Skip to content

Foundations · Lesson 2 of 9

Why states regulate (and the feds, sometimes)

The split between state and federal oversight, why one activity can trigger both, and what that means for paperwork.

About 3 minutes to read

Builds on

What you'll learn

  • The general split between state-licensed and federally-licensed activities
  • Where the two overlap and why the paperwork stacks
  • What primary versus concurrent oversight typically looks like

State first, federal sometimes

The default in the United States is that the states regulate business activity inside their borders. Federal oversight layers on top in specific industries: banking, securities, certain types of consumer finance, money transmission with cross-border movement.

For most licensable activities, the state is the primary regulator and the place where the day-to-day paperwork lives.

Where they overlap

Two patterns show up over and over:

Dual oversight. A company is examined by a state agency for its state activities and by a federal regulator for the federal piece. The exams happen on different schedules, the document requests are different, and the same business has two separate compliance teams in mind.

Passporting. In some industries a federal registration or qualification gives a company a head start on the state filings, but typically does not replace them. The state still wants the application, the fee, and the renewal.

What this means in practice

Most operators new to a regulated industry are surprised by how much of the work is state-level, not federal. A multi-state operator typically has more individual state interactions in a year than federal ones.

How we'd handle it

Mapping activity-by-activity, state-by-state, to the right license type is the kind of thing that's easy to underestimate, especially as products evolve. Cornerstone Licensing runs that mapping for you and then handles the applications and renewals so the calendar stays current.

FAQ

Questions operators ask about this lesson

Does a federal license cover the states?

Almost never on its own. Federal qualifications usually narrow what the states ask for, not what they require entirely.

Live Regulatory Feed

Recent Regulatory Activity

Rule changes and agency updates we're tracking across all states for this topic. Most operators run in more than one state, so we show what's moving everywhere.

  • Action Massachusetts Attorney General MA Jul 14, 2026

    Massachusetts AG obtained court order blocking alleged phantom debt collectors

    On June 16, 2026, the Massachusetts Attorney General announced a court order blocking alleged phantom debt collectors, including East Coast Financial, from engaging in debt collection activity while the case proceeds. The order also barred evidence destruction and asset dissipation.

  • Info Delaware General Assembly DE Jul 14, 2026

    Delaware enacted financial services modernization package covering banking, money transmission, virtual currency, and payment stablecoins

    A July 10, 2026 regulatory alert reported that Delaware enacted a three-bill financial services modernization package. The package covers banking modernization, money transmission and virtual currency licensing, and payment stablecoins.

  • Info Rhode Island General Assembly RI Jul 14, 2026

    Rhode Island enacted capital, liquidity, and governance requirements for nonbank mortgage servicers

    A July 10, 2026 regulatory alert reported that Rhode Island enacted a new law imposing capital, liquidity, governance, audit, and risk-management requirements on certain nonbank mortgage servicers. The change points to a more formal prudential framework for state-regulated servicers.

  • Action Washington Department of Financial Institutions WA Jul 14, 2026

    Washington DFI set July 14, 2026 deadline for Q1 2026 Mortgage Call Report and required Form Version 7 for certain licensees

    Washington DFI stated that Q1 2026 Mortgage Call Report filings for Washington were due July 14, 2026. Beginning with 2026, certain mortgage and consumer loan licensees also had to use MCR Form Version 7.