Dodd-Frank — formally the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 — is more than fifteen years old. The Act produced a sprawling federal regulatory architecture, including the creation of the Consumer Financial Protection Bureau (CFPB), the rewrite of mortgage disclosure rules under the integrated TRID framework, the codification of ability-to-repay (ATR) and qualified mortgage (QM) standards, and substantial expansion of consumer protection authority across the financial services industry.
For private lenders — operating mostly in the business-purpose space rather than consumer mortgage lending — Dodd-Frank’s direct reach is narrower than many lenders assume. But “narrower” is not “irrelevant,” and the residential edge cases where Dodd-Frank does apply produce some of the most damaging compliance failures in private lending. This guide walks through what Dodd-Frank actually requires of private lenders today, where the business-purpose carve-outs are reliable, and where the line between business-purpose and consumer treatment turns into a litigation exposure.
What Dodd-Frank Did
The Act was enacted in response to the 2008 financial crisis and is built on three pillars relevant to private lending:
- Title XIV — Mortgage Reform and Anti-Predatory Lending Act (MRAPLA). Amends TILA, RESPA, HOEPA, and related statutes to impose disclosure, underwriting, and compensation rules on residential mortgage lending. This is the source of the ability-to-repay rules, the qualified mortgage standard, the loan originator compensation rules, and the integrated TRID disclosures.
- The CFPB. A federal agency with rulemaking, supervisory, and enforcement authority over consumer financial products and services. Originally housed under the Federal Reserve, the CFPB has had a turbulent regulatory existence over the last decade, with substantial swings in enforcement priorities across administrations.
- Consumer protection structure beyond mortgages. UDAAP (unfair, deceptive, or abusive acts or practices) authority, debt-collection rule changes, fair lending oversight, and other consumer-facing rules.
The unifying principle: Dodd-Frank focuses on consumer financial products. Business and commercial transactions sit largely outside the framework, by design.
The Consumer / Business-Purpose Line
For private lenders, the most important Dodd-Frank concept is the distinction between consumer and business-purpose loans. The Act and its implementing regulations rely on the primary use of proceeds test established in Regulation Z: a loan is a consumer credit transaction when it is extended primarily for personal, family, or household purposes. A loan extended primarily for a business or investment purpose falls outside Regulation Z.
This test drives the entire Dodd-Frank analysis for a private lender:
- A business-purpose loan to fund a fix-and-flip on non-owner-occupied investment property → outside Reg Z, outside ATR/QM, no Loan Estimate or Closing Disclosure required.
- A consumer-purpose loan to refinance a borrower’s primary residence → squarely inside Reg Z, ATR/QM rules apply, full TRID disclosures required.
Most private lending platforms position themselves entirely in the business-purpose lane. That position is valid as long as the file documentation supports it. When the file documentation is weak — a borrower’s “investment intent” supported only by a checkbox; a property the borrower actually moves into post-closing; a rehab loan on what turns out to be the borrower’s home — the consumer-purpose framework can attach retroactively, with all of Dodd-Frank’s enforcement consequences in tow.
Specific Dodd-Frank Requirements That Apply (or Don’t) to Private Lenders
Loan Originator Compensation Rules
Reg Z’s loan originator (LO) compensation rules — which limit how mortgage loan originators can be paid on consumer mortgages — apply to consumer residential mortgage transactions only. A platform originating only business-purpose loans is not subject to the LO compensation rules and can structure originator compensation flexibly.
A platform originating any consumer-purpose residential mortgages must comply with the LO compensation rules, which prohibit (with limited exceptions) paying originators based on transaction terms, paying originators by both the lender and the borrower in the same transaction, and using compensation to incent originators to steer borrowers toward more expensive products.
Ability-to-Repay (ATR) Rules
ATR applies to most consumer residential mortgages secured by a dwelling. The lender must make a reasonable, good-faith determination that the borrower has a reasonable ability to repay the loan. Eight specific factors must be considered, documented, and verified.
For business-purpose loans, ATR does not apply. Underwriting can focus on project economics, sponsor track record, and collateral — the standard business-purpose framework.
The exposure for private lenders comes when a residential investment loan turns out to be consumer-purpose post-closing, and the lender did not perform an ATR analysis because the loan was originated as business-purpose. The remedy in that case includes potential rescission of the loan and the borrower’s right to recover all interest and fees paid.
