TILA and Regulation Z Explained for Mortgage Lenders

Understanding TILA and Regulation Z

The Truth in Lending Act (TILA), enacted in 1968, is a federal law designed to promote the informed use of consumer credit by requiring disclosures about its terms and cost. Regulation Z (Reg Z) is the set of rules issued by the Consumer Financial Protection Bureau (CFPB) to implement TILA. Together, they standardize how lenders communicate interest rates, fees, and other loan details, enabling borrowers to comparison shop. While TILA applies broadly to consumer credit, mortgage lending carries some of the most detailed and demanding compliance obligations.

For mortgage lenders, Regulation Z governs everything from the initial loan estimate to the final closing disclosure, the right to rescind certain refinances, advertising, and the bedrock underwriting standards known as the Ability‑to‑Repay (ATR) and Qualified Mortgage (QM) rules. Because TILA liability can extend to assignees and securitizers, a single violation can unravel a loan sale years later. Staying current with Regulation Z amendments is a constant challenge; tools like Reglith automate regulatory tracking, helping you monitor changes without manual effort.

Key Definitions Every Mortgage Lender Must Know

Annual Percentage Rate (APR)

The APR is not just the interest rate—it is a broader measure of the cost of credit, expressed as a yearly rate. It must include the interest rate plus certain other charges and fees. The purpose is to give borrowers a single number that reflects the total cost of borrowing, allowing them to compare offers even if lenders structure fees differently. For closed‑end mortgage loans, the APR is disclosed on the Loan Estimate and the Closing Disclosure.

Finance Charge

The finance charge is the dollar amount the loan will cost the borrower over its life. It includes interest, points, loan origination fees, mortgage insurance premiums, and many other charges that are considered a cost of credit. Notably, certain fees—like real estate‑related charges (appraisal, title fees) that are bona fide and reasonable—may be excluded if disclosed properly, but the line between includable and excludable is often gray. Misclassifying fees is a leading source of TILA violations. When in doubt, err on the side of inclusion; tolerance thresholds for APR accuracy are tight.

Total of Payments

This is the sum of all payments the borrower will make, including principal, interest, and mortgage insurance, over the loan term. It helps borrowers grasp the full repayment amount, but the APR remains the primary cost comparison tool.

Right of Rescission

For most refinances, home equity loans, and lines of credit (not purchase mortgages), TILA gives borrowers a three‑business‑day right to rescind. During this window, the borrower may cancel the transaction without penalty. Lenders must provide a clear notice of this right and refrain from disbursing funds until the rescission period has ended. Failure to deliver the required forms or missteps in the process can extend the rescission period to three years.

Who Must Comply? Scope and Exemptions

TILA and Regulation Z apply to creditors who regularly extend consumer credit that is subject to a finance charge or payable in more than four installments. For mortgage lending, this captures virtually all institutions that originate, refinance, or service consumer‑purpose dwelling loans. The rule extends to mortgage brokers who arrange credit, and in many cases, to assignees and purchasers of loans.

Certain transactions are exempt, including loans for business, commercial, or agricultural purposes, and loans above a threshold amount (currently $66,400, adjusted annually) that are not secured by real property. However, for dwelling‑secured loans, the exemption is narrower. TILA is just one pillar of the broader regulatory framework; our Complete Guide to Federal Mortgage Compliance Regulations walks through all key rules.

The TILA‑RESPA Integrated Disclosure (TRID) Rule

For most closed‑end consumer mortgage loans, TILA disclosures are now combined with RESPA disclosures under the TRID rule. This created the Loan Estimate and Closing Disclosure forms. The TRID rule is itself a complex overlay; for a deep dive, see our TRID Compliance: The Complete Guide to TILA‑RESPA Integrated Disclosures.

The Cornerstone Requirements for Mortgage Lenders

Accurate Disclosure of APR and Finance Charge

Disclosure accuracy is paramount. Lenders must calculate the APR to within prescribed tolerances: for a regular closed‑end transaction, the disclosed APR may not be understated by more than 0.125 percentage points (1/8 of 1 percent) or overstated. For irregular loans (with multiple advances or irregular payment periods), the tolerance is 0.25 percentage points. Finance charge discrepancies are governed by tolerance rules as well: the disclosed finance charge may not be understated by more than $100 or overstated by more than $100, with variations if the loan involves multiple advances.

To meet these tolerances, lenders must:

• Classify fees correctly as finance charges or not, using the CFPB’s Official Interpretations.
• Use the correct APR calculation method (actuarial method or U.S. Rule, depending on the loan type).
• Account for all permissible tolerances and cure provisions when an error is discovered before consummation.

Providing Timely Disclosures

Lenders must deliver the Loan Estimate within three business days of application and the Closing Disclosure at least three business days before consummation. Missing these deadlines can trigger tolerance cures, redisclosure, and reputational harm.

