HB 1652 revises the Consumer Financial Protection Act to constrain how the Bureau of Consumer Financial Protection (CFPB) defines and enforces unfair, deceptive, or abusive acts or practices (UDAAP). The bill directs multiple rulemakings (including a definition of “abusive” and procedures for applying mitigating factors), requires cost–benefit analyses for final UDAAP rules, and inserts procedural limits on the Bureau’s ability to obtain monetary penalties.
Practically, the bill forces the CFPB to give covered entities formal notice and a 180-day cure window for self-identified UDAAP issues, restricts where UDAAP enforcement suits may be filed, and precludes the Bureau from treating discrimination as a UDAAP violation. These changes tighten enforcement levers and add compliance pathways that will matter to banks, fintechs, enforcement counsel, and risk teams.
At a Glance
What It Does
Requires the CFPB to issue rulemakings defining ‘abusive’ conduct and establishing civil-penalty mitigating procedures within 180 days; mandates cost–benefit analysis for UDAAP rules; bars the CFPB from treating discriminatory practices as UDAAP; and limits UDAAP enforcement venue to a defendant’s headquarters or D.C. The bill also creates a written notice-and-opportunity-to-cure process (90-day notice obligation followed by a 180-day cure window) and limits civil money penalties to conduct occurring after the most recent consumer compliance rating.
Who It Affects
Banks, credit unions, and fintechs that offer consumer financial products or services; compliance, legal, and risk teams responsible for CFPB interactions; defense counsel and trade associations; and the CFPB’s rulewriting, supervision, and enforcement units. Consumer advocates and plaintiffs’ lawyers will also be affected by venue and pleading restrictions.
Why It Matters
The bill replaces broad statutory ambiguity with specific procedural guardrails—deadlines, definitions, and litigation limits—that narrow the Bureau’s enforcement tools. That changes how regulated entities prioritize compliance, how counsel defends against UDAAP actions, and how the CFPB builds enforcement cases and rulemakings.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
HB 1652 compels the CFPB to convert long-standing UDAAP concepts into defined, administrable rules and to attach procedural constraints to enforcement. It forces the Bureau to adopt a definition of “abusive” within 180 days and to issue a separate rule setting out how mitigating factors affect civil monetary penalty (CMP) calculations.
Any final CFPB rule addressing unfair, deceptive, or abusive practices must include a cost–benefit analysis. The cumulative effect is to replace reliance on common-law style enforcement with rule-based standards the Bureau must justify analytically.
On enforcement mechanics, the bill limits where the Bureau can sue (defendant’s headquarters district or D.C.), requires heightened pleading particularity in UDAAP complaints, and prevents the Bureau from pleading an act as unfair/deceptive and abusive in the alternative. It also bars the Bureau from treating discriminatory practices as UDAAP violations, pushing discrimination claims into separate statutory or regulatory channels.
For monetary relief, the bill bars the CFPB from recovering CMPs if the defendant proves by a preponderance that it made a good-faith effort to comply, while preserving the Bureau’s ability to seek equitable remedies for identifiable consumer injuries.The bill adds a notice-and-cure regime: when a covered person self-identifies potential UDAAP conduct, the CFPB must deliver a written notice-type communication within 90 days and then allow the entity 180 days to cure before pursuing further action; tolling rules are tied to cure or explicit refusal. Finally, HB 1652 caps the Bureau’s ability to seek CMPs for conduct predating the most recent consumer compliance rating, although equitable relief remains available for older conduct.
Collectively, these provisions reframe CFPB enforcement into a more procedural, time- and venue-limited exercise with new defenses for regulated entities.
The Five Things You Need to Know
The CFPB must issue a rule defining “abusive act or practice” within 180 days of enactment.
Any final UDAAP rule must include a cost–benefit analysis.
The Bureau cannot recover civil monetary penalties for conduct that occurred before the defendant’s most recent consumer compliance rating.
The CFPB must give a covered person a written notice within 90 days and a 180-day cure window when the person self-identifies potential UDAAP conduct; tolling ends only when cured, refused, or the cure period expires.
UDAAP enforcement suits must be filed either in the district where the covered person’s headquarters is located or in the U.S. District Court for the District of Columbia, and the Bureau must plead alleged violations with particularity and may not plead unfair/deceptive and abusive claims in the alternative.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Rulemaking on CMP mitigating factors
The bill adds a mandatory rulemaking requirement: within 180 days the Bureau must adopt policies and procedures on how mitigating factors described in the statute will affect the imposition of civil monetary penalties. Practically, supervised entities can expect an enumerated framework for penalty reductions or offsets rather than ad hoc agency decisions; enforcement teams must justify penalty calculations against those procedures once finalized.
UDAAP rulemaking: authority, cost–benefit test, and definition deadline
This provision preserves the Bureau’s authority to issue UDAAP rules but conditions it. Final UDAAP rules must carry a cost–benefit analysis, and the CFPB must define “abusive act or practice” within 180 days. That shifts substantive determinations from case-by-case enforcement to rulemaking subject to economic justification, inviting detailed administrative-record development and likely stronger judicial review on adequacy-of-analysis grounds.
