Study guide
2.1 Regulation E: Coverage and Consumer Disclosures
CRCM Certified Regulatory Compliance Manager Exam
Track your progress as you read
Finished sections get a check mark.
1 1. CRCM Exam and Study Planning
1.1 CRCM examination, eligibility and study strategy
2 2. Electronic Transfers and Error Intake
2.1 Regulation E: Coverage and Consumer Disclosures 2.2 Regulation E: Error Notices and Unauthorized Transfer Liability 2.3 EFT Error Investigation and Provisional Credit
3 3. EFT Investigations, Remittances and Prepaid Accounts
3.1 Extended Error Rules and Remittance Transfers 3.2 Prepaid accounts and special Regulation E controls 3.3 Truth in Savings: Account Disclosures and APY
4 4. Overdraft Operations and Advertising
4.1 Overdraft Practices, Fees and Advertised Terms
5 5. ECOA Applications and Credit Decisions
5.1 ECOA Coverage, Protected Bases and Application Inquiries 5.2 Age, Spousal Signatures and Joint Credit Intent 5.3 ECOA Action Notices and Specific Reasons
6 6. Valuations and Fair Lending
6.1 Business Credit Notices and Appraisal Delivery 6.2 Fair Lending: Treatment, Effects and Comparative Evidence 6.3 Redlining, Steering and Qualified Self-Tests
7 7. Credit Cards, HELOCs and Open-End Credit
7.1 Credit Cards: Coverage, Disclosures and Ability to Pay 7.2 Credit Card Fees, Payment Allocation and Billing Errors 7.3 HELOCs and general open-end credit
8 8. Closed-End Credit and Mortgage Disclosures
8.1 Closed-End Credit: Disclosures, Finance Charges and APR 8.2 Rescission Timing and Ability-to-Repay Standards 8.3 TRID Integrated Disclosures: Loan Estimate, Closing Disclosure & Fee Tolerances
9 9. Education Loans and Mortgage Insurance
9.1 Private education loan disclosures and cancellation 9.2 Homeowners Protection Act and PMI termination
10 10. HMDA Coverage and Reporting
10.1 HMDA Institutional and Loan Coverage 10.2 HMDA Exclusions, Partial Exemptions and Data Points 10.3 HMDA: Loan Application Register (LAR) Compilation, Demographic Collection & Submission
11 11. Flood Insurance
11.1 Flood Determinations, Notices and Required Coverage 11.2 Flood Contents, Escrow, Private Policies and Force Placement
12 12. CRA Evaluation and Assessment Areas
12.1 CRA Institution Categories and Performance Tests 12.2 Community Development, Ratings and Performance Context 12.3 CRA Assessment Areas and Public File Contents
13 13. CRA Disclosures, Branching and Consumer Protection
13.1 CRA File Deadlines, Notices and Sunshine Agreements 13.2 Interstate banking and branch closing duties 13.3 Unfairness, Deception and Consumer Injury
14 14. UDAAP Controls and Social Media
14.1 Abusiveness and UDAAP Program Controls 14.2 Social media advertising, complaints and records
15 15. BSA Programs, Customers and Currency
15.1 BSA Program Pillars and Independent Testing 15.2 Beneficial Ownership, CIP and Ongoing Due Diligence 15.3 Currency Reports, Aggregation and Exemptions
16 16. Suspicious Activity and Sanctions
16.1 Suspicious Activity Reporting, Confidentiality and Records 16.2 Sanctions Scope, Ownership and Blocking Decisions 16.3 OFAC Reports, Records, Licensing and Screening Controls
17 17. Check Availability and Exception Holds
17.1 Regulation CC Scope, Deposit Days and Next-Day Items 17.2 Initial-Dollar Availability, Ordinary Checks and Policy Disclosures 17.3 Exception Hold Grounds and Reasonable Periods
18 18. Hold Notices and Settlement Services
18.1 Hold Notices, Timing and Consumer Communications 18.2 RESPA Coverage, Referral Payments and Fee Splits 18.3 Permissible Services, Ownership Returns and Marketing Agreements
19 19. Mortgage Servicing
