When Does a Car Dealer Have to Send an Adverse Action Notice?

Here's the rule every desk manager should be able to recite: when a customer's completed credit application is denied and the deal doesn't get financed, somebody has to send that customer an adverse action notice within 30 days. The adverse action notice requirements come from two federal statutes working together, and the dealership that treats the notice as optional paperwork is carrying risk it doesn't need to carry.

Our work for Georgia motor vehicle dealers splits into before and after: stores that want the compliance process built correctly, and stores already holding a demand letter or agency inquiry because someone claims a notice never arrived. This article is written to serve either moment.

The two statutes behind the notice

The Equal Credit Opportunity Act (15 U.S.C. § 1691) and its implementing rule, Regulation B (12 C.F.R. § 1002.9), require a creditor to notify an applicant of the action taken within 30 days of receiving a completed credit application. "Adverse action" means refusing to grant credit in substantially the amount or on substantially the terms the applicant requested, unless you make a counteroffer the applicant accepts.

The Fair Credit Reporting Act adds the second layer. FCRA § 615 (15 U.S.C. § 1681m) says that whenever adverse action is based even in part on a consumer report, the notice must also identify the credit bureau, disclose the credit score used, and explain the customer's dispute rights. Because nearly every declined car deal involved a credit pull, in practice the two statutes travel together in one letter.

Neither statute cares whether you're a franchise store or a two-bay independent lot. If you regularly participate in credit decisions, you have ECOA obligations.

When the 30-day clock starts

The clock starts when you have a completed application: enough information to make the credit decision you'd normally make. From there, Regulation B gives you 30 days to communicate approval, a counteroffer, or adverse action.

Two situations at the edges trip dealers up.

The customer who never finishes the application. An incomplete application doesn't mean no obligation. Under 12 C.F.R. § 1002.9(c), within 30 days you must either send an adverse action notice or send a notice of incompleteness that tells the customer exactly what's missing, gives a reasonable deadline, and states that the application dies without a response. What you can't do is let a half-finished application sit in a drawer. A customer who affirmatively withdraws is different: withdrawal isn't adverse action, and no notice is required. Document the withdrawal.

The tire-kicker. A shopper asking "what rate could I get?" is an inquiry, not an application, and inquiries don't trigger notices. But the official commentary to Regulation B draws the line where dealers least expect it: the moment you evaluate the customer's information, decide you won't extend credit, and communicate that decision, the inquiry has become an application and the denial is adverse action. "We couldn't get you approved, sorry" said across the desk is a credit decision, not small talk.

Counteroffers and the 90-day rule

Approving the customer for different terms than they asked for, a smaller amount, a bigger down payment, a co-signer, is a counteroffer. If the customer accepts, the deal is done and no adverse action notice is required. If the customer doesn't accept, adverse action has occurred, and Regulation B gives you 90 days from the counteroffer notice to send the adverse action notice.

The clean way to handle this, blessed by the commentary, is a combined counteroffer and adverse action notice sent at the outset: it makes the counteroffer and simultaneously serves as the adverse action notice if the customer never takes it. Send the combined form and the 90-day follow-up problem disappears. One myth worth killing: the 90-day rule does not require you to hold the counteroffer open for 90 days. It's a notification deadline, not an option period.

The multi-lender problem: who sends the notice?

Here's the dealer-desk scenario that generates the most confusion. You submit the customer's application to five finance sources. All five decline. Who owes the customer a notice: each lender, you, or everyone?

Regulation B answers part of this directly. Under 12 C.F.R. § 1002.9(g), when an application goes to multiple creditors through a third party and the customer accepts credit from any one of them, nobody has to send an adverse action notice. That's why funded deals don't generate notice obligations even when four of five lenders said no.

When every lender declines, each declining creditor has its own notice duty. But the rule lets the notice be given by one of the creditors or by the dealer as the third party, in a single combined notice, so long as it names each creditor that denied the application. The commentary adds that a lender generally isn't liable for a defective third-party notice if it gave the dealer accurate, timely information and maintains reasonable procedures.

What the rule doesn't cleanly answer is the dealer's own status. A dealer who is named as the creditor on the retail installment contract, or who participates in setting the rate and terms, is usually a creditor under Regulation B in its own right, with its own notice duty, and the lenders' notices don't necessarily discharge it. Whether a particular deal structure puts your store inside or outside that definition is a genuinely unsettled question that lawyers argue about. The common compliance practice cuts through the argument: well-run dealerships send their own notice on every deal where the customer applied and didn't end up financed, without waiting to see what the lenders mail.

The notice costs a stamp. The lawsuit over the missing notice carries punitive exposure up to $10,000 per applicant before anyone discusses fees.

Spot delivery: the customer already drove home

Spot delivery, letting the customer take the vehicle before financing is final, is where notice obligations get missed most. The customer signed a contract contingent on lender approval, drove home, and a week later no lender will buy the paper.

Run it through the framework. The customer applied for credit on specific terms. Those terms are now unavailable. If you call the customer back to re-contract at a higher rate or bigger down payment, that's a counteroffer; if they sign, you're done, no notice needed. If they refuse, or if you unwind the deal entirely and take the vehicle back, the original application was denied and the adverse action notice is owed within 30 days. Regulators and plaintiffs' lawyers both read unwound spot deliveries this way, and an unwind that comes with no notice, on a deal where you pulled the customer's credit, is a ready-made FCRA and ECOA claim. Send the notice on every unwound spot deal. No exceptions.

In-house and BHPH financing: you are the creditor

If your store finances its own paper, buy here pay here or any in-house program, there's no analysis to do. You took the application, you made the credit decision, you are the creditor, full stop. Every declined applicant gets a notice from you within 30 days, and if you pulled a credit report or used a score, the notice carries the full FCRA § 615 contents. There is no lender upstream to share or confuse the obligation.

What a compliant notice contains

A notice that does its job under both statutes includes:

1. The action taken and your name and address (Regulation B).
2. The ECOA anti-discrimination statement and the federal agency that administers compliance for you (for most dealers, the FTC).
3. Either the specific principal reasons for the denial, or a statement that the customer can request the reasons within 60 days (Regulation B lets you choose; pick one and standardize).
4. The name, address, and toll-free number of each consumer reporting agency whose report factored in, plus the statement that the bureau didn't make the decision and can't explain it (FCRA § 615).
5. The customer's right to a free copy of the report within 60 days and to dispute its accuracy (FCRA § 615).
6. The credit score used, with its range, date, and the key factors that hurt it (FCRA, as amended by Dodd-Frank).

One accommodation worth knowing: a creditor that received 150 or fewer applications in the preceding calendar year may give its ECOA notifications orally under 12 C.F.R. § 1002.9(d). Small independents sometimes lean on this, but read the fine print before you do: the FCRA has no matching oral exception, and the credit score disclosure must be written or electronic. If a credit report touched the decision, and it almost always did, you're mailing something anyway.

A dealership process that actually works

The stores that never have an adverse action problem all run some version of the same process. Notices have one owner, the F&I manager or a named backup, because "everyone's responsibility" means nobody's. The trigger is a calendar rule, not a judgment call: every deal where a credit application was taken and the customer didn't end up financed gets a notice by a fixed day, well inside 30. That sweeps in denials, dead counteroffers, unwound spot deliveries, and abandoned applications resolved with an incompleteness notice. The trigger is "not funded," not "someone decided it was a denial." Template hygiene carries the rest: a current model form, a bureau list that matches the bureaus you actually pull, and a score disclosure block that matches what your DMS prints, because a stale template with the wrong bureau on it is its own violation. And keep a copy of each notice with proof of when it went out. When a claim surfaces two years later, the mailing log is the whole defense.

The penalties make the process worth the trouble. ECOA authorizes actual damages plus punitive damages up to $10,000 per applicant, and class exposure up to the lesser of $500,000 or 1% of net worth, with attorney's fees and a five-year limitations period (15 U.S.C. § 1691e). Willful FCRA violations carry statutory damages of $100 to $1,000 per violation plus punitive damages, and FCRA claims against dealers rarely arrive alone; we cover how those cases get built in our article on FCRA violations.

If a demand letter, an FTC or CFPB inquiry, or a plaintiff's suit over a missing notice has already landed, that's a defense matter and timing matters: talk to counsel before you respond. And if you'd rather find the gaps before someone else does, a $500 Strategy Session is a flat-fee hour built for exactly this kind of process review. Either way, the fix is the same boring machine: one owner, one trigger, one clean template, one log.