TRID Disclosures
The TILA-RESPA Integrated Disclosure (TRID) rules — Loan Estimate and Closing Disclosure — apply to most consumer mortgages. Business-purpose mortgages are exempt.
Where a loan straddles the line, the safer practice is often to comply with TRID disclosures as a defensive measure even when the lender’s analysis concludes the loan is business-purpose. The cost of additional disclosure is small compared to the cost of a TRID-compliance challenge raised post-closing.
High-Cost Mortgage (HOEPA) Rules
HOEPA’s high-cost mortgage rules apply to consumer mortgages with rates, points, or prepayment penalties that exceed defined thresholds. For consumer mortgages, exceeding the HOEPA thresholds triggers extensive additional disclosures, restrictions, and originator counseling requirements.
For business-purpose loans, HOEPA does not apply. This is a significant carve-out for private lenders charging the higher rates typical of bridge and rehab products.
Debt Collection (FDCPA Amendments)
Dodd-Frank-era amendments to the FDCPA and related rules expanded consumer debt collection requirements. These rules apply to collection of consumer debts. Collection of business-purpose debts is largely outside the FDCPA framework.
Common Compliance Failures
The most damaging Dodd-Frank exposure points for private lenders Geraci LLP sees in practice:
1. The “investment loan” that becomes the borrower’s home. Loan originated as business-purpose; borrower moves in post-closing or never actually rents the property. The file documentation is thin — a checkbox on the application, no lease, no rental marketing evidence. Borrower defaults, finds counsel, raises Reg Z compliance defenses including missing TRID disclosures and missing ATR analysis. Even if the lender ultimately prevails, the litigation costs are substantial.
2. The mixed-use loan. Proceeds fund both business activity (the rental investment) and personal activity (consolidating the borrower’s credit card debt). Regulation Z’s “primarily for” test gets harder to satisfy as the personal-use percentage grows.
3. Construction loans on what becomes a primary residence. A construction loan originated for an investment property becomes a consumer-purpose obligation if the borrower decides to occupy. Documentation should affirmatively rebut occupancy intent.
4. State-law overlays missed. Some states impose state-law mortgage disclosure or licensing requirements on business-purpose loans even where federal law exempts them. Operating across multiple states without a state-by-state map of overlays is a recurring failure mode.
5. Compensation arrangements that cross the line. Even on business-purpose loans, paying transaction-based compensation to unlicensed parties for capital-raising assistance triggers broker-dealer issues distinct from Dodd-Frank but easy to conflate.
What This Means Operationally
For a private lending platform, the practical Dodd-Frank posture comes down to:
1. Stay on the business-purpose side of the line. Build origination practices, file documentation, and post-closing servicing protocols that affirmatively support the business-purpose classification. 2. Use defensive disclosure on borderline files. When a loan profile looks like it could be characterized either way, layer in TRID-style disclosures even if the analysis concludes business-purpose. The marginal cost is small and the litigation defense is significant. 3. Document occupancy and use throughout the loan life. Periodic occupancy verification, lease tracking, and rent receipt monitoring help defend the business-purpose treatment if it’s ever challenged. 4. Map state-law overlays. Federal carve-outs do not always carry through to state law. A multi-state lending platform needs a written matrix of state-specific requirements that overlay or supplement Dodd-Frank. 5. Track CFPB rule changes. The CFPB’s enforcement priorities and rule scope have shifted significantly across administrations. Keep operational compliance current with the rules in effect, not the rules at origination of the platform.
A Note on Regulatory Direction
The CFPB has been one of the most contested agencies in federal financial regulation, with administrations alternately expanding and contracting its enforcement footprint. Lenders should not plan compliance around any single administration’s enforcement posture. The underlying statutes — TILA, RESPA, HOEPA, the Dodd-Frank Act itself — remain in force, and rule-making and enforcement priorities can shift quickly. The compliance posture that works across cycles is the one built on the statutes, not on any particular agency’s enforcement playbook.
Where Geraci LLP Helps
Geraci LLP’s banking and finance team works with private lenders on Dodd-Frank compliance posture — business-purpose vs. consumer classification, file documentation standards, multi-state overlay mapping, defensive disclosure design, and litigation defense when a borrower challenges the lender’s compliance position. The firm also drafts the compliance policies, loan-document templates, and originator training materials that turn ad-hoc compliance into a programmatic posture.
If you are tightening your Dodd-Frank compliance, evaluating whether your file documentation supports business-purpose treatment, or facing a challenge to a loan’s classification, contact Geraci LLP.
