Yes, through existing laws and guidance rather than one AI law. Fair lending rules, ECOA and Regulation B adverse action requirements, FCRA, UDAAP, and collections rules all apply. Model risk guidance such as SR 11-7 and interagency third-party risk guidance cover how lenders validate and oversee AI. Some states are adding AI-specific laws.