What Is a CFPB Consent Order? Definition & Impact
Reglith Editorial Team · November 2026
A CFPB consent order is a binding settlement between the Consumer Financial Protection Bureau (CFPB) and a respondent that resolves alleged violations without a trial. The respondent agrees to remedies such as consumer redress, civil money penalties and compliance commitments, and the order becomes a public document. It creates enforceable obligations, but it is not an admission of liability.
Compliance teams at mortgage lenders and servicers encounter these orders as public benchmarks for CFPB expectations and as reminders that supervisory outcomes can hinge on institutional culture, complaint handling and data quality. For state-licensed companies, orders can travel into the Nationwide Multistate Licensing System (NMLS) record and inform state examinations.
Reglith tracks federal, agency and state regulatory changes in one feed, summarized and tagged for mortgage compliance teams. Reglith regulatory updates
What is a CFPB consent order and how does it differ from a judgment?
A consent order is a negotiated, binding agreement between the CFPB and a respondent to resolve allegations without a court or administrative trial. The parties agree to remedies and conduct requirements, and the agency files the order publicly. Signing creates enforceable obligations, though it does not amount to an admission of wrongdoing.
A civil money penalty (CMP) imposed after litigation or a final judgment is different. In a litigated outcome, a court or administrative tribunal resolves liability, and the CMP is imposed by that decision. In a consent order, the respondent agrees to pay a CMP, provide redress and change practices without a liability finding. The order is filed with the CFPB and, in many cases, published in the Federal Register, making it visible to state regulators, the Office of the Comptroller of the Currency (OCC), the Federal Deposit Insurance Corporation (FDIC), the Federal Reserve Board and the National Credit Union Administration (NCUA).
| Option | Best for | Notes |
|---|---|---|
| Consent order | Resolving allegations without trial | Binding; public; may include CMP, redress and injunctive relief |
| Litigated judgment | Contested liability | Court or tribunal finding; CMP imposed by decision |
What specific violations typically trigger a CFPB consent order?
The CFPB's mortgage-related consent orders commonly cite Unfair, Deceptive, or Abusive Acts or Practices (UDAAP) violations under the Consumer Financial Protection Act, alongside specific regulatory breaches. Common patterns include:
- Regulation Z (12 CFR 1026) violations related to disclosure timing, content, loan originator compensation or ability-to-repay.
- Real Estate Settlement Procedures Act (RESPA) and Regulation X (12 CFR 1024) violations involving escrow, loss mitigation or referral arrangements.
- Equal Credit Opportunity Act (ECOA) and Regulation B (12 CFR 1002) violations involving discrimination, discouraged applications or adverse action notices.
- Operational failures, such as an inadequate Compliance Management System (CMS), poor data integrity, weak vendor oversight or inaccurate Home Mortgage Disclosure Act (HMDA) reporting under Regulation C (12 CFR 1003).
Orders cite specific statutory sections and rule numbers. Compliance teams reading an order should map each cited provision to the same provision in their own policies and monitoring plans. State-specific addenda may apply where a state regulator is a concurrent party; applicability turns on the state, charter and loan type.
What are the standard components and remedies in a consent order?
Most CFPB consent orders combine several remedies:
- Civil money penalties (CMPs). The order states the amount and the basis for calculation, which may reflect the number of affected consumers, the duration of the conduct or the respondent's financial condition.
- Consumer redress. The order typically requires restitution to identified consumers, often with a claims process or direct payments and a redress plan approved by the CFPB.
- Injunctive relief. The order may prohibit specific practices, require new controls, revise policies and procedures, or impose independent audits.
- Reporting obligations. The order usually names a compliance officer or monitor, sets certification requirements and requires periodic reports to the CFPB.
Compliance professionals can read these components as a template for their own risk assessments, not as a prediction of what any specific regulator will require in any specific matter. The exact remedies vary by order, conduct and institution size.
How does a consent order affect a lender's NMLS profile and licensing?
