The difference between federal and state consumer protection laws comes down to who can enforce them and what you personally can do about a business that wronged you. Federal law, led by the Federal Trade Commission and the Consumer Financial Protection Bureau, targets patterns of deception across interstate commerce, but the main federal statute doesn’t let you sue the business yourself. State consumer protection laws, often called Little FTC Acts, usually do, and many of them add damages multipliers and attorney fee awards that federal law lacks. Both systems run at the same time, and a mandatory arbitration clause in your contract can override either one.
Who Can Sue and Who Can Only Enforce
Section 5 of the Federal Trade Commission Act declares unfair or deceptive practices in commerce illegal.1Office of the Law Revision Counsel. 15 USC 45 What surprises most people is that Section 5 gives no private right of action. Only the FTC can bring a case under it. If a company deceives you and you want to sue citing the FTC Act, you can’t. You’d have to rely on a state statute or a different federal law that does grant that right.
Every state has its own unfair or deceptive acts and practices statute, and most of them work the opposite way: you can sue the business directly. Your state attorney general can also investigate and file suit on behalf of the public, seeking restitution, civil penalties, and orders blocking the practice. That basic split, agency-only at the federal level under Section 5 versus consumer-empowered at the state level, is the single most important thing to understand before deciding how to respond to a bad business practice.
What Federal Law Covers
The FTC polices the marketplace systemically. When it acts, the consequences can be serious. The FTC Act sets a base penalty of $10,000 per violation, adjusted upward every year for inflation, and the agency can pursue federal court injunctions that force companies to change their business models.1Office of the Law Revision Counsel. 15 USC 45 The FTC sometimes joins state attorneys general in coordinated actions, as it did in a 2026 case against Publicis, Inc. that combined FTC claims with suits from eight states.2Federal Trade Commission. Final Order and Stipulated Permanent Injunction as to Publicis, Inc.
The Consumer Financial Protection Bureau, created by the 2010 Dodd-Frank Act, regulates mortgages, credit cards, student loans, and other financial products.3Office of the Law Revision Counsel. 12 USC 5491 Its posture has shifted in 2025 and 2026. The President designated the Treasury Secretary as Acting Director in early 2025, a Department of Justice opinion concluded the Bureau couldn’t draw funds from the Federal Reserve under its usual mechanism, and the CFPB announced it would deprioritize enforcement in several areas.4Consumer Financial Protection Bureau. Newsroom Enforcement has slowed substantially, which puts more weight on state regulators. The CFPB’s complaint database and complaint-handling process still function, and companies generally respond to CFPB complaints within 15 days, with 60 days for you to review the response.5Consumer Financial Protection Bureau. Learn How the Complaint Process Works
Federal Statutes That Do Let You Sue
Several federal laws target specific consumer harms and, unlike Section 5, give you a direct right to file suit.
The Fair Credit Reporting Act regulates credit bureaus. If you dispute an error, the bureau must investigate within 30 days, extendable to 45 days if you submit additional information during the investigation, and correct or delete inaccurate or unverifiable items, notifying you within five business days of completing the investigation.6Federal Trade Commission. The Fair Credit Reporting Act You can sue within two years of discovering a violation, or five years from when it occurred, whichever hits first.
The Fair Debt Collection Practices Act restricts third-party debt collectors. They can’t call before 8 a.m. or after 9 p.m., threaten violence, use profane language, misrepresent the amount owed, or falsely claim they’ll have you arrested, and they can’t collect fees beyond what your original agreement authorized.7Federal Trade Commission. Fair Debt Collection Practices Act You can sue for actual damages plus up to $1,000 in statutory damages per case. Class actions can recover up to the lesser of $500,000 or one percent of the collector’s net worth.8Office of the Law Revision Counsel. 15 USC 1692k
The Telephone Consumer Protection Act makes sales robocalls illegal without your written permission. Violations of the National Do Not Call Registry or the robocall rules can trigger penalties up to $50,120 per call, and telemarketers must identify themselves, display their number on caller ID, and stay within the 8 a.m. to 9 p.m. window in your time zone.9Federal Trade Commission. National Do Not Call Registry FAQs
What State Little FTC Acts Add
State UDAP statutes fill the private-right gap that the FTC Act leaves. The real muscle in many of them is a damages multiplier. A significant number of states allow courts to award two or three times your actual damages when a business acted knowingly or willfully. Some states set a minimum recovery floor regardless of actual harm. Attorney fee provisions appear in most of these statutes, so the business pays your legal costs if you win. Those fee-shifting rules matter enormously in practice because they make it economically viable for lawyers to take smaller consumer cases they’d otherwise turn down.
State UDAP laws also reach into industry-specific territory federal law doesn’t touch. Many include specific rules for auto repairs, door-to-door sales, and rent-to-own contracts, with requirements about exact contract language and cancellation windows. That granularity gives you concrete protection in everyday transactions federal regulators rarely prioritize.
Where State UDAP Laws Have Gaps
Not every industry falls under a state’s UDAP statute, and the exemptions vary widely. Insurance is a frequent carve-out. Some states exclude insurance sales entirely or bar consumers from suing insurers under the statute even when it technically applies. Regulated utilities face similar treatment in many states, where the public utility commission holds exclusive jurisdiction over rate disputes. Credit transactions, real estate, and debt collection also receive partial or full exemptions in various states. Check your state’s statute before assuming UDAP damages and fee-shifting are available.
When Federal Law Overrides State Law
The Supremacy Clause of the Constitution establishes that federal law overrides conflicting state law.10Legal Information Institute. US Constitution Article VI In consumer protection, the practical question is whether the federal statute sets a floor states can exceed, or a ceiling they can’t add to.
