Your Consumer Rights Under the Fair Credit Reporting Act: A Plain-English Overview

What is the Fair Credit Reporting Act?

The FCRA (15 U.S.C. § 1681 et seq.) regulates the three nationwide credit bureaus — Equifax, Experian, and TransUnion — as well as smaller specialty reporting agencies, and the businesses ('furnishers') that supply information to them, such as banks, credit card issuers, landlords, and collection agencies.

The law was designed to promote accuracy, fairness, and privacy in the consumer reporting system. It's enforced primarily by the Consumer Financial Protection Bureau and the Federal Trade Commission, and consumers also have a private right to sue in certain circumstances, typically with the help of an attorney.

What is the right to access your own credit file?

Under FCRA Section 609 (15 U.S.C. § 1681g), you have the right to request a copy of the information in your credit file. Separately, federal law guarantees free access to your reports from all three bureaus through the official site, AnnualCreditReport.com — the only site authorized under federal law for this free annual disclosure.

You're also entitled to a free report in certain circumstances outside the standard schedule, such as after you've been denied credit, employment, or insurance based on a report, or if you're a victim of identity theft. Reviewing your file periodically — even when nothing seems wrong — is a reasonable habit, since errors can appear without any obvious trigger.

What is the right to dispute information you believe is inaccurate?

FCRA Section 611 (15 U.S.C. § 1681i) gives you the right to dispute information in your file that you believe is inaccurate or incomplete. When you file a dispute with a credit bureau, it generally must investigate within 30 days (45 days in some circumstances, such as when you provide additional information during the process) and forward your dispute to the furnisher of the information.

The furnisher is separately obligated under FCRA Section 623 (15 U.S.C. § 1681s-2) to conduct its own reasonable investigation once notified of a dispute. If information cannot be verified as accurate and complete, it's supposed to be corrected or deleted. If it is verified, it can remain on your report even after a dispute.

It's important to understand that disputing accurate information is not an appropriate strategy, and this guide does not suggest disputing information you know or believe to be correct. The dispute process exists to correct genuine errors, not to remove unfavorable but accurate history.

What limits does the FCRA place on negative information?

Section 605 (15 U.S.C. § 1681c) sets time limits on how long most negative information can be reported — generally seven years for things like late payments and collections accounts (measured from the date of first delinquency), and up to ten years for most Chapter 7 bankruptcies. Some information, like certain criminal convictions, can be reported without a time limit in specific reporting contexts.

These limits apply regardless of whether a debt is later paid, sold to another collector, or settled — paying an old debt does not reset how long it can appear on your report under the FCRA.

What is the right to control who can access your report?

The FCRA restricts who can request your credit report and for what reasons — generally referred to as having a 'permissible purpose,' such as applying for credit, renting an apartment, or an employer conducting a background check with your consent. Businesses cannot pull your credit report just out of curiosity or for unrelated marketing purposes.

You also have rights to place a security freeze on your credit file for free, which restricts most third parties from accessing your report until you lift it, and to place fraud alerts if you suspect identity theft. These tools are governed partly by the FCRA and partly by later amendments like the Economic Growth, Regulatory Relief, and Consumer Protection Act, which made security freezes free nationwide.

What is the right to notice of adverse action?

If a business denies you credit, insurance, employment, or housing based even in part on information in your credit report, the FCRA generally requires that business to send you an 'adverse action notice.' This notice must tell you that a consumer report was used, identify the reporting agency, and explain your right to request a free copy of the report and to dispute its accuracy.

This right matters because it creates a paper trail connecting a specific decision to specific report information, which can help you figure out what to review if you weren't expecting to be denied.

What happens if a company violates the FCRA?

The FCRA allows for enforcement by the CFPB, FTC, and state attorneys general, and it also creates a private right of action, meaning consumers can sue for certain violations in some circumstances, generally with legal representation. Remedies can include actual damages, and in cases of willful noncompliance, statutory damages and attorney's fees, though outcomes depend heavily on the specific facts of a case.

If you believe a bureau or furnisher violated your FCRA rights, you can file a complaint with the CFPB, and depending on your situation, consult a consumer protection attorney to understand your options. This guide cannot tell you whether you have a valid legal claim — that depends on facts a qualified attorney would need to review.

Key FCRA sections consumers commonly rely on

Frequently asked questions

Sources and further reading

• 15 U.S.C. § 1681 et seq. — Fair Credit Reporting Act
• CFPB — Summary of Your Rights Under the FCRA
• FTC — Credit Reports and Scores
• AnnualCreditReport.com — Official free credit report site