Debt Collection Compliance Checklist

Navigate state-by-state requirements to ensure your B2B debt recovery meets all federal and state standards

Why Compliance Matters

Navigating debt collection regulations is complex. Federal laws like the FDCPA, state-specific statutes like California's Rosenthal Act, and evolving compliance standards create significant legal exposure for creditors who fail to maintain proper procedures. Non-compliance can result in:

This checklist provides a comprehensive framework to ensure your pre-collection activities, communication practices, documentation procedures, and state-specific compliance measures meet all applicable legal standards. Use this as your roadmap to compliant, attorney-supervised debt recovery.

0 of 0 items checked 0%

Pre-Collection Requirements

Essential steps before initiating any collection activity

Verify state licensing requirements
Confirm whether your jurisdiction requires debt collection licensing and obtain necessary state licenses
Obtain fidelity bond if required
Purchase surety bond in amounts specified by state law (typically $10,000-$50,000)
Register with state attorney general's office
Complete registration requirements as debt collector under state debt collection licensing rules
Maintain comprehensive insurance coverage
Obtain errors and omissions, general liability, and cyber liability insurance appropriate for debt collection operations
Execute written service agreements with clients
Establish clear written agreements defining scope of services, fees, compliance obligations, and dispute resolution procedures
Establish debtor identification procedures
Implement protocols to verify debtor identity and confirm account information before initiating contact
Develop cease-and-desist acknowledgment procedures
Create systems to process and document cease-and-desist requests and ensure immediate compliance
Prepare initial debt validation notices
Draft compliant validation notices meeting FDCPA and state-specific requirements; include all required disclosures
Establish attorney supervision protocols
Implement oversight procedures ensuring licensed attorney reviews collection activities and maintains compliance

Communication Rules

Permissible contact methods, frequency, and content standards

Comply with calling hour restrictions
FDCPA prohibits calls before 8am or after 9pm debtor's local time; many states impose stricter limits
Implement contact frequency limits
Document policy limiting contact frequency to avoid harassment; no more than reasonable attempts to collect
Send written validation notice within 5 days
Provide debt validation notice upon initial contact; include creditor name, amount, and dispute rights
Establish language accessibility procedures
Provide notices and disclosures in debtor's primary language; maintain interpretation services for limited English speakers
Obtain recording consent where required
In two-party consent jurisdictions, obtain written or verbal consent before recording calls; document consent in file
Limit third-party debt disclosure
FDCPA prohibits revealing debt details to third parties except attorney, creditor, or credit reporting agency
Comply with workplace contact restrictions
Avoid contacting debtor at workplace if employer prohibits it; obtain employment verification first
Honor cease-and-desist communications immediately
Upon receipt of cease-and-desist letter, stop all contact except debt validation notice or legal action notice
Avoid deceptive or false statements
Never misrepresent identity, debt amount, legal status, or consequences of non-payment

Documentation Requirements

Record retention and proof of debt standards

Maintain 7-year record retention policy
Store all collection records, communications, and documentation for minimum of 7 years or as required by state law
Verify proof of debt documentation
Maintain original invoice, contract, or account statements proving debtor obligation and amount
Document account assignment or purchase
Maintain chain of title documentation if purchasing debt; verify assignment authority and right to collect
Create comprehensive call logs
Document all contact attempts with dates, times, methods, parties contacted, and conversation summaries
Maintain correspondence records
Archive all letters, emails, and written communications with dates sent, content, and debtor responses
Document payment history and credits
Maintain accurate payment records showing all credits applied, dates received, and outstanding balance calculations
File dispute and cease-and-desist notices
Archive all dispute requests, cease-and-desist letters, and validation requests with acknowledgment of receipt
Maintain attorney correspondence and advice
Document all compliance reviews, legal opinions, and oversight activities by supervising attorney

State Compliance Matrix

Review requirements by state. Use the search below to filter by state name.

State License Required Bond Required Mini-FDCPA Key Statute Notable Requirements

California-Specific Compliance

As a California-based platform, Legal Collects ensures all operations comply with stringent California debt collection standards.

Rosenthal Fair Debt Collection Practices Act (Cal. Civil Code § 1788 et seq.)
California's primary debt collection statute, modeled after but stricter than the FDCPA. Applies to third-party debt collectors and requires compliance with federal FDCPA standards plus California-specific provisions including ban on collecting expired debts, restrictions on collection agency activity, and strict validation requirements.
California Consumer Financial Privacy Law (CCFPL)
Requires notice to consumers regarding collection of personal financial information. Debt collectors must provide privacy notices in writing before or at the time of collection. Must comply with data security requirements and limitations on use of personal information.
Revised Fair Debt Collection Practices Act (Cal. Code Civ. Proc. § 683.010 et seq.)
Addresses post-judgment collection procedures. Includes exemptions for certain debts, restrictions on collection from exempt property, and requirements for establishing judgment debtor examination procedures.
California Collection Agency Licensing (Cal. Code Civ. Proc. § 6005 et seq.)
Requires licensing for debt collection agencies operating in California. Requires $25,000 surety bond, background checks, compliance with state regulations, and regulatory oversight by California Department of Consumer Affairs.
Statute of Limitations Restrictions (Cal. Code Civ. Proc. § 337.1)
California law limits collection of open account debts to 4 years (vs. 6-10 years in many states). Collection agencies cannot enforce debts beyond the statute of limitations and must disclose time-barred status in written communications.