Express Preemption
Some federal statutes spell out which state laws they override. The Fair Credit Reporting Act expressly preempts state laws that impose requirements on the same topics it already regulates, such as the responsibilities of companies that furnish data to credit bureaus.11Congress.gov. Preemption and Privacy Law When a federal law includes an express preemption clause, the boundary is relatively clear: state laws on the listed topics yield to the federal standard.
Implied Preemption and Savings Clauses
When a federal statute doesn’t expressly address preemption, courts look for implied preemption, which arises when federal regulation is so thorough it occupies the entire field, or when a state law directly conflicts with a federal objective. In one well-known case, the Supreme Court found that state tort claims about car airbag designs conflicted with a federal safety standard that deliberately gave manufacturers flexibility in choosing passive restraint systems.11Congress.gov. Preemption and Privacy Law
Many federal consumer statutes include savings clauses that preserve state protections. The Gramm-Leach-Bliley Act and HIPAA, for example, explicitly say that state laws offering greater consumer protections than the federal standard are not preempted.11Congress.gov. Preemption and Privacy Law A savings clause turns the federal standard into a floor. Businesses must meet it everywhere, and states can require more, so you keep your state-law remedies even when a federal statute covers the same ground.
Concurrent Enforcement
In many areas, federal and state agencies can pursue the same company for the same conduct at the same time. A business could face an FTC action and a parallel state attorney general lawsuit simultaneously. Companies can’t escape accountability by arguing one level of government already handled the matter.
The Arbitration Clause That Can Override Both
This is the part that trips people up more than anything else. Many consumer contracts, from credit card agreements to cellphone plans to online service terms, include mandatory arbitration clauses. These clauses require you to resolve disputes through private arbitration instead of court. The Federal Arbitration Act makes them enforceable in any contract involving commerce, with only narrow exceptions for fraud or unconscionability.12Office of the Law Revision Counsel. 9 USC 2
Most of these clauses also include class action waivers. The Supreme Court has repeatedly upheld them. In one key case, the Court held that the FAA preempts state laws conditioning arbitration agreements on the availability of class procedures. In another, the Court ruled that a class action waiver is enforceable even when the cost of individually pursuing the claim exceeds the potential recovery, reasoning that difficulty proving a claim doesn’t eliminate the right to pursue it.13Congress.gov. The Federal Arbitration Act and Class Action Waivers
The practical impact is significant. You may hold strong rights under both federal and state consumer protection laws, but if you signed a contract with an arbitration clause, enforcement runs through a private arbitration process rather than a courtroom. Before spending time building a case, check the contract or terms of service you agreed to. The arbitration clause is usually buried in the dispute resolution section.
Choosing Where to File
Filing a complaint with a government agency won’t resolve your individual dispute in most cases. Complaints drive enforcement priorities, and sometimes the process itself produces results. The approach differs at each level.
Federal Complaints
The FTC accepts fraud reports at ReportFraud.ftc.gov.14Federal Trade Commission. ReportFraud.ftc.gov – Assistant The FTC doesn’t open investigations based on individual complaints, negotiate on your behalf, or act as your lawyer. Your report feeds into the Consumer Sentinel Network, a database more than 2,800 law enforcement agencies use to spot patterns and build cases.15Federal Trade Commission. Consumer Sentinel Network Enough similar reports about the same company can trigger an investigation.
For financial products like mortgages, credit cards, or bank accounts, the CFPB complaint process is more likely to produce an individual response. After you submit, the CFPB forwards the complaint to the company, which generally responds within 15 days, with an extension to 60 days for complex matters, and you have 60 days to review the response.5Consumer Financial Protection Bureau. Learn How the Complaint Process Works The complaint and the response become part of the public database unless the complaint gets referred to another regulator.16Consumer Financial Protection Bureau. Consumer Complaint Database
State Complaints and Direct Action
Your state attorney general’s consumer protection division is usually the more responsive option for everyday disputes. Unlike the FTC, many state AG offices do intervene in individual cases, particularly when the complaint involves a local business. Most have online complaint portals. You’ll need the business’s full legal name and address, the date and amount of the transaction, and copies of contracts, receipts, advertisements, or email confirmations. Stick to factual descriptions.
Some states require you to send the business a formal demand letter before filing a lawsuit. A demand letter outlines the dispute, identifies the harm, states the resolution you want, and signals your willingness to sue. Even where it isn’t required, it creates a paper trail. Keep it factual, specific, and short.
If you’ve suffered real financial harm, hiring a consumer protection lawyer often makes more sense than waiting for an agency to act. Many attorneys work on contingency, typically 33 to 40 percent of the recovery. State UDAP fee-shifting provisions and treble damages can make a lawyer willing to take cases where the damages alone wouldn’t justify the cost. Gather everything before the first meeting: the contract, all communications, receipts, screenshots of advertising claims, and a timeline. Cases fall apart when the evidence is thin or disorganized.
Deadlines That Apply
Every consumer protection claim has a deadline, and missing it ends the claim regardless of its strength.
FDCPA lawsuits must be filed within one year of the violation.7Federal Trade Commission. Fair Debt Collection Practices Act FCRA claims have a two-year window from the date you discovered the violation, or five years from when it occurred, whichever expires first. State UDAP statutes set their own deadlines, typically ranging from one to six years depending on the jurisdiction. Some states start the clock when the deceptive act occurs; others when you discovered, or should have discovered, the harm. Gathering evidence and consulting a lawyer takes time, so acting quickly matters even when the deadline seems distant.