Consumer Financial Protection Act / UDAAP

Covered persons and service providers

Primary authority: 12 U.S.C. § 5481

A covered person generally offers or provides a consumer financial product or service. A service provider can be covered when it provides a material service to a covered person in connection with that activity. Private education lending, student loan servicing, debt collection, payment processing, and institutional credit can fall within the framework when the statutory elements are met.

Entity form does not answer every coverage question. The CFPA contains activity- and entity-specific exclusions and limitations, including provisions involving merchants and sellers of nonfinancial goods or services and particular nonprofit activity.

Unfair, deceptive, and abusive practices

Primary authority: 12 U.S.C. § 5531 · 12 U.S.C. § 5536

An unfair act or practice causes or is likely to cause substantial consumer injury that is not reasonably avoidable and is not outweighed by countervailing benefits. A deceptive act or practice involves a material representation, omission, or practice likely to mislead a reasonable consumer in the circumstances.

The abusive standard is defined by statute. It addresses conduct that materially interferes with a consumer’s ability to understand a term or condition, or that takes unreasonable advantage of specified circumstances involving lack of understanding, inability to protect interests, or reasonable reliance. These broad statutory concepts remain fact-dependent.

The CFPB withdrew its 2023 abusiveness policy statement on May 12, 2025. The withdrawal did not remove the statutory abusive standard in 12 U.S.C. §5531.

Student debt applications

Primary authority: 12 U.S.C. § 5531 · 12 U.S.C. § 5536

UDAAP can apply to representations, payment processing, allocation, account administration, servicing transfers, dispute handling, collection, credit reporting, relief claims, and other conduct involving covered student debt products or services. The analysis is separate from whether a more specific federal consumer statute also applies.

Colleges and universities require activity-specific analysis. An institution can be outside the framework for one function and within it for another, particularly when it extends credit or materially services a covered consumer financial product.

Supervision and substantive coverage

Primary authority: 12 U.S.C. § 5514 · 12 U.S.C. § 5531

CFPB supervisory authority and substantive CFPA coverage are separate questions. The CFPB has supervisory authority over defined depository institutions and nonbanks, including private education lenders, larger participants in student loan servicing, and larger participants in consumer debt collection. A person can be subject to a substantive prohibition even when a particular supervisory category does not apply.

The statutory abusive standard

Primary authority: 12 U.S.C. § 5531

Under §5531(d), abusive conduct can materially interfere with a consumer’s ability to understand a term or condition of a consumer financial product or service. It can also take unreasonable advantage of a lack of understanding of material risks, costs, or conditions; inability to protect the consumer’s interests; or reasonable reliance on a covered person to act in the consumer’s interests.

The CFPB withdrew its 2023 abusiveness policy statement on May 12, 2025. That withdrawal did not remove the separate statutory abusive standard. Unfairness and deception retain their own tests rather than becoming shorthand for abusive conduct.

Financial activity, supervision, and institutions

Primary authority: 12 U.S.C. § 5481 · 12 U.S.C. § 5514

Covered-person status follows the offer or provision of a consumer financial product or service. Material service providers can also be covered. Private education lending, servicing, payment processing, and collection may bring the CFPA into view, but educational services themselves are nonfinancial services and statutory seller-financing limitations require transaction-specific analysis.

The CFPB has express nonbank private education lender supervision and a larger-participant rule for student loan servicers handling more than one million borrower accounts. That examination authority differs from the substantive UDAAP prohibitions, which have their own coverage tests. An institution’s nonprofit status alone does not settle CFPA coverage.