Honoring the Right of Rescission

For applicable loans, lenders must provide two copies of the notice of right to rescind to each borrower entitled to rescind. After cancellation, the lender must refund all money or property given and void the security interest within 20 days. Common pitfalls include counting the rescission period incorrectly or mailing the notice without sufficient proof of delivery.

Advertising Compliance

TILA regulates how mortgages can be advertised. Trigger terms—like the amount of a payment, number of payments, or period of repayment—require additional disclosures in the advertisement. For example, stating “$1,000/month payment” triggers the need to disclose the APR, terms of repayment, and downpayment requirements. Digital and social media ads must follow the same rules, and the CFPB has increasingly scrutinized online lead generation.

Ability‑to‑Repay (ATR) Rule: The Mandatory Underwriting Standard

Since 2014, Regulation Z has required creditors to make a reasonable, good‑faith determination that the borrower can repay a residential mortgage loan before funding it. This ATR rule applies to virtually all closed‑end consumer dwelling loans, effectively ending “no‑doc” and “stated‑income” lending.

What Constitutes a Reasonable Ability‑to‑Repay Determination

The rule mandates that lenders consider eight specific underwriting factors:

1. Current or reasonably expected income or assets.
2. Current employment status.
3. Monthly mortgage payment (including taxes, insurance, and HOA fees).
4. Monthly payments on simultaneous loans secured by the same property.
5. Monthly payments for mortgage‑related obligations (e.g., ground rent).
6. Current debt obligations, alimony, and child support.
7. Monthly debt‑to‑income ratio (DTI) or residual income.
8. Credit history.

Lenders must verify the information they rely on using reasonably reliable third‑party records. The assessment must be documented and retained for at least three years after consummation. While no particular DTI threshold is mandated, a DTI above 43% often draws scrutiny unless the loan qualifies as a Qualified Mortgage.

Consequences of Non‑Compliance with ATR

If a lender fails to meet the ATR requirement, the borrower can raise it as a defense to foreclosure at any time. Additionally, the borrower may be able to recoup damages, including statutory damages, attorney fees, and, in some cases, rescission. The likelihood of enforcement actions increases when patterns of ATR‑deficient loans emerge.

Qualified Mortgage (QM) Standards: Safe Harbor and Rebuttable Presumption

A Qualified Mortgage (QM) is a category of loans that are presumed to comply with the ATR rule. Lenders originating QMs gain substantial legal protections. There are two main QM types under the general QM rule:

• Safe Harbor QM: Loans with an APR that is no more than 1.5 percentage points above the Average Prime Offer Rate (APOR) for a comparable first‑lien loan (3.5 percentage points for subordinate‑lien loans). These enjoy a conclusive presumption of ATR compliance, meaning a borrower cannot successfully challenge the lender’s ATR determination.
• Rebuttable Presumption QM: Loans that exceed the APR threshold but still meet QM criteria. Here, the borrower can still contest ATR compliance, but the lender has a rebuttable presumption of compliance—a high bar for the borrower to overcome.

General QM Requirements

To qualify as a QM, a loan must:

• Not have a negative amortization feature or interest‑only payments.
• Not have a balloon payment, except in certain rural or underserved areas for small creditors.
• Have a loan term of 30 years or less.
• Have points and fees that do not exceed 3% of the total loan amount (with higher thresholds for loans below $100,000).
• Be underwritten based on the fully indexed rate or introductory rate, whichever is higher, to ensure the borrower can afford payments after any teaser rate expires.

The Seasoned QM and Other Alternatives

In addition to the general QM, the CFPB also created the Seasoned QM option. Loans that meet portfolio performance standards after a holding period of at least 36 months can achieve QM status, providing an alternative path for lenders willing to retain loans on their books. Additionally, small creditors have special QM provisions that allow balloon payments and more flexible underwriting.

Step‑by‑Step Compliance: Integrating TILA into Your Lending Process

Embedding TILA compliance requires systematic checks from application through post‑closing. Below is a practical roadmap tailored to mortgage lenders.

1. Application Intake and Initial Disclosures

• Gather the six key pieces of a TRID application (name, income, social security number, property address, estimated property value, and loan amount) before issuing a Loan Estimate.
• Issue the Loan Estimate within three business days of application. Ensure the APR and finance charge are calculated using validated software that automates fee classification.
• Implement second‑review protocols for adjustable‑rate mortgages and loans with complex fee structures.

2. Underwriting and ATR Verification

• Create a standardized ATR checklist mirroring the eight factors. For each factor, require specific documentation (W‑2s, tax returns, pay stubs, bank statements, credit reports).
• Use an automated underwriting system (AUS) that flags potential ATR issues, but do not rely on it blindly—manual review is still essential, especially for income calculations.
• If the loan is to be held as a portfolio QM, ensure you meet the seasoning requirements and document the intent.