19.1 Escrow, Servicing Errors and Force-Placed Insurance 19.2 Early Intervention, Continuity of Contact and Loss Mitigation
20 20. Consumer Reports and Credit Decisions
20.1 Consumer Reports: Permissible Purpose and Employment Use 20.2 FCRA Adverse Action Notices and Credit Score Disclosures 20.3 Risk-Based Pricing and Furnisher Accuracy Duties
21 21. Furnishing, Medical Information and Identity Theft
21.1 Negative Information Notices and Furnisher Disputes 21.2 Medical information in credit decisions: Regulation FF and V 21.3 Identity Theft Program Scope, Governance and Detection
22 22. Identity Theft and Debt Collection
22.1 Red Flag Responses, Program Updates and Address Validation 22.2 Debt Collector Scope, Calls and Communication Limits 22.3 Electronic Collection Messages and Validation Disputes
23 23. SCRA Protections and MLA Coverage
23.1 SCRA Eligibility and the Six-Percent Interest Cap 23.2 SCRA Foreclosure, Repossession, Leases and Waivers 23.3 MLA Borrowers, Identification and Credit Exemptions
24 24. Military Credit and Consumer Communications
24.1 MAPR, Military Disclosures and Prohibited Credit Terms 24.2 TCPA Calling Technology, Consent and Do-Not-Call Rules 24.3 Telephone Enforcement, TSR Coverage and Commercial Email
25 25. Electronic Consent and Consumer Leasing
25.1 E-SIGN Consent and Consumer Electronic Records 25.2 Consumer Leasing Coverage, Disclosures and Residual Value
26 26. Deposit Insurance and Privacy Notices
26.1 FDIC Insurance: Single, Joint and Trust Ownership 26.2 Retirement, Business and Custodial Insurance; FDIC Signs 26.3 Privacy Notices, Sharing and Opt-Out Opportunities
27 27. Privacy Sharing and Information Security
27.1 Privacy Sharing Exceptions, Account Numbers and Reuse 27.2 Information Security Programs and Incident Investigation 27.3 Customer Incident Notices and Regulatory Notification Clocks
28 28. Authentication and Specialized Data Privacy
28.1 Authentication, access and layered security 28.2 GDPR scope, lawful processing and incident response 28.3 HIPAA and HITECH in bank services
29 29. Insider Lending and Affiliate Definitions
29.1 Regulation O Insider Definitions and Nonpreferential Credit 29.2 Insider Approvals, Lending Limits and Executive Restrictions 29.3 Affiliate Definitions, Covered Transactions and Collateral
30 30. Affiliate Transactions, Appraisals and Originators
30.1 Low-Quality Assets, Market Terms and Affiliate Limits 30.2 Title XI Valuation Thresholds, Exemptions and Credentials 30.3 Valuation Independence, HPML Appraisals and SAFE Registration
31 31. Garnishment and Financial Records
31.1 Federal Benefit Garnishment: Review, Protection and Notice 31.2 Financial Privacy: Government Requests, Certificates and Exceptions 31.3 Regulation S and financial-record reimbursement
32 32. Bank Security and Insurance Sales
32.1 Bank Bribery and Physical Security Programs 32.2 Security Reporting and Retail Nondeposit Investments 32.3 Consumer protection in bank insurance sales
33 33. Securities Activities and Anti-Bribery Rules
33.1 Regulation R and bank brokerage exceptions 33.2 Regulation U purpose credit and margin collateral 33.3 FIRREA civil penalties and foreign bribery risks
34 34. Payment Systems, Child Privacy and Tax Reporting
34.1 Deposit Classification, Reserve Ratios and Debit Interchange 34.2 Internet Gambling Controls, Child Privacy and Email Rules 34.3 IRS information reporting and backup withholding
35 35. Accessible Banking
35.1 ADA Title III and access to banking services
36 36. CMS Governance and Operating Procedures
36.1 Board of Directors & Senior Management Oversight: Responsibilities, Culture & Resources 36.2 The Three Lines of Defense Model in Bank Compliance 36.3 Compliance Policies and Procedures: Development, Approval Cycles & Operationalization
