CFPB Debt Collection Rules: Regulation F Explained

Regulation F, codified at 12 C.F.R. Part 1006, is the Consumer Financial Protection Bureau's implementing rule for the Fair Debt Collection Practices Act (FDCPA). Finalized in two parts in October 2020 and December 2020, the rule became effective November 30, 2021, and represents the first comprehensive federal rulemaking under the FDCPA since Congress enacted the statute in 1977. This page explains Regulation F's definition, structure, key provisions, classification rules, and the tensions it creates across the debt collection industry.

• Definition and Scope
• Core Mechanics or Structure
• Causal Relationships or Drivers
• Classification Boundaries
• Tradeoffs and Tensions
• Common Misconceptions
• Checklist or Steps (Non-Advisory)
• Reference Table or Matrix

Definition and Scope

Regulation F, issued by the Consumer Financial Protection Bureau (CFPB) under its authority granted in Title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act, operationalizes the Fair Debt Collection Practices Act by establishing specific behavioral rules, safe harbors, and disclosure requirements that the FDCPA's broad statutory language left undefined for over four decades.

The rule applies to "debt collectors" as defined in 15 U.S.C. § 1692a(6) — entities that regularly collect debts owed to another party. This definition excludes original creditors collecting their own debts, though some state laws impose parallel requirements on original creditors. Regulation F does not alter the FDCPA's scope; instead it fills procedural and technological gaps that Congress could not have anticipated in 1977, including the existence of email, text messaging, and social media as contact channels.

The scope of consumer debt covered includes credit card debt, medical obligations, mortgages, auto loans, student loans, and utility accounts — any obligation arising from a transaction primarily for personal, family, or household purposes (CFPB, Regulation F Final Rule, 85 FR 76734). Commercial debt is explicitly excluded from FDCPA and Regulation F coverage, a distinction explored in commercial debt collection.

Core Mechanics or Structure

Regulation F is structured around four operational clusters: communication rules, disclosure requirements, prohibitions, and record-keeping expectations.

Communication Rules. The rule introduces a "call frequency" safe harbor under 12 C.F.R. § 1006.14(b)(2): a debt collector who places no more than 7 telephone calls within 7 consecutive days to a consumer regarding a specific debt, and does not call within 7 days after a live telephone conversation, is presumed compliant with the prohibition on harassing conduct. Exceeding that threshold does not create automatic liability but shifts the compliance burden to the collector.

Electronic communications receive formal treatment for the first time at the federal level. Debt collectors may use email and text messages to contact consumers under electronic communications rules, provided they follow opt-out procedures and do not communicate at email addresses or phone numbers they know belong to an employer.

Disclosure Requirements. Regulation F mandates a "validation notice" — a standardized disclosure collectors must send within 5 days of initial contact. The CFPB published a model validation notice (Form B-3 in Appendix B to Part 1006) that, when used accurately, provides a safe harbor from validation-notice liability. The notice must include the debt amount, the creditor's name, a statement of the consumer's right to dispute the debt within 30 days, and itemization of the debt's components.

Prohibitions. The rule codifies and expands prohibitions on debt collection harassment, including explicit restrictions on communicating with consumers via social media in a way that is publicly visible to third parties.

Record-Keeping. While Regulation F does not specify a uniform retention period, the CFPB's examination procedures under the Supervision and Examination Manual reference a general expectation of retaining records sufficient to demonstrate compliance.

Causal Relationships or Drivers

Three structural forces drove the CFPB to issue Regulation F after years of proposal, comment, and revision.

Volume of FDCPA complaints. Debt collection has ranked among the top complaint categories received by the CFPB since the Bureau began collecting complaint data. The FDCPA's 1977 text provided no specific limits on call frequency, no rules for digital communications, and no standardized validation notice format — gaps that generated substantial litigation and inconsistent judicial outcomes across federal circuits.

Circuit split on electronic communications. Before Regulation F, courts in different circuits disagreed on whether a voicemail message constituted a "communication" under the FDCPA, whether emailing a consumer violated third-party disclosure prohibitions, and what constituted permissible contact via social media. The CFPB used the rulemaking to resolve these splits with uniform federal rules.

Debt portfolio complexity. The growth of debt portfolio purchasing and third-party collection creates layered compliance chains — original creditors, debt buyers, and collection agencies may all touch the same account. Regulation F clarifies obligations at each stage by tying requirements to the entity acting as a debt collector at the time of contact, regardless of the debt's ownership history.

Classification Boundaries

Regulation F establishes several classification distinctions that determine which rules apply.

First-Party vs. Third-Party Collectors. Regulation F applies only to third-party debt collectors, not original creditors. This boundary is explored in depth at types of debt collectors and debt buyer vs. debt collector. A debt buyer who purchased a charged-off account is treated as a debt collector, not a creditor, for FDCPA and Regulation F purposes.

Meaningful Attorney Involvement. Attorneys who regularly collect debts on behalf of clients fall within the FDCPA's definition of "debt collector." Regulation F does not create a separate safe harbor for attorney-sent collection letters, meaning attorney collectors must comply with the same validation notice and communication restrictions.

Limited-Content Messages. Regulation F creates a new category — the "limited-content message" — for voicemails that include only a business name that does not indicate the caller is a debt collector, a request to call back, and contact information. These messages are not treated as "communications" under the FDCPA, meaning leaving one does not trigger the third-party disclosure prohibition or count as a communication requiring the mini-Miranda warning. Details on mini-Miranda warnings address how this interacts with live calls.

Concurrent Debt Rule. The 7-in-7 call frequency safe harbor applies per debt, not per consumer. A collector calling a consumer about 3 separate debts could theoretically place up to 21 calls in 7 days and still qualify for the safe harbor on each — a limitation that consumer advocates have criticized.

Tradeoffs and Tensions

Regulation F reflects deliberate policy compromises, and several provisions remain contested.

Safe Harbor vs. Consumer Protection. The 7-in-7 telephone call safe harbor was criticized during the comment period by consumer advocacy organizations who argued it permits excessive contact. The CFPB's position was that providing a bright-line safe harbor would reduce litigation uncertainty; critics argued it effectively authorizes more frequent calls than many consumers experienced before the rule (National Consumer Law Center, NCLC).

Email and Text Opt-Out Burden. Regulation F allows collectors to send electronic communications unless the consumer opts out, placing the burden on the consumer to act. Critics note that some consumers receiving unexpected collection emails may not recognize them or may not understand the opt-out mechanism before multiple messages are sent.

Debt Itemization vs. Simplicity. The validation notice's required itemization of interest, fees, payments, and credits since a "referenced date" improves transparency but can create confusion when account histories are complex or when debt has been resold through multiple buyers with incomplete records. Collectors who cannot produce accurate itemization face liability even when using the model form if they complete it inaccurately.

Preemption Questions. Regulation F does not preempt state debt collection laws that provide greater consumer protections. States including California, New York, and Colorado have enacted rules more restrictive than Regulation F — creating a dual-compliance burden for national collectors who must simultaneously track federal and state requirements.

Common Misconceptions

Misconception: Regulation F replaced the FDCPA.
Regulation F implements the FDCPA but does not replace it. The FDCPA remains the governing statute; Regulation F provides interpretive rules and safe harbors. Private rights of action still run under 15 U.S.C. § 1692k, not under Regulation F itself.

Misconception: The model validation notice is mandatory.
Use of the CFPB's model form is voluntary. Collectors may draft their own validation notices, but only the model form (properly completed) triggers the safe harbor from validation-notice liability (12 C.F.R. § 1006.34(d)(2)).

Misconception: The 7-in-7 rule is a hard cap.
The 7-in-7 threshold is a safe harbor, not a ceiling. Collectors who exceed it do not automatically violate the FDCPA but lose the presumption of compliance and face heightened litigation risk.

Misconception: Regulation F applies to original creditors.
Original creditors — banks, hospitals, utility companies collecting their own debts — are not covered by the FDCPA or Regulation F. Some consumers disputing a debt collection are surprised to learn their dispute rights under Regulation F do not apply to accounts still held by the original creditor.

Misconception: A debt in dispute cannot be reported to credit bureaus.
Disputing a debt under Regulation F's 30-day window does not prohibit credit reporting. It requires the collector to cease collection efforts until it obtains and mails verification of the debt. Credit reporting by a debt buyer during a dispute may implicate separate FCRA obligations but is not categorically barred by Regulation F.

Checklist or Steps (Non-Advisory)

The following sequence reflects the operational phases of Regulation F compliance as structured by 12 C.F.R. Part 1006. This is a descriptive reference, not legal guidance.

Phase 1 — Initial Contact and Validation Notice
- [ ] Determine whether the entity qualifies as a "debt collector" under 15 U.S.C. § 1692a(6)
- [ ] Confirm the debt is consumer-purpose (personal, family, or household)
- [ ] Send validation notice within 5 days of initial contact (12 C.F.R. § 1006.34)
- [ ] Include all required itemization fields: principal, interest, fees, payments, credits since referenced date
- [ ] Determine whether to use CFPB model form (Form B-3) for safe harbor protection

Phase 2 — Ongoing Communications
- [ ] Track call frequency per debt: no more than 7 calls in 7 consecutive days to the same consumer about the same debt
- [ ] Observe 7-day waiting period after a live conversation before calling again about that debt
- [ ] Apply call time restrictions: no calls before 8 a.m. or after 9 p.m. consumer's local time
- [ ] Obtain opt-in or confirm permissibility before sending email or text; provide clear opt-out mechanism
- [ ] For voicemails, determine whether to use "limited-content message" format to avoid triggering communication requirements

Phase 3 — Dispute and Verification Handling
- [ ] Upon written dispute within 30 days of validation notice, cease collection until verification is obtained and mailed
- [ ] Distinguish between FDCPA dispute rights and FCRA credit reporting dispute rights — different timelines and obligations apply
- [ ] Document dispute receipt date and verification response date

Phase 4 — Prohibited Conduct Review
- [ ] Confirm no publicly visible social media messages to consumer
- [ ] Confirm no contact at employer if collector knows employer prohibits such contact
- [ ] Confirm cease and desist procedures are in place upon written request

Reference Table or Matrix

References

• Consumer Financial Protection Bureau — Regulation F Final Rule (85 FR 76734, November 30, 2020)
• Consumer Financial Protection Bureau — Regulation F Final Rule Part II (86 FR 5766, January 19, 2021)
• Electronic Code of Federal Regulations — 12 C.F.R. Part 1006 (Regulation F)
• Fair Debt Collection Practices Act — 15 U.S.C. §§ 1692–1692p
• Consumer Financial Protection Bureau — CFPB Supervision and Examination Manual, Debt Collection
• National Consumer Law Center (NCLC) — Regulation F Commentary
• Dodd-Frank Wall Street Reform and Consumer Protection Act, Title X — 12 U.S.C. § 5481 et seq.