This article is provided for educational and informational purposes only. It does not constitute legal, financial, or tax advice, and no attorney-client relationship is formed by reading it. Laws, regulations, official guidance, and related information vary by jurisdiction, change frequently, and may have changed or become outdated since the publication date. Always verify current information with authoritative sources and consult a qualified professional about your specific circumstances. The author and publisher assume no liability for actions taken based on this information.
Key Facts
- Federal level: The Fair Credit Reporting Act regulates consumer reporting agencies, businesses that furnish information, and people who use consumer reports.
- Federal level: A consumer report may be furnished only for a purpose authorized by the statute.
- Federal level: Consumer reporting agencies must use reasonable procedures to assure maximum possible accuracy.
- Federal level: A qualifying dispute generally triggers a free reasonable reinvestigation within 30 days, subject to statutory exceptions and a possible 15-day extension.
The Fair Credit Reporting Act, commonly shortened to FCRA, is the main federal law governing consumer reports. It applies beyond traditional lending and can reach reports used for credit, insurance, employment, housing, and other purposes authorized by the statute.
The FCRA regulates a reporting chain
A consumer reporting agency assembles or evaluates consumer information to furnish reports to third parties.
Related terminology appears in the credit bureau explainer.
Not every request is a permissible purpose
Section 1681b lists circumstances in which a consumer reporting agency may furnish a report. Examples include the consumer’s written instructions, certain court orders, specified credit transactions, insurance underwriting, and employment uses that satisfy additional conditions.
A person may not obtain or use a consumer report without a permissible purpose. Reporting agencies must maintain reasonable procedures designed to limit reports to authorized purposes, including identifying prospective users and obtaining purpose certifications.
Accuracy is a procedure-based duty
When a consumer reporting agency prepares a report, it must follow reasonable procedures to assure maximum possible accuracy. The statute does not promise that every file will always be error-free; it imposes duties concerning the procedures used and the response to disputed information.
Consumers can see and dispute file information
Subject to identity-verification and statutory conditions, a reporting agency must disclose the information in a consumer’s file at the time of request, the sources of that information, and specified information about report recipients.
When completeness or accuracy is disputed, the agency generally must conduct a free reasonable reinvestigation within 30 days. That period can be extended by up to 15 days when relevant consumer information arrives during the initial period, with limits on the extension.
The agency must notify the furnisher within five business days, consider relevant information submitted by the consumer, and delete or modify information found inaccurate, incomplete, or unverifiable. Written results generally follow within five business days after the reinvestigation is completed.
The credit report dispute overview explains this process separately from a request for a report.
Adverse action creates notice duties
When a person takes adverse action based in whole or in part on a consumer report, the FCRA requires notice to the consumer. The notice identifies the reporting agency and explains specified rights, including the right to obtain a free copy of the report and dispute accuracy or completeness.
The reporting agency does not make the lender’s, employer’s, insurer’s, or landlord’s decision merely because it supplied the report. The adverse-action notice separates the report source from the decision-maker.
Old information, freezes, and scores are separate issues
The FCRA limits how long several categories of adverse information may appear, but it does not use one deadline for everything. Bankruptcy cases generally use a 10-year period, while many other adverse items use seven years, subject to exceptions.
A credit freeze restricts access to a file and does not itself correct recorded information. A credit score is a numerical prediction derived from report data; the report and score are related but legally distinct.
Enforcement and state law
The statute provides civil liability rules for willful and negligent noncompliance. Available relief depends on the legal theory and proven facts: willful-violation provisions can include actual or statutory damages and possible punitive damages, while negligent-violation provisions address actual damages.
State law can provide additional consumer-reporting rights. The FCRA contains both a general rule preserving noninconsistent state law and targeted provisions that preempt particular state requirements, so the boundary depends on the precise subject.
Sources
- 15 U.S.C