37 37. Compliance Risk Assessment
37.1 Compliance Risk Assessment: Exposure and Control Evidence 37.2 Residual Risk, Specialized Reviews and Event-Driven Updates 37.3 Risk Scoring, Impact Dimensions and Risk Appetite
38 38. Risk Indicators and Compliance Training
38.1 Compliance Indicators, Emerging Risks and Model Limits 38.2 Legal Training Duties and Role-Based Curriculum 38.3 Board Education, Training Administration and Effectiveness
39 39. Monitoring, Testing and Vendor Diligence
39.1 Monitoring, Independent Assurance and Risk-Based Scoping 39.2 Sampling Objectives, Workpapers and Testing Reports 39.3 Third-Party Planning, Diligence and Contract Design
40 40. Vendor Controls and Complaint Management
40.1 Vendor Monitoring, Fintech Controls and Service-Company Notices 40.2 Complaint Intake, Investigation and Root Cause 40.3 Complaint Reporting, Agency Responses and Systemic Redress
41 41. Regulatory Change and Corrective Planning
41.1 Regulatory Surveillance, Impact Assessment and Gap Analysis 41.2 Change Implementation, Validation and Judicial Stays 41.3 Issue Prioritization, Root Cause and Corrective Plan Design
42 42. Restitution and Examination Management
42.1 Remediation Populations, Restitution and Closure Evidence 42.2 Examination Coordination and Consumer Compliance Ratings 42.3 Supervisory Findings, Responses and Enforceable Actions
43 43. Regulatory Reports and Resubmissions
43.1 Regulatory reporting, corrections and examiner updates
2.1 Regulation E: Coverage and Consumer Disclosures
Key Takeaways Explain This Topic AI
Regulation E principally protects electronic transfers involving consumer asset accounts.
Initial disclosures explain liability, transfer limits, fees and error-resolution rights.
Compulsory recurring electronic repayment is restricted even when a lender prefers automated collection.
Last updated: October 2026
Statutory Authority and Regulatory Scope
The fundamental mandate of Regulation E is the protection of individual consumers who initiate electronic transfers of funds. An electronic fund transfer (EFT) is defined under 12 CFR § 1005.3(b) as any transfer of funds that is initiated through an electronic terminal, telephone, computer, or magnetic tape/chip for the purpose of ordering, instructing, or authorizing a financial institution to debit or credit a consumer's asset account.
Covered Accounts and Inclusions
Regulation E protections apply exclusively to consumer asset accounts held directly or indirectly by a financial institution and established primarily for personal, family, or household purposes. Covered accounts include:
Consumer Demand Deposit (Checking) Accounts: Standard transaction accounts used for everyday consumer debit and electronic disbursements.
Savings and Money Market Deposit Accounts: Consumer interest-bearing savings accounts subject to electronic deposits or withdrawals.
Payroll Card Accounts: Accounts established directly or indirectly through an employer to which electronic fund transfers of consumer wages, salary, or compensation are made on a recurring basis.
Prepaid Accounts: General-purpose reloadable cards, digital mobile wallets holding consumer stored-value funds, and government benefit disbursement accounts.
Electronic Check Conversion (ECK): Transactions where a merchant or billing party captures routing, account, and serial numbers from a consumer's paper check to initiate a one-time electronic debit. This includes accounts receivable conversion (ARC), point-of-purchase conversion (POP), and back-office conversion (BOC).