Prohibits interpreting UDAAP to encompass discrimination
The bill bars the CFPB from construing its UDAAP authority to include discriminatory practices. Enforcement and rulewriting teams cannot restyle discrimination claims as UDAAP violations; instead, any regulatory or enforcement action alleging discrimination must rely on other statutes or authorities. This creates a clear statutory firewall between UDAAP enforcement and civil-rights–style discrimination claims.
New abusive standard and good‑faith bar to monetary relief
HB 1652 narrows ‘abusive’ to acts that either intentionally and materially interfere with consumer understanding, or unreasonably take advantage of consumer lack of understanding and reasonable reliance. It separately requires the Bureau to prove a lack of good-faith compliance by preponderance before seeking monetary relief; if the covered person demonstrates good-faith efforts, CMPs are off the table though the Bureau can still seek equitable relief for identifiable injuries. The dual changes raise the evidentiary and legal hurdles for monetary penalties.
Written notice and 180-day cure window with defined tolling rules
When an entity self-identifies potential UDAAP conduct, the CFPB must issue a notice-type communication within 90 days and give the entity 180 days to cure before pursuing other legal action. Tolling of statutes of limitation tied to that notice stops only when the entity cures and informs the Bureau, refuses to cure, or the cure period expires. This creates a predictable compliance pathway but also a tactical pause that regulated entities can use to remediate exposures.
Venue, pleading particularity, and mutually exclusive claims
The bill requires UDAAP enforcement actions to be filed either where the defendant’s headquarters sits or in D.C. It mandates that the Bureau plead alleged violations with particularity and prohibits alternative pleading between unfair/deceptive and abusive theories. Those changes constrain forum shopping and streamline case theory but raise the burden on the CFPB to select and substantiate a single legal theory up front.
Look‑back limitation for civil money penalties tied to compliance ratings
The Bureau cannot seek CMPs for conduct occurring before the most recent consumer compliance rating assignment, though it can still pursue other equitable remedies for older conduct. The practical effect is a rolling limitation tied to the Bureau’s supervisory rhythm; it incentivizes entities to obtain or update compliance ratings and pushes the Bureau to coordinate examination timing with enforcement strategy.
This bill is one of many.
Codify tracks hundreds of bills on Finance across all five countries.
Explore Finance in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Banks and credit unions: A narrower statutory definition of “abusive,” a good‑faith bar to monetary penalties, and a 180‑day cure window reduce immediate monetary exposure and give institutions predictable remediation paths.
- Fintech firms and alternative lenders: Clearer rulemaking deadlines and required cost–benefit analyses can limit retroactive enforcement based on broad interpretations and force the CFPB to justify new rules analytically, which benefits firms facing novel compliance questions.
- Regulatory compliance teams and in‑house counsel: Defined rules, formal cure procedures, and venue certainty let compliance programs prioritize remediation, run cost–benefit models, and reduce uncertainty when advising boards and executives.
- Supervisory-rated entities: Tying CMP exposure to the most recent consumer compliance rating protects organizations with recent favorable reviews from old, stale penalty exposure and rewards timely compliance assessments.
Who Bears the Cost
- Consumers and consumer advocates: Narrowed UDAAP reach, an explicit bar on treating discrimination as a UDAAP violation, and added procedural defenses may reduce the Bureau’s ability to obtain monetary relief and slow redress for systemic harms.
- CFPB enforcement and rulemaking teams: New deadlines, cost–benefit mandates, and procedural constraints raise the administrative burden of rulemaking and require more detailed recordkeeping and economic analysis.
- Small financial firms without robust compliance programs: Although the cure window offers remediation time, smaller firms may lack capacity to document good‑faith efforts and to engage in the rule comment processes necessary to shape final definitions and procedures.
- Plaintiffs’ attorneys and state enforcers: Venue limits and pleading particularity restrict forum options and may make it harder to bring or coordinate parallel actions that rely on broader UDAAP interpretations.
Key Issues
The Core Tension
The central dilemma is reconciling regulatory clarity and due process for regulated entities with the need for flexible, effective consumer protection: tighter definitions, cure periods, and procedural hurdles reduce enforcement uncertainty for firms but also limit the Bureau’s ability to respond to evolving market practices and to secure monetary relief for consumers harmed by opaque or discriminatory conduct.
The bill trades discretionary enforcement flexibility for procedural clarity. Requiring a binding definition of “abusive,” cost–benefit analyses for rules, and mandatory mitigation procedures gives regulated entities clearer compliance targets but narrows the Bureau’s ability to adapt UDAAP to novel practices.
The good‑faith preponderance defense and the cure window shift the balance toward remediation and away from immediate monetary deterrence; however, these protections depend on how courts interpret “good‑faith” and assess documentation of compliance efforts.
Operationally, the look‑back limitation linked to the ‘most recent consumer compliance rating’ creates new incentives and potential gaps: firms will want frequent, favorable ratings to immunize past conduct, while the Bureau might accelerate examinations or manipulate rating timing to preserve enforcement options. The bar on treating discrimination as a UDAAP issue raises separation questions between consumer financial protection and civil‑rights enforcement, potentially leaving some harms to be remedied only through other, possibly less tailored, statutory avenues.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.