UDAAP stands for Unfair, Deceptive, or Abusive Acts or Practices — the federal consumer protection standard enforced by the CFPB under Sections 1031 and 1036 of the Dodd-Frank Act (12 U.S.C. §§ 5531, 5536) and by the FTC under Section 5 of the FTC Act (15 U.S.C. § 45). CFPB Bulletin 2013-07 established the examination framework. See consumerfinance.gov/compliance/supervision-examinations/udaap-examination-procedures for current examination procedures.
UDAAP is the cornerstone consumer protection framework applied to financial products and services offered by entities subject to CFPB jurisdiction. The Dodd-Frank Act granted the CFPB independent authority to prohibit UDAAP beyond the FTC Act's older UDAP standard, adding 'abusive' as a distinct category alongside 'unfair' and 'deceptive.' Three independent standards: *Unfair:* An act or practice is unfair if it: (1) causes or is likely to cause substantial injury to consumers; (2) the injury is not reasonably avoidable by consumers; and (3) the injury is not outweighed by countervailing benefits. Physical and economic harm both count. Psychological harm (distress, embarrassment) can also constitute injury in extreme cases. *Deceptive:* An act or practice is deceptive if it: (1) involves a material representation, omission, act, or practice; (2) that is misleading or likely to mislead a consumer acting reasonably under the circumstances; and (3) involves a material matter. 'Deceptive' is judged by overall impression on a reasonable consumer — legally accurate statements can still be deceptive if they create a false overall impression. CFPB Bulletin 2013-07 provides extensive examples. *Abusive:* Added by Dodd-Frank, 'abusive' covers acts that: (1) materially interfere with the ability of a consumer to understand a term or condition of a product; or (2) take unreasonable advantage of: (a) a consumer's lack of understanding, (b) a consumer's inability to protect their own interests in selecting a product, or (c) a consumer's reasonable reliance on the provider to act in their interest. Business lending implications: Although UDAAP's core jurisdiction is consumer protection (consumer financial products), the CFPB has extended scrutiny to small business lending practices — particularly MCA disclosure, prepayment mechanics, and factor-rate marketing — through its UDAAP supervisory authority. Several states have enacted parallel small business UDAAP statutes. The FTC's Safeguards Rule and parallel Section 5 authority also covers small business financial services. See consumerfinance.gov and ftc.gov for current enforcement actions.
'Unfair' requires showing substantial unavoidable harm. 'Deceptive' requires a material misleading impression — even technically accurate statements can be deceptive by overall impression. 'Abusive' (a Dodd-Frank addition) targets practices that take unreasonable advantage of consumer understanding gaps or reliance — it doesn't require deception or harm per se. The CFPB can bring enforcement action under any one of the three standards independently. See CFPB Bulletin 2013-07 and consumerfinance.gov/compliance/supervision-examinations/udaap-examination-procedures.
The CFPB's core UDAAP authority covers consumer financial products, but the agency has expanded supervision of small business lenders — particularly under the Section 1071 rulemaking and general UDAAP examination authority. The FTC's Section 5 UDAP standard applies to small business lending. Several states (California, New York, Utah, Virginia) have enacted mandatory small business lending disclosure laws that carry their own UDAP-style enforcement mechanisms. See ftc.gov and your state's CFDL for applicable standards.
Common red flags: (1) factor-rate pricing without APR-equivalent disclosure; (2) add-on products (insurance, maintenance programs) auto-enrolled without clear consent; (3) confessed judgment clauses in contracts that waive due-process rights; (4) prepayment penalties not prominently disclosed; (5) misleading 'guaranteed approval' or speed claims. If a lender's offer appears too good or their disclosures are unclear, consult the CFPB complaint portal at consumerfinance.gov/complaint before signing.