Statutory and Regulatory Exclusions
Compliance officers must distinguish covered EFT activity from transactions expressly excluded under 12 CFR § 1005.3(c):
Commercial and Business Accounts: Accounts maintained by corporations, partnerships, limited liability companies, sole proprietorships, or associations for business or agricultural purposes are completely exempt from Regulation E.
Wire Transfers: Wholesale electronic fund transfers executed through Fedwire or similar interbank communication networks (such as CHIPS) are excluded under § 1005.3(c)(3) and are instead governed by Uniform Commercial Code (UCC) Article 4A and Federal Reserve Regulation J.
Internal Intra-Bank Transfers: Automatic transfers between a consumer's own accounts within the same depository institution, or transfers between a consumer and immediate family members within the same bank.
Securities and Commodities Transfers: Transfers conducted primarily for the purchase or sale of securities or commodities through a broker-dealer registered with the Securities and Exchange Commission (SEC) or the Commodity Futures Trading Commission (CFTC).
Fiduciary Trust Accounts: Deposit accounts administered by a financial institution's trust department under formal fiduciary agreements.
Initial Disclosures (12 CFR § 1005.7)
Depository institutions must provide clear, written initial disclosures at the time a consumer contracts for an EFT service or before the first electronic transfer is executed. The disclosures must be delivered in a retainable format.
Ten Mandatory Initial Disclosure Items
Under 12 CFR § 1005.7(b), the initial disclosure statement must incorporate the following ten disclosures:
Consumer Liability Summary: A comprehensive explanation of the consumer's liability for unauthorized transfers under 12 CFR § 1005.6, including notification procedures and potential loss thresholds.
Contact Information for Notice: The specific telephone number and postal address of the bank office to be notified when the consumer believes an access device has been lost or stolen, or that an unauthorized EFT has occurred.
Business Days: The financial institution's official business days (days when the institution is open to the public for substantially all business functions, including relevant back-office operations).
Permitted Transfer Types and Limits: The types of EFTs the consumer is authorized to initiate and any restrictions on transfer frequency or dollar amounts (e.g., daily ATM withdrawal caps or point-of-sale limits).
Fee Schedule: An itemization of all fees charged by the financial institution for initiating EFTs or maintaining the right to execute EFTs, accompanied by an explicit notice that third-party ATM operators may assess an independent surcharge.
Documentation Rights: A summary of the consumer's right to obtain terminal receipts and periodic account statements under § 1005.9, as well as confirmation notices for preauthorized transfers.
Stop-Payment Rights and Procedures: The consumer's right to stop payment of preauthorized electronic fund transfers, the procedural requirements, deadlines, and any associated fees.
Financial Institution Liability: A summary of the institution's statutory liability to the consumer under EFTA Section 910 for damages caused by the bank's failure to initiate or stop transfers in accordance with terms.
Confidentiality and Third-Party Sharing: The specific circumstances under which the institution will disclose information regarding the consumer's account to third parties in the ordinary course of business.
Error Resolution Notice: An explanatory notice substantially identical to Model Form A-3 detailing the consumer's error reporting rights and the institution's investigatory obligations under § 1005.11.
Change in Terms Notices (12 CFR § 1005.8)
Institutions must implement strict change-management protocols to identify changes in account terms that trigger advance disclosure requirements.
21-Day Advance Notice Trigger
A depository institution must mail or deliver a written or electronic notice to consumers at least 21 calendar days prior to the effective date of any change in term that:
- Increases fees or charges for EFTs;
- Increases consumer liability for unauthorized EFTs;
- Reduces the available types of electronic fund transfer services; or
Imposes stricter limitations on the frequency or dollar amount of transfers.
Immediate Security Exception
Advance 21-day notice is not required when an immediate change in terms or conditions is necessary to maintain or restore the security of an electronic fund transfer system or a consumer account. However, if the institution makes the security-related change permanent, written notice must be furnished on or with the next regularly scheduled periodic statement or within 30 calendar days after making the change permanent , unless disclosure would compromise the security of the system.