Consent orders are public records and may appear on a company's NMLS profile. State regulators commonly review enforcement history during license renewals, new license applications and change-of-control filings. A consent order does not automatically revoke a license, but it can elevate risk ratings, trigger additional examination attention and lead to state-specific conditions.
Some states require disclosure of enforcement actions in licensing applications and renewals; requirements vary by state. Licensing staff should verify disclosure obligations against the specific state's application instructions and state mortgage licensing requirements. For questions about a particular state's treatment of an enforcement action, consult the state regulator or qualified counsel.
State licensing and examination teams can find related guidance on state rules by topic.
What are the ongoing compliance obligations after a consent order is issued?
Ongoing obligations typically run for a defined term and include:
- Governance. The order usually requires a designated compliance officer or an independent monitor with specific reporting duties.
- Remediation plans. Respondents often must submit plans and progress reports on a schedule set in the order.
- Duration. Terms commonly run several years, and some run longer, depending on the conduct and the negotiated resolution.
- Consequences. Non-compliance can lead to further enforcement, additional penalties or contempt proceedings where the order is enforced by a court.
Because timelines and deliverables are set in the order itself, a milestone tracker that maps every obligation to an owner, a due date and the evidence that will demonstrate completion is a common control. The Federal Register publication and the CFPB's public enforcement page are primary sources for the order text.
How should compliance teams prepare for and respond to a consent order?
Steps compliance teams commonly take after an order is issued:
- Legal review. Have counsel review the order, admissions language and any parallel state obligations.
- Stakeholder communication. Notify the board, senior management and the compliance committee, and align on messaging.
- CMS gap analysis. Map the cited provisions to your Compliance Management System, including policies, training, monitoring, complaint handling and vendor oversight.
- Remediation plan. Build a plan with owners, deadlines and evidence for each required action.
- Training. Train staff on the specific violations and the new controls the order requires.
- Deadline tracking. Track every report, certification and remediation milestone.
Where the order cites an operational failure, such as data integrity or complaint handling, the corrective work often spans multiple functions: compliance, operations, technology and internal audit. Institutions under federal supervision also typically coordinate with their prudential regulator, such as the OCC, FDIC or Federal Reserve Board, and credit unions with the NCUA. For recordkeeping and retention considerations in supervised institutions, see the discussion in NCUA's record retention final rule: what credit unions must know. For a related federal development on fair lending programs, see the analysis of the CFPB's rescission of the special purpose credit program advisory opinion. For an example of how state-specific licensing actions can shape a compliance calendar, see Georgia mortgage branch approval.
Frequently asked questions
What does it mean when a bank is under a consent order?
It means the bank has agreed to a binding set of remedies with the CFPB, typically redress, civil money penalties and compliance commitments, without admitting liability. The order becomes a public document, and the bank must meet the reporting, remediation and conduct requirements it contains.
What happens after a consent order?
After the order is issued, the respondent must implement the required relief, submit reports and certifications, and track deadlines. The CFPB monitors compliance. Non-compliance can lead to further enforcement, additional penalties or contempt proceedings where the order is enforced by a court.
What happens after I file a CFPB complaint?
The CFPB typically routes the complaint to the company for a response within a set period and may review the company's response. A complaint alone does not trigger a consent order, but patterns of complaints can inform supervisory attention. Timelines and processes vary by complaint type.
What is a consent order and what is its purpose?
A consent order is a settlement that resolves allegations without a trial. Its purpose is to provide remedies such as redress, penalties and conduct changes, and to establish enforceable compliance obligations. It is public and, in many cases, published in the Federal Register.
Can a CFPB consent order be appealed?
A consent order is agreed to, not imposed by a decision, so appeal rights differ from a litigated judgment. Parties typically agree in advance not to contest the stipulated facts, but the order's terms may allow limited challenges. This is fact-specific, so consult qualified counsel.
How long does a CFPB consent order remain on a company's record?
The order remains a public document permanently, but its active obligations run for the term stated in the order, which commonly spans several years and can run longer. State licensing disclosures may require reporting for the period specified in the state's application or renewal instructions.