Skip to content

Foundations · Lesson 2 of 9

Why states regulate (and the feds, sometimes)

The split between state and federal oversight, why one activity can trigger both, and what that means for paperwork.

About 3 minutes to read

Builds on

What you'll learn

  • The general split between state-licensed and federally-licensed activities
  • Where the two overlap and why the paperwork stacks
  • What primary versus concurrent oversight typically looks like

State first, federal sometimes

The default in the United States is that the states regulate business activity inside their borders. Federal oversight layers on top in specific industries: banking, securities, certain types of consumer finance, money transmission with cross-border movement.

For most licensable activities, the state is the primary regulator and the place where the day-to-day paperwork lives.

Where they overlap

Two patterns show up over and over:

Dual oversight. A company is examined by a state agency for its state activities and by a federal regulator for the federal piece. The exams happen on different schedules, the document requests are different, and the same business has two separate compliance teams in mind.

Passporting. In some industries a federal registration or qualification gives a company a head start on the state filings, but typically does not replace them. The state still wants the application, the fee, and the renewal.

What this means in practice

Most operators new to a regulated industry are surprised by how much of the work is state-level, not federal. A multi-state operator typically has more individual state interactions in a year than federal ones.

How we'd handle it

Mapping activity-by-activity, state-by-state, to the right license type is the kind of thing that's easy to underestimate, especially as products evolve. Covered by Cornerstone runs that mapping for you and then handles the applications and renewals so the calendar stays current.

FAQ

Questions operators ask about this lesson

Does a federal license cover the states?

Almost never on its own. Federal qualifications usually narrow what the states ask for, not what they require entirely.

Live Regulatory Feed

Recent Regulatory Activity

Rule changes and agency updates we're tracking across all states for this topic. Most operators run in more than one state, so we show what's moving everywhere.

  • ActionCalifornia DFPICAOct 24, 2026

    California Lender Reporting Requirement for Insurance Payouts

    California DFPI ordered financial institutions to report data on how lenders managed insurance payouts to survivors of the Los Angeles fires.

  • InfoCalifornia DFPICAOct 23, 2026

    DFPI Warns Lenders About Handling Insurance Payouts

    On October 15, 2026, the California DFPI ordered financial institutions to report on their handling of insurance payouts for fire survivors in Los Angeles. Non-compliance could lead to enforcement actions.

  • ActionNew York DFSNYOct 21, 2026

    Final Adoption of Insurance Regulation 168 - Confidentiality Protocols

    New York DFS adopted a regulation to establish confidentiality protocols for victims of domestic violence and endangered individuals within the insurance sector.

  • ActionCalifornia DFPICAOct 21, 2026

    Order to Financial Institutions Regarding LA Fire Insurance Payouts

    The DFPI mandated financial institutions to report data on their insurance payout handling for Los Angeles fire survivors, threatening enforcement against non-compliance.