The New York Department of Financial Services has proposed a comprehensive new regulatory framework for Buy Now, Pay Later products that would impose licensing and supervision requirements on BNPL providers, cap fees and interest, mandate credit-like disclosures and dispute rights, and tighten data privacy rules. The proposed rules, would apply to both zero-interest “pay-in-four” products and interest-bearing installment BNPL loans.
What DFS is proposing: If finalized, the rules would:
- Require BNPL providers to be licensed and subject to DFS oversight.
- Impose clear, standardized disclosures aligned with Truth in Lending Act concepts, even for zero-interest BNPL products.
- Establish consumer dispute and refund rights similar to credit card protections.
- Limit interest rates and late fees, with a general cap on late fees and tighter controls on penalty fees.
- Require “reasonable risk-based underwriting,” including assessing a borrower’s ability to repay.
- Place guardrails around data use, sale, and sharing, requiring affirmative consumer consent for many uses.
Consumer advocates praised the proposal as the strongest set of BNPL protections at the state level, particularly as some federal protections around disputes and refunds have been rolled back in recent years.
Why this matters: For companies in credit and collections, the proposed framework reshapes the BNPL lifecycle in ways that could impact recoveries and workflows:
- Disputes and refunds: Borrowers would have clearer rights to pause payments while disputes are investigated, which could delay collections activity on certain accounts.
- Fee limitations: Tighter caps on late fees and penalty charges reduce revenue associated with delinquency and may change servicing strategies.
- Data handling: Stricter consent requirements around data sharing could affect analytics, marketing, and account-level decisioning.
- Licensing and oversight: BNPL lenders and platforms face a new supervisory regime, increasing compliance expectations for vendors and partners in the BNPL ecosystem.
The rules would take effect 180 days after final adoption, with a transitional period for existing BNPL providers. For industry participants that touch BNPL accounts, now is the window to assess operational readiness, vendor compliance, and how dispute handling, credit reporting, and collections processes may need to evolve if New York’s proposal becomes the model other states follow.
