Federal debt-collection rules are an important baseline, but they are not a substitute for a state-by-state review. For consumer accounts connected to New York or California, the collector’s role, the account’s history, the consumer’s location, applicable exclusions, documentation, limitations period, and licensing status can all affect what may be done. This is an educational overview, not legal advice for a particular account.
Why state overlays matter
Federal Regulation F requires an FDCPA debt collector to provide specified validation information in the initial communication or in a validation notice sent within five days of that communication, subject to stated exceptions. The rule also defines a 30-day validation period. See the CFPB’s current Regulation F validation-notice rule. Whether the FDCPA applies to a particular company or account is a threshold question; state law may use different definitions or impose additional duties.
A sound compliance process therefore does not begin with a national letter template. It begins with an account-level scope analysis: identify the consumer and account type, the entity seeking to collect, the state connection, the ownership or servicing history, and the records available to support the balance and right to collect.
New York: scope, substantiation, and time-barred debt
23 NYCRR Part 1 has a defined scope
New York’s debt-collection regulation, 23 NYCRR Part 1, is directed at debt collectors, including third-party debt collectors and debt buyers. The New York Department of Financial Services (DFS) states that the rule does not apply to collection by original creditors, while a third party collecting for an original creditor may be covered unless an exception applies. DFS also explains that some provisions apply only to charged-off debts and others apply more broadly. See the DFS FAQ on 23 NYCRR Part 1.
That scope matters. An account’s original creditor, current owner, servicing arrangement, default status, and the nature of the credit transaction can change the analysis. A residence in New York, by itself, is not a complete legal conclusion about every duty or exception.
Substantiation requires a timely response to a request
For a charged-off debt, DFS states that a debt collector must provide written substantiation within 60 days of receiving a request for substantiation and may not collect the debt until substantiation is provided. DFS also says that a failure to provide the required information within that 60-day period is a separately enforceable violation. See the DFS FAQ on substantiation.
DFS explains that the rule does not require a full copy of the original payment agreement or every payment statement merely to satisfy the provision addressing records of a prior settlement agreement. That point should not be mistaken for a universal documentation rule. The needed records, the character of a request, and the timing of a response require review under the current regulation and the facts of the account.
Consumers and collectors alike should preserve the request, the response, and relevant account records. A collector should not replace a documented, state-specific substantiation process with a generic name-and-balance response.
The three-year New York limitations rule is not a universal shortcut
New York Civil Practice Law and Rules section 214-i says that an action arising from a consumer credit transaction in which the purchaser, borrower, or debtor is the defendant must be commenced within three years, subject to the exceptions named in the statute. It also provides that, after the applicable period expires, a payment, written or oral affirmation, or other activity on the debt does not revive or extend that period. Read the current text of CPLR 214-i.
For operations, the key distinction is between a limitations analysis for a lawsuit and the separate rules governing collection communications. Account type, accrual facts, statutory exceptions, and procedural posture should be reviewed before concluding that a claim is or is not time-barred. Before a time-barred-debt communication or lawsuit, counsel should confirm the current New York regulatory and procedural requirements for the particular account.
California: Rosenthal Act obligations and licensing
The Rosenthal Act uses its own definition
California Civil Code section 1788.2 defines a debt collector as a person who, in the ordinary course of business, regularly engages in debt collection on that person’s own behalf or on behalf of others. The statute defines debt collection and consumer debt separately and, as amended effective January 1, 2026, also contains definitions for certain covered commercial debt and credit. See California Civil Code section 1788.2.
This wording is a reason not to rely on a shorthand statement that every original creditor is outside California’s law. The facts of the business, the type of debt, the entity’s regular collection activity, and statutory exclusions should be evaluated for the account and time period at issue.
Federal conduct provisions are incorporated for consumer debt
For consumer debt, Civil Code section 1788.17 requires every debt collector to comply with specified FDCPA provisions, sections 1692b through 1692j, and makes the remedies in section 1692k applicable, with the exceptions stated in the California statute. The current language is available at California Civil Code section 1788.17. The incorporation is significant, but it should be read alongside the Rosenthal Act’s definitions and the federal provisions it references rather than treated as a one-line substitute for either statute.
California licensing requires a separate check
California Financial Code section 100001 states that a person may not engage in the business of debt collection in California without first obtaining a license under the Debt Collection Licensing Act. It also states that a person outside California seeking to collect from a California resident is acting in the state for this purpose, to the extent permitted by federal law. The same section contains exemptions, including specified depository institutions and certain other regulated entities. Read Financial Code section 100001.
The California Department of Financial Protection and Innovation’s debt-collector licensing guidance says that debt collectors and debt buyers operating in California are required to apply for a license, while also describing exemptions and the statutory definitions. Licensing, exemption, branch-registration, and vendor questions deserve a documented review rather than an assumption based only on where the business is headquartered.
An account-level control checklist
- Classify the account and parties. Identify consumer versus other credit, original creditor, owner, debt buyer, servicer, collection agency, and law firm roles.
- Confirm the jurisdictional facts. Record the consumer’s relevant location, the planned collection activity, and the applicable state connection; do not use an area code as a legal proxy.
- Test documentation availability. For New York charged-off accounts, map retained records to Part 1’s substantiation requirements and create a process for timely response to disputes.
- Calculate limitations separately. Use the governing statute, account facts, and exceptions. Preserve the calculation basis and distinguish the ability to sue from communications or voluntary-payment issues.
- Review communications and vendors. Align letters, call procedures, dispute handling, and attorney or agency oversight with the laws actually applicable to the portfolio.
- Check California licensing and exemptions. Verify the legal entity, operating model, consumer residence, license status, and any claimed exemption before collection activity.
What consumers can do
A consumer who receives a collection communication can keep the notice and account records, compare the claimed debt with their records, and communicate promptly if the debt, amount, or collector’s authority is disputed. The federal validation notice and New York’s charged-off-debt substantiation process are different tools with different scope and timing. A consumer facing a lawsuit should not ignore court papers; local legal-aid services or a qualified attorney can help assess deadlines and defenses.
When legal and compliance review is necessary
Human legal review is especially important before litigation, a time-barred-debt communication, a dispute response, a portfolio purchase or sale, a licensing determination, or a material change to letters, call scripts, or vendor instructions. Statutes, regulations, agency guidance, court decisions, account facts, and effective dates can all change the answer. For related operational topics, see Agency Performance Standards: KPIs for Vendor Due Diligence and Portfolio Defense: SCRA & Bankruptcy Compliance Protocols.
Frequently asked questions
What is the difference between a debt buyer and a debt collector?
A debt buyer purchases debt for collection, while a collection agency commonly collects for another party; one organization can meet more than one statutory definition. California’s licensing guidance expressly includes debt buyers in its debt-collector framework, but the governing definitions and exemptions must be checked for the relevant state and account.
How can you validate a debt?
Review the validation information provided by the collector, keep a copy, and communicate a dispute or request for records promptly. For an FDCPA debt collector, Regulation F governs validation information; for a disputed charged-off debt covered by New York Part 1, the collector must follow New York’s substantiation process. The effect of a request can depend on the collector, jurisdiction, and timing.
Can debt buyers sue you?
A debt buyer may attempt a lawsuit when it has a legally viable claim and follows the applicable rules, but a court determines the outcome. In New York, CPLR 214-i sets a three-year period for many consumer-credit actions subject to statutory exceptions; consumers should not ignore a summons and should seek timely legal advice about their own facts.