Home / NJ Guides / Compliance

NJ Guides · Updated July 2026

The NJ dealership F&I compliance guide: every rule at the desk

The Short Answer

New Jersey F&I compliance runs on two stacked rulebooks: federal (OFAC screening, the Red Flags Rule, TILA/Reg Z, ECOA adverse action, the GLBA Safeguards Rule, the FTC Used Car Rule) and state (the NJ Consumer Fraud Act plus Division of Consumer Affairs auto regulations). Exposure compounds fast: up to $53,088 per FTC rule violation, mandatory treble damages under the CFA, and $10,000–$20,000 per NJ offense.

What federal rules apply at a New Jersey F&I desk?

Six federal regimes touch every deal jacket, whether the store is on Route 1 or Route 22:

1. OFAC screening. Every buyer and co-buyer gets screened against the Specially Designated Nationals list before the deal funds. Sanctions violations are strict liability — intent doesn't matter — and the maximum civil penalty is $377,700 per violation or twice the transaction value, whichever is greater (2025 inflation-adjusted figure, unchanged for 2026). Blocked or rejected transactions must be reported to OFAC within 10 business days, and sanctions-related records now keep for 10 years, up from five.

2. The Red Flags Rule. Dealers are "creditors" under FACTA, which means a written Identity Theft Prevention Program — approved by ownership or a designated senior manager, with staff training and vendor oversight. Knowing FCRA violations run up to $4,983 each (the old "$3,500" figure still circulating in trade articles is outdated).

3. Truth in Lending (Reg Z). Before signing, the customer gets the segregated federal box: APR, finance charge, amount financed, total of payments, payment schedule — grouped together, free of clutter (12 C.F.R. 1026.17–18). Individual TILA suits carry statutory damages up to $1,000 on auto paper plus attorney's fees; class actions cap at the lesser of $1 million or 1% of net worth.

4. ECOA / Regulation B. A completed credit application starts a 30-day clock for notice of action taken. Adverse action notices must state specific reasons — or the right to request them. Punitive exposure runs to $10,000 per individual action.

5. The GLBA Safeguards Rule. Any dealer arranging financing or leases is a "financial institution": written information-security program, a named Qualified Individual, MFA, encryption, vendor oversight, incident-response plan, and annual reporting to ownership. Since May 13, 2024, breaches of unencrypted data affecting 500+ consumers must be reported to the FTC within 30 days.

6. The FTC Used Car Rule. A completed Buyers Guide on every used unit before it's offered — both sides visible, Spanish version for Spanish-language deals — and the Guide's terms override the contract if they conflict. Up to $53,088 per violation.

What New Jersey adds on top

The Consumer Fraud Act is the state's hammer. Private plaintiffs who prove an ascertainable loss get mandatory treble damages plus attorney's fees (N.J.S.A. 56:8-19). The Attorney General adds civil penalties of $10,000 for a first offense and $20,000 for each one after. This is not theoretical: an NJ trial court hit one dealer with over $10 million for 500+ CFA violations, and the Division of Consumer Affairs settled with six dealerships for ~$260,000 in December 2022 — including one cited specifically for charging a doc fee without itemizing the service.

Advertising (N.J.A.C. 13:45A-26A). Every advertised price must include all costs except tax and registration/licensing — meaning the doc fee lives inside the advertised number. Bait advertising, invoice-price comparisons, and "wholesale/no profit" claims are unlawful.

Doc fees (N.J.A.C. 13:45A-26B.3). No dollar cap, but two hard rules: never present the fee as government-required, and never charge it without itemizing each specific documentary service and its price, in writing, in at least 10-point type, on the sale document. Full breakdown in our NJ doc fee guide.

The Used Car Lemon Law. NJ dealers must give written warranties on used vehicles: 90 days/3,000 miles (≤24,000 miles), 60 days/2,000 miles (24,001–60,000), 30 days/1,000 miles (60,000–100,000). Written waivers are only permitted above 60,000 miles.

