Independent. No paid placements.Reviewed as findings changeEditorial policyNewsletter
The Mortgage RecordAn independent record of mortgage loan originators — NMLS licensing, RESPA/TRID compliance, and conduct, checked against real regulation

Last reviewed: 16 September 2026

Home › The Library › ECOA's adverse action notice requirement

ECOA's adverse action notice requirement, explained

Our TRID explainer covers when cost disclosures have to arrive while an application is moving forward. This page covers a separate federal question: when, and how specifically, an applicant has to be told the actual outcome — including a denial — of that same application.

The 30-day clock, and what starts it

The Equal Credit Opportunity Act (15 U.S.C. § 1691 et seq.), implemented as Regulation B at 12 CFR Part 1002, requires a creditor to notify an applicant of the action taken — approval, a counteroffer, or adverse action — within 30 days after receiving a completed application. The same 30-day clock applies to adverse action taken on an existing account, and to adverse action taken on an application the creditor decides not to pursue further even though it never became complete.

An incomplete application gets its own 30-day notice

Section 1002.9(c) covers the in-between case: when an application is missing information the applicant, not the creditor, has to supply. Rather than treating that as a denial, a creditor has the option of sending a written notice of incompleteness within 30 days of receiving the incomplete application — one that specifies exactly what's still needed, sets a reasonable deadline to provide it, and states plainly that the application gets no further consideration if the applicant doesn't respond in time. If the applicant doesn't respond by that deadline, the creditor can close the file for incompleteness with no further ECOA notice obligation on it.

What the notice actually has to say

An adverse action notice has to identify the creditor, and either include a statement of the specific reasons for the decision or tell the applicant how to request one (which then has to be provided within 30 days of that request). It also has to include the ECOA-required notice of the applicant's own rights under the law. The reasons given have to be specific and individualized to that applicant — the CFPB's own 2023 guidance (Circular 2023-03) states plainly that boilerplate language like "didn't meet our internal underwriting standards" or "failed to score high enough on our model" doesn't satisfy the requirement on its own; the actual factors behind the decision have to be named.

Who this applies to: the notification duty runs to the creditor — the entity that actually makes the credit decision, which can be the funding lender rather than the originating broker on a given file. Whoever legally holds that role, an applicant is still entitled to the same 30-day, specific-reasons notice regardless of which party in the transaction sends it.

Why specificity is the actual point, not just courtesy

A vague "internal standards" notice doesn't just frustrate one denied applicant — it also erases the one thing that makes a discriminatory pattern checkable at all. Our HMDA data explainer covers how fair-lending patterns get analyzed across many applications; a specific, individualized reason on each denial is what makes that kind of comparison possible in the first place. That's also why this sits alongside the CFPB's UDAAP authority as a real, checkable compliance point about an originator's or lender's actual practices, not just a customer-service nicety.

Related