Federal Compliance Standards

Requirements applicable to all debt collection operations nationwide

Comply with Fair Debt Collection Practices Act (FDCPA)
Foundational federal statute prohibiting abusive, unfair, and deceptive collection practices. Covers debt validation, communication restrictions, third-party contact limits, and false representations.
Adhere to Telephone Consumer Protection Act (TCPA)
Regulates telemarketing and debt collection calls. Requires Do Not Call compliance, autodial restrictions, consent requirements, and limitations on calling cells vs. landlines
Follow Fair Credit Reporting Act (FCRA) requirements
Ensures accuracy of credit reporting related to debt collection. Requires proper dispute procedures, accuracy of reported information, and limitations on negative reporting of disputed debts
Comply with CFPB debt collection rules
Consumer Financial Protection Bureau enforcement authority over FDCPA violations. Includes requirements for debt validation communications and prohibits common unfair practices
Maintain military consumer protections
Service members Civil Relief Act (SCRA) provides protections for active-duty service members. Verify active duty status before collection; lower interest rate caps and enforcement restrictions apply
Respect bankruptcy stay requirements
Cease all collection activities immediately upon notice of bankruptcy filing. FDCPA Section 803 prohibits collection activity in violation of automatic stay
Comply with ADA and language accessibility
Americans with Disabilities Act requires effective communication with debtors with disabilities. Provide written materials in accessible formats and interpretation services
Maintain data privacy and security standards
GLBA and state privacy laws require protection of personal financial information. Implement data security, encryption, breach notification procedures, and consumer privacy disclosures
Document FDCPA compliance training
Conduct regular compliance training for all staff; maintain documentation of training completion and competency assessments

Frequently Asked Questions

What is the difference between federal FDCPA and state mini-FDCPAs?

The federal Fair Debt Collection Practices Act (FDCPA) sets a baseline floor of protections applicable nationwide. Many states have enacted "mini-FDCPA" statutes that provide equal or greater consumer protections. For example, California's Rosenthal Act is stricter than the FDCPA in several areas. When both apply, the more protective standard controls. Always research your state's specific requirements, as many provide greater protections than federal law.

Do I need a license to collect B2B debts?

Licensing requirements vary by state and sometimes by the type of debt being collected. Many states require debt collection licensing for third-party collectors (those collecting on behalf of others). However, some states exempt in-house collection operations or provide specific exemptions for certain debt types. California, for example, requires licensing with a $25,000 surety bond. Always verify your state's specific requirements before commencing collection activities, as operating without required licensing can result in fines and enforcement actions.

What must a debt validation notice include?

Under the FDCPA, the initial debt validation notice must include: the amount of the debt, the name of the creditor, a statement that the debtor has 30 days to dispute the debt, a statement that if the debt is not disputed it will be assumed valid, a statement explaining how to dispute, and a statement that if the debtor requests, the collector will provide proof of the debt. State law may require additional information such as debtor rights, dispute procedures, language accommodations, or specific disclosures. Always use compliant validation notice templates reviewed by legal counsel.

When can I legally call a debtor?

The FDCPA limits calls to between 8 AM and 9 PM in the debtor's local time zone. Many states impose stricter calling hour restrictions (some as early as 9 AM or as late as 8 PM). Additionally, the TCPA restricts calling cell phones (requires prior express written consent) and requires Do Not Call compliance. Some states restrict frequency of contact to avoid harassment. Always verify your state's specific calling hour restrictions, obtain necessary consents, and document all contact attempts.

What happens if a debtor sends a cease-and-desist letter?

Upon receipt of a cease-and-desist letter, you must stop all collection communications with the debtor except for: (1) sending a final debt validation notice if one hasn't been sent, or (2) notifying the debtor of intent to file a lawsuit or other legal action. Some states require acknowledging the cease-and-desist request in writing. Document receipt of the cease-and-desist letter, implement contact stopping procedures immediately, and train staff to recognize and process such requests. Continuing contact after receiving a cease-and-desist violates FDCPA and state law.

How long must I keep collection records?

While the FDCPA doesn't specify retention periods, best practice and many state laws require maintaining collection records for a minimum of 7 years. This includes original debt documentation, communications, call logs, payment records, and dispute documentation. Longer retention may be required if litigation is pending or if state law imposes different requirements. Organize records systematically for potential regulatory audits or litigation discovery. Consider implementing a document retention policy that exceeds statutory minimums to protect against stale debt claims.

What is attorney supervision and why is it important?

Attorney supervision means having a licensed attorney review and oversee collection activities to ensure legal compliance. At Legal Collects, attorney-supervised debt recovery means licensed counsel reviews collection procedures, approves compliance protocols, and monitors collection communications. This protection benefits both creditors (reduced liability exposure) and debtors (ensures fair practices). Some states require or strongly encourage attorney supervision. Attorney-supervised collection operations can provide defenses against consumer allegations and demonstrates good faith compliance efforts to regulators.

Can I collect on time-barred debts?

A time-barred debt is one that exceeds the state's statute of limitations for collection. Collection attempts on time-barred debts may violate state law. California, for example, limits collection of open account debts to 4 years. If a debt is time-barred, you generally cannot sue to enforce it, though you may still collect if the debtor voluntarily acknowledges the debt. Always verify the applicable statute of limitations before initiating collection, disclose time-barred status to the debtor if contacted, and avoid misrepresenting the legal enforceability of time-barred claims.

Ready to Pursue Compliant Debt Recovery?

Let Legal Collects handle the compliance complexities of B2B debt collection. Attorney-supervised, state-compliant, and transparent.

Submit a Claim Today

Stay Updated on Compliance Changes

Get monthly updates on debt collection law changes, compliance tips, and industry insights delivered to your inbox.