Activities / Who the operator is / Provides financial services

Is a lender

is_lender

The company behind your app regularly lends or arranges credit as a business, such as consumer, business or mortgage loans or buy now, pay later, or supplies software to a lender.

scope role
in the registry since 1.1
12 laws in 8 jurisdictions name it

What triggers it

The lint's definition. It regularly extends or arranges credit as a business, licensed or not: consumer, business or mortgage loans, or buy now, pay later; or supplies software to such a lender. Taking a card at checkout is not this.

This covers a consumer or small-business lender, a mortgage lender or broker, a buy now, pay later provider and a bank when it lends, licensed or not, because credit law binds whoever regularly extends credit.

It implies Provides financial services.

What does not

A retailer that only accepts a card at checkout does not count.

Often confused with Is a bank and Makes high-risk automated decisions.

The law it brings into scope

The kinds of law that name this activity in the LexLint law library, with the number of laws and jurisdictions in each, as of 19 Oct 2026. The examples are chosen by rule, laws in force first and the widest jurisdiction first; each section's page lists every law.

Area of law	Laws	Jurisdictions
AI law Tell people when they are dealing with an AI system or its output, and control the uses the law calls high-risk. FCA Handbook, CONC 5.2A, assessing the creditworthiness of a customer before consumer credit is granted or significantly increased United Kingdom Equal Credit Opportunity Act and Regulation B, notice of action taken and statement of specific reasons for adverse action United States Elliott-Larsen Civil Rights Act, public accommodations, public service and real estate financing (Act 453 of 1976) Michigan	10	8
Privacy law Have a legal basis for personal data, honor people's rights over it, and report a breach. Consumer Credit Directive, Right to Human Intervention in an Automated Creditworthiness Assessment (Article 18(8)) European Union from 20 Nov 2026, in 4 weeks	2	1

Area of law

Laws

Jurisdictions

AI law

Tell people when they are dealing with an AI system or its output, and control the uses the law calls high-risk.

Privacy law

Have a legal basis for personal data, honor people's rights over it, and report a breach.

Consumer Credit Directive, Right to Human Intervention in an Automated Creditworthiness Assessment (Article 18(8)) European Union from 20 Nov 2026, in 4 weeks

This activity implies Provides financial services, so every law that names that activity reaches it too. These areas of law reach it only that way:

Cybersecurity law: 70 laws in 43 jurisdictions, through Provides financial services
Build software securely, handle reported flaws, and report incidents on a deadline.
Communications law: 2 laws in 1 jurisdiction, through Provides financial services
Get consent before marketing, calling, recording or storing data on a device, and honor an opt-out.

In a declaration

A role says who operates a product, so it is declared in the product's own lexlint.yml and never in a component's ACTIVITIES.md: a library cannot make the product that uses it a regulated party.

In lexlint.yml

profile: activities: - is_lender

History

In the registry since version 1.1, 16 Oct 2026.

Added for Equal Credit Opportunity Act and Regulation B, notice of action taken and statement of specific reasons for adverse action (United States), the law that turns on it.

In the glossary: Is a lender.

The activity registry is LexLint's open list; this page's text is licensed under Creative Commons Attribution 4.0.