Why states regulate (and the feds, sometimes)

State first, federal sometimes

The default in the United States is that the states regulate business activity inside their borders. Federal oversight layers on top in specific industries: banking, securities, certain types of consumer finance, money transmission with cross-border movement.

For most licensable activities, the state is the primary regulator and the place where the day-to-day paperwork lives.

Where they overlap

Two patterns show up over and over:

Dual oversight. A company is examined by a state agency for its state activities and by a federal regulator for the federal piece. The exams happen on different schedules, the document requests are different, and the same business has two separate compliance teams in mind.

Passporting. In some industries a federal registration or qualification gives a company a head start on the state filings, but typically does not replace them. The state still wants the application, the fee, and the renewal.

What this means in practice

Most operators new to a regulated industry are surprised by how much of the work is state-level, not federal. A multi-state operator typically has more individual state interactions in a year than federal ones.