3. Closing Disclosure and Final Accuracy Checks

• Deliver the Closing Disclosure at least three business days before consummation. If certain changes occur (e.g., APR becomes inaccurate beyond tolerance), a new three‑day waiting period is triggered.
• Perform a fee‑by‑fee comparison between the Loan Estimate and final fees to confirm no prohibited tolerance violations. Automated tools such as Reglith can track these tolerances in real time, reducing last‑minute scrambles.
• If charging points or origination fees, ensure they are properly classified and included in the finance charge.

4. Closing and Rescission Period

• Provide the right of rescission notice when applicable, using the model forms. Have each borrower sign an acknowledgment of receipt.
• Count the three business days correctly (including Saturdays but not Sundays or federal holidays). Do not disburse funds or record the security instrument until the period lapses.
• Retain all records—including the ATR documentation—for at least three years.

5. Post‑Closing and Secondary Market Considerations

• Review loans being sold on the secondary market for QM compliance and assignee liability. Even if the originating lender made errors, the loan purchaser can be liable under TILA.
• Monitor for triggers that might require redisclosure or correction, especially if servicing errors affect the finance charge or APR.

Common Pitfalls and How to Avoid Them

Even experienced lenders stumble on TILA compliance. Below are the most frequent missteps and practical safeguards.

• Misclassifying fees. Fees like underwriting, processing, and document preparation are generally finance charges unless they fall into narrow exclusion categories. Train processors to use a fee‑classification matrix; when a fee seems ambiguous, consult the Official Staff Commentary.
• Tolerance cures performed incorrectly. If the APR is out of tolerance, a corrected Closing Disclosure must be issued and a new three‑day waiting period must begin. Simply mailing a revised document without waiting violates the rule.
• Failing to treat changed circumstances properly. A changed circumstance can permit revised disclosures, but lenders often fail to document the triggering event adequately, leading to tolerance violations that cannot be cured.
• Ignoring the right of rescission on multi‑property collateral. When a refinance involves multiple properties, the rule applies if any property is the borrower’s principal dwelling.
• Advertising without clear, conspicuous disclosures. The CFPB has fined lenders for burying APR or repayment terms in fine print or using over‑prominent trigger terms without proper disclosures.
• ATR shortcuts. Stated‑income or no‑verification underwriting is not permissible. Verifying only a fraction of the borrower’s income or relying solely on asset depletion without a reasonable analysis invites liability.

Regular internal audits and third‑party compliance reviews are the best defense. Also, staying abreast of CFPB rulemaking is non‑negotiable—services like Reglith provide automated alerts when relevant regulations update, freeing your team to focus on lending.

Enforcement and Penalties: What’s at Stake

TILA violations carry significant consequences, and the CFPB has broad enforcement authority.

• Civil liability: Individual borrowers may sue for actual damages, statutory damages up to $4,000 (or higher for certain violations), plus attorney’s fees. In class actions, statutory damages can be capped but still substantial.
• Rescission: For loans where the rescission period was violated, the right can extend up to three years. Borrowers can rescind without court action, forcing the lender to un‑do the loan.
• Administrative enforcement: The CFPB can bring enforcement actions seeking monetary relief, civil money penalties, and injunctive relief. Penalties are tier‑based: for knowing violations, the CFPB may seek up to $1 million per day.
• Loan buybacks and assignee liability: A loan sold to the GSEs or on the secondary market may be subject to repurchase if it is not a QM or if TILA violations exist. This creates financial and reputational risk.
• Defense to foreclosure: A material TILA violation can be raised as a defense in foreclosure proceedings, delaying or preventing recovery of the property.

The cost of non‑compliance often dwarfs the investment in proactive compliance systems. For many, leveraging external monitoring like Reglith reduces the burden and ensures nothing slips through the cracks.

Key Takeaways

• ARP and finance charges are the linchpins: Accurate calculation and disclosure within tight tolerances are non‑negotiable. Misclassifying a single fee can cascade into a costly violation.
• ATR is mandatory for almost all mortgages: No more no‑doc loans. Verify eight underwriting factors using reliable third‑party records, and document the analysis thoroughly.
• QM offers crucial legal safeguards: Loans meeting QM criteria enjoy a safe harbor or rebuttable presumption of ATR compliance, reducing litigation risk and easing saleability.
• Timing matters: From the initial Loan Estimate to the rescission period, missed deadlines trigger redisclosure, cure obligations, and potential penalties.
• Common pitfalls are preventable: Fee misclassification, tolerance cures, and underwriting shortcuts can be avoided with checklists, training, and automated compliance checks.
• Enforcement is real and severe: TILA violations can lead to rescission, large damages, and loan buybacks. A proactive compliance posture is far less costly than remediation.