Dealer licensing (N.J.S.A. 39:10-19). An MVC license and an established place of business where the books live — with fines and cease-and-desist authority behind it.

The desk-level checklist

Every dealRuleMax exposure
OFAC screen buyer + co-buyer before funding31 C.F.R. Part 501$377,700/violation, strict liability
Red flags check per the written ITPP16 C.F.R. Part 681$4,983/knowing violation
TILA box — segregated, before signing12 C.F.R. 1026.17–182× finance charge + fees
Adverse action within 30 days, specific reasons12 C.F.R. 1002.9$10,000 punitive/individual
Buyers Guide on every used unit16 C.F.R. Part 455$53,088/violation
Doc fee itemized, 10-pt type, never "state-required"N.J.A.C. 13:45A-26B.3CFA treble damages + $10–20K
Advertised price honored, all-in except tax/regN.J.A.C. 13:45A-26ACFA treble damages + $10–20K
Used-car warranty tier applied or lawful waiverNJ Used Car Lemon LawCFA exposure

The operating principle behind all of it: the jacket should read the same to an auditor as it did to the customer. Menu to 100% of customers, e-contract plus ink, and stips handled before delivery isn't just funding discipline — it's the compliance record.

Questions dealers ask

Is there a cap on dealer doc fees in New Jersey?
No cap — the average is about $714, seventh highest in the U.S. — but the fee must be itemized service-by-service in at least 10-point type on the sale document, can never be described as government-required, and must sit inside any advertised price. Details: NJ doc fee rules.
Does New Jersey require dealers to warranty used cars?
Yes — written warranty tiers by mileage: 90 days/3,000 miles (≤24,000 miles), 60/2,000 (24,001–60,000), 30/1,000 (60,000–100,000). Waivers only above 60,000 miles, in writing.
How long do we have to send an adverse action notice?
30 days from a completed application (12 C.F.R. 1002.9), with the specific principal reasons or the right to request them.
Do NJ dealerships report data breaches to the FTC?
Yes — since May 13, 2024, within 30 days of discovering a breach of unencrypted customer information affecting 500+ consumers, on top of state notice duties.

Sources

  1. OFAC penalties & reporting: home.treasury.gov (2025 CMP adjustment) · ofac.treasury.gov/faqs/topic/1606
  2. Red Flags Rule: ftc.gov/business-guidance — "Fighting Identity Theft" · FCRA penalties: govinfo.gov FR-2025-01-17
  3. TILA/Reg Z: consumerfinance.gov/rules-policy/regulations/1026/18 · 15 U.S.C. 1640
  4. ECOA/Reg B: law.cornell.edu/cfr/text/12/1002.9 · 15 U.S.C. 1691e
  5. Safeguards Rule: ftc.gov — Automobile Dealers Safeguards FAQs · 2023 breach-notice amendment
  6. Used Car Rule: ftc.gov — Dealer's Guide to the Used Car Rule
  7. NJ CFA: N.J.S.A. 56:8-13, 56:8-19 (njconsumeraffairs.gov) · NJ advertising/doc fee regs: N.J.A.C. 13:45A-26A & 26B (law.cornell.edu)
  8. NJ used-car warranty tiers: njconsumeraffairs.gov Used Car Lemon Law brief · Dealer licensing: N.J.S.A. 39:10-19
  9. Enforcement: njoag.gov Dec. 15, 2022 settlements · regulatoryoversight.com (2026) on the $10M CFA case

Written by James Lopez — automotive Finance & Business Manager in Central New Jersey. Seven-plus years running NJ desks, lease and retail: menu to 100%, e-contract plus ink, funded in days, and audits that come back boring. See how the desk runs →

Hire an F&I manager in New Jersey

This guide is general information for dealership professionals, not legal advice. Regulations and penalty figures change; verify current requirements with counsel, NJ CAR, or the cited agencies before relying on them.