party servicer help manage dual compliance?

A qualified servicer maintains jurisdiction-specific disclosure checklists, tracks legislative changes across states where it services loans, and flags discrepancies at loan boarding before the portfolio is active. This removes the compliance tracking burden from the lender and creates a documented audit trail showing that the disclosure review occurred. For lenders with notes collateralized in multiple states, this per-loan arrangement is substantially more efficient than maintaining an in-house compliance function for each jurisdiction.

Sources & Further Reading

• CFPB: Regulation Z (12 CFR Part 1026) — Official CFPB regulation text and commentary
• Cornell LII: 12 CFR Part 1026 (Reg Z) — Searchable full text of Reg Z by section
• CFPB: TILA-RESPA Integrated Disclosure (TRID) Resources — Implementation guides and model forms
• Disclosure Best Practices for Private Mortgage Lenders Playbook — NSC operational framework
• State-Specific Disclosure Compliance Guide — Jurisdiction-by-jurisdiction reference for note holders

Next Steps: Work with Note Servicing Center

Note Servicing Center tracks disclosure compliance requirements across all jurisdictions where we service loans. When you board a note with NSC, we run the federal and state disclosure checklist at intake — before the loan is active in our system. Contact Note Servicing Center to discuss how we handle disclosure documentation as part of the full servicing relationship.