Commercial lending regulations in the United States are built on a different premise than the rules that protect individual consumers. Business borrowers are presumed to negotiate their own terms, so federal law exempts commercial credit from the Truth in Lending Act’s disclosure regime and instead concentrates on the safety of lending institutions, the prevention of financial crime, fair access to credit, and the mechanics of collateral. The result is a patchwork: federal banking agencies, a handful of federal statutes, state licensing and disclosure laws, the Uniform Commercial Code, and, for government-guaranteed loans, the Small Business Administration’s own rulebook.
What Federal Disclosure Rules Do Not Cover
The Truth in Lending Act and Regulation Z explicitly exempt business, commercial, and agricultural credit from their disclosure requirements.1Consumer Financial Protection Bureau. 12 CFR 1026.3 – Exempt Transactions A commercial lender has no federal obligation to present an APR, a payment schedule, or a total-cost-of-credit figure the way a consumer lender must. The logic is that a company borrowing several million dollars for a warehouse is expected to evaluate risk on its own, so regulators focus on the health of the lender rather than the paperwork given to the borrower.
That does not mean commercial loans are unregulated. It means the regulation lives somewhere else: in the supervision of the institution making the loan, in the anti-fraud and anti-discrimination statutes that apply to all credit, and in the state-law rules that govern collateral and, increasingly, small business disclosures.
Federal Agencies That Supervise Commercial Lenders
No single federal agency regulates all commercial lending. Oversight is divided by charter type.
The Office of the Comptroller of the Currency charters, regulates, and supervises all national banks and federal savings associations.2Office of the Comptroller of the Currency. About the Office of the Comptroller of the Currency If a bank has “National” or “N.A.” in its name, the OCC’s rules shape how it originates and manages commercial loans.
The Federal Reserve supervises state-chartered banks that are Federal Reserve members, along with bank holding companies. Its examination process covers capital adequacy, asset quality, management, earnings, liquidity, and sensitivity to market risk.3Federal Reserve. Supervision and Regulation Report – December 2025
The FDIC supervises state-chartered banks that carry federal deposit insurance but are not Federal Reserve members.4eCFR. 12 CFR Part 362 – Activities of Insured State Banks and Insured Savings Associations Because it protects depositors, it pays close attention to the risk profile of a bank’s commercial loan portfolio.
All three agencies use the CAMELS rating system to evaluate banks. The acronym covers capital adequacy, asset quality, management capability, earnings, liquidity, and sensitivity to market risk.5Federal Reserve. Commercial Bank Examination Manual Section A.5020.1 – Uniform Financial Institutions Rating System A poor rating can restrict a bank’s ability to make new commercial loans, increase deposit insurance premiums, and trigger enforcement actions. In practice, commercial lending standards are shaped as much by what examiners look for as by any specific statute.
Federal Compliance Rules That Apply to the Loans Themselves
A few federal laws impose obligations on the credit transaction rather than the institution.
Anti-Money Laundering and Know-Your-Customer
The Bank Secrecy Act is the heaviest compliance burden most commercial lenders face. Every financial institution must maintain a program to detect and report suspicious activity, and must file a Currency Transaction Report for any transaction involving more than $10,000 in currency.6Internal Revenue Service. Bank Secrecy Act These programs require designated compliance officers, staff training, internal controls, and independent audits.
The know-your-customer piece means a commercial lender cannot take a business at face value. Before extending credit, the institution must verify the borrower’s identity and understand the nature of the relationship. For legal entity borrowers such as LLCs and corporations, the Customer Due Diligence Rule requires lenders to identify beneficial owners at account opening and refresh that information when risk-based triggers or reliability concerns arise. Inadequate BSA/AML programs can produce severe civil and criminal penalties against the institution.
Fair Lending and Community Reinvestment
The Equal Credit Opportunity Act applies fully to commercial credit. A lender cannot deny a business loan or impose different terms based on race, color, religion, national origin, sex, marital status, or age.7eCFR. 12 CFR Part 1002 – Equal Credit Opportunity Act (Regulation B) The assumption that business lending is a pure credit-risk negotiation does not override anti-discrimination law.
The Community Reinvestment Act requires federally insured banks to help meet the credit needs of the communities where they operate, including low- and moderate-income neighborhoods.8Board of Governors of the Federal Reserve System. Community Reinvestment Act For commercial lending, that often means expectations that banks make credit available to small businesses and small farms in their assessment areas. CRA ratings are public, and a poor rating can block a bank’s applications for mergers, acquisitions, or new branches.
Small Business Lending Data Collection
Section 1071 of the Dodd-Frank Act directed the Consumer Financial Protection Bureau to create a data collection regime for small business lending, and the rule is now phasing in. The highest-volume lenders (Tier 1) must begin collecting data by July 1, 2026, with their first filing due June 1, 2027. Moderate-volume lenders follow with a January 2027 compliance date, and the smallest covered lenders start in October 2027.
The rule requires lenders to gather and report dozens of data fields for each small business credit application, including product type, credit amount, pricing information, and the action taken. It also requires demographic data about the business: whether the applicant is minority-owned, women-owned, or LGBTQI+-owned, and the ethnicity, race, and sex of principal owners. A firewall provision bars loan officers and underwriters from accessing the demographic data. Lenders can begin testing their data collection systems up to 12 months before their compliance date.
Collateral Rules Under UCC Article 9
Almost every commercial loan involves collateral, and the rules governing how a lender establishes and protects its claim come from Article 9 of the Uniform Commercial Code. Article 9 is state law, but it is nearly uniform across the country.
A security interest does not protect against other creditors or a bankruptcy trustee until it is “perfected.” The most common perfection method is filing a UCC-1 financing statement with the appropriate state office. Other methods apply to specific collateral types: deposit accounts require control, and tangible assets like stock certificates can be perfected by physical possession. Financing statements expire after five years and must be renewed through a continuation filing within six months before expiration. Missing that window can mean losing priority to a competing creditor.
A purchase-money security interest gets special priority when a lender finances the acquisition of specific collateral. For most goods, the lender obtains automatic priority over earlier-filed security interests as long as it perfects within 20 days of the borrower taking possession.9Legal Information Institute. UCC 9-324 – Priority of Purchase-Money Security Interests For inventory, the rules are stricter: the lender must be perfected before the borrower receives the goods and must send advance notice to any competing secured creditor. Getting the notice requirements wrong on an inventory financing deal eliminates the priority advantage entirely.
State-Level Regulation
State rules matter most in three areas: licensing of non-bank lenders, disclosure mandates for small business financing, and interest rate limits.
Non-Bank Lender Licensing
Banks are already supervised by their chartering authorities, but the growing market of non-bank commercial lenders (fintech companies, merchant cash advance providers, factoring firms) often falls outside direct federal oversight. Most states require these non-depository lenders to obtain a license before operating. Licensing fees, capital requirements, and renewal obligations vary widely, and licensing gives state regulators a mechanism to examine and discipline lenders that federal agencies do not supervise.
Commercial Financing Disclosure Laws
Several states have moved to fill the gap left by the federal TILA exemption for commercial credit. These laws typically require lenders to give small business borrowers standardized disclosures covering the total cost of financing, the annual percentage rate, and the payment schedule. They generally apply to financing below a specified threshold, commonly $500,000, and target products where information asymmetry is greatest: merchant cash advances, short-term business loans, and factoring. Commercial lenders operating across state lines have to track a patchwork of these obligations.
Usury and Federal Preemption
State usury laws set maximum interest rates, and many states apply them to commercial credit. National banks and federally insured state-chartered banks enjoy a powerful federal preemption: they can charge interest at the rate allowed by the state where they are located, regardless of stricter caps in the borrower’s state. For national banks, this authority comes from the National Bank Act, which permits charging interest “at the rate allowed by the laws of the State, Territory, or District where the bank is located.”10Office of the Law Revision Counsel. 12 USC 85 – Rate of Interest on Loans, Discounts and Purchases A parallel provision applies to FDIC-insured state banks.
Non-bank lenders do not get this federal shield and must comply with the usury laws of whatever state the borrower is in. That is one reason many fintech lenders partner with banks to originate loans, an arrangement that has drawn increasing regulatory scrutiny.
Additional Rules for SBA-Guaranteed Loans
When a commercial loan carries a federal guarantee through the Small Business Administration, the lender takes on a separate compliance layer. The SBA publishes detailed Standard Operating Procedures for both the 7(a) and 504 programs, covering origination through liquidation.11U.S. Small Business Administration. Lender and Development Company Loan Programs
The 7(a) program, the SBA’s primary business loan guarantee, requires the lender to verify that the borrower meets SBA size standards, that proceeds will be used for approved purposes, and that the borrower cannot obtain credit elsewhere on reasonable terms. Documentation standards are exacting; a lender that cuts corners on eligibility risks having the SBA deny its guarantee claim if the loan defaults.
SBA loans also carry interest rate caps. For 7(a) loans, the SBA limits how much a lender can charge above a base rate like the prime rate, with the maximum spread varying by loan size and maturity. Larger, longer-term loans face tighter spread limits. Servicing and liquidation follow a separate SOP that dictates how lenders must handle delinquencies, workouts, and collateral recovery.12U.S. Small Business Administration. 7(a) Loan Servicing and Liquidation Lenders that do not follow these procedures can lose their guarantee on a specific loan or, in serious cases, be removed from the program.
Environmental Due Diligence for Commercial Real Estate Loans
Commercial loans secured by real property carry a risk that does not exist with most other collateral. Under federal environmental law, a lender that forecloses on contaminated property can become liable for cleanup costs, which can exceed the value of the property. Environmental due diligence is a routine part of commercial real estate lending as a result.
Standard practice is to require a Phase I Environmental Site Assessment before closing. A Phase I follows the ASTM E1527 standard and involves a records review, site inspection, and interviews to identify recognized environmental conditions. It must be prepared by a qualified environmental professional, and for loans sold to the secondary market it typically cannot be more than 180 days old at origination. If the Phase I identifies potential contamination, the lender will usually require a Phase II involving actual soil or groundwater testing before proceeding.
Lenders that follow proper due diligence before acquiring a security interest can qualify for the secured creditor exemption under federal environmental law, which protects them from cleanup liability as long as they do not actively manage the contaminated property. Skipping the environmental assessment eliminates that protection.