Alston & Bird Consumer Finance Blog

New York Law

UDAAP Update: New York’s FAIR Act Signed Into Law

By

What Happened?

On December 19, 2025, New York Governor Kathy Hochul signed into law Senate Bill 8416, the Fostering Affordability and Integrity through Reasonable (FAIR) Business Practices Act, (the “FAIR Act”), which updates Section 349 of New York’s General Business Law (GBL). In our prior post we explained that following the law’s passage by the legislature, the FAIR Act expands the state’s consumer protection statute beyond just deceptive practices to also prohibit “unfair” and “abusive” business acts or practices, marking a major broadening of the New York Attorney General’s enforcement powers. Notably, the final law clarifies that only the Attorney General (“NYAG”) can bring claims for unfair or abusive practices, while private lawsuits remain limited to deceptive acts. The FAIR Act will take effect 60 days after signing, on February 17, 2026.

Why Does It Matter?

The FAIR Act represents a sweeping update to New York’s consumer protection law. Previously, New York law only prohibited deceptive acts and practices. The FAIR Act amends Section 349 of the GBL to also prohibit “unfair” and “abusive” acts or practices in the conduct of any business, trade, or commerce. In practical terms, this aligns New York with the consumer protection laws of almost every other state (47 of which already outlaw unfair practices) and with federal UDAAP standards. Key elements of the new law include:

Expanded Definitions

The statute now defines an “unfair” act as one that “causes or is likely to cause substantial injury” to consumers which is not reasonably avoidable and not outweighed by countervailing benefits. This definition is modeled on the Federal Trade Commission’s standard (15 U.S.C. § 45(n)). An “abusive” act is defined in line with the federal Consumer Financial Protection Act standard (12 U.S.C. § 5531(d)), i.e., something that materially interferes with a person’s understanding of a product or takes unreasonable advantage of someone’s lack of understanding or inability to protect their interests. These broad definitions mean practices that might not be outright deceptive could still be illegal if they unjustifiably harm consumers or exploit imbalances in knowledge or power.

Attorney General Enforcement & Private Rights

Importantly, the law limits enforcement of the new “unfair” and “abusive” provisions to the NYAG. Private plaintiffs can continue to sue under Section 349 only for “deceptive” acts, just as before – there is no new private right of action for unfair or abusive practices. This was a critical concession to avoid opening floodgates of litigation. However, the AG can now bring enforcement actions against businesses for unfair or abusive conduct, seeking injunctions, restitution, and civil penalties. We can expect the NYAG (which has been actively advocating for this law) to launch investigations and actions under the expanded provisions once the law is effective.

“Consumer-Oriented” Standard Preserved (for Now)

A contentious aspect of the FAIR Act was whether it would eliminate the judicially-created requirement that Section 349 cases be “consumer-oriented” (i.e. directed at the public at large, not private contract disputes). The version initially passed by the legislature removed the consumer-oriented limitation entirely, which would have meant the AG (and possibly private plaintiffs) could pursue claims even for one-off transactions or business-to-business dealings. However, in approving the law, Governor Hochul noted an agreement with legislators to ensure the act “does not override” existing case law on the consumer-oriented standard. In effect, this signals that commercial transactions and purely private disputes will not suddenly all become actionable under Section 349. The statute text still says an act can be unlawful “regardless of whether or not it is consumer-oriented” in an AG enforcement, but this may be revisited by a chapter amendment. For now, compliance should assume that private lawsuits still require a consumer-facing element (as before), while the NYAG might test the boundaries of targeting misconduct affecting small businesses or other non-consumer victims in the public interest.

What Do You Need to Do?

For banks, lenders, and other financial services companies operating in New York, the FAIR Act demands a thorough compliance review beyond the traditional focus on deception/fraud. Even though private litigation risk remains mostly unchanged (as it remains limited to deception claims), the NYAG can now act as a mini-CFPB, bringing the full range of UDAAP claims at the state level. Financial services companies must proactively ensure their products and practices meet these standards and should stay aware of any further regulatory guidance issued by the NYAG.

Expansion of New York’s Community Reinvestment Act Via New Regulation

By ,

Last week, the New York State Department of Financial Services (DFS) announced a new regulation designed to ensure that licensed nonbank mortgage bankers in New York (“mortgage lenders”) meet the needs of the communities they serve in the state, particularly low- and moderate-income (LMI) neighborhoods and borrowers. Under New York law, “low-income” means income that is less than 50% of the area median income, in the case of an individual, or a median family income that is less than 50% of the area median income, in the case of a geography. Further, “moderate-income” means income that is at least 50% and less than 80% of the area median income, in the case of an individual, or a median family income that is at least 50% and less than 80% of the area median income, in the case of a geography.

By way of background, in November 2021, New York amended the state’s Community Reinvestment Act (CRA), which at the time mirrored the federal Community Reinvestment Act, to expand coverage to New York state-licensed mortgage bankers. This made New York the third state (after Illinois and Massachusetts) to pursue such action.

The new regulation, effective July 7, 2026, takes things further by imposing following parameters and requirements on mortgage lenders as set forth below.

Origination Threshold

Non-depository mortgage bankers that have made at least 200 HMDA-reportable originations in the preceding year are subject to performance evaluation under the new regulation and will receive a rating of Outstanding, Satisfactory, Needs Improvement, or Substantial noncompliance.

No Branches, No Problem

A mortgage banker with one or more branches within the state must delineate one or more branch-based assessment areas for evaluating performance. However, “branchless” lenders will be evaluated based on where they do a substantial portion of their business. Specifically, the lender must delineate a lending-based assessment area in each MSA or nonmetropolitan area in which it originated, in each of the two preceding calendar years, at least 100 mortgage loans outside of any branch-based assessment areas.

Performance Tests

The regulation imposes a lending test and service test on non-bank mortgage lenders, to arrive at a performance rating. Notably, the DFS, when reviewing a mortgage lender’s change of control, branch, or other application, will consider the mortgage lender’s record of CRA performance.

  • Lending test. The lending test assesses how well mortgage bankers serve all borrowers and neighborhoods within their assessment areas, particularly LMI communities. The lending test considers the geographic distribution of loans in LMI tracts and to LMI borrowers. In addition, the lending test considers the lender’s innovative and flexible lending practices, carried out safely and soundly, to meet the needs of these communities.
  • Service test. The service test evaluates whether mortgage lenders offer programs and services that promote community development. Unlike banks, however, mortgage bankers will not be required to make community development investments or grants, recognizing the differences in how these institutions operate. Nevertheless, mortgage lenders will be evaluated on the extent and innovativeness of their community development services, qualified investments, community outreach, marketing, and educational programs; each of which are defined terms under the regulation.

Discrimination and Other Illegal Credit Practices

The evaluation of a mortgage banker’s performance in meeting the credit needs of the community is adversely affected by evidence of discriminatory or other illegal credit practices in any geography by the mortgage lender, including violations of (1) Section 5 of the FTC Act, (2) Section 8 of RESPA, (3) TILA’s right of rescission, (4) HOEPA or New York’s high cost lending law, or (5) ECOA, Fair Housing Act or section 296-a of New York Executive Law.

Given the above, New York-licensed mortgage lenders should prepare for these CRA obligations by conducting preliminary analysis of their lending in LMI census tracts and to LMI borrowers, to ensure that both marketing efforts and loan product offerings are meeting the needs of these communities. While federal redlining enforcement may currently be deprioritized, state-level CRA inquiries and investigations are likely to ramp up. Alston & Bird is able to assist mortgage lenders with proactive efforts to ensure compliance with New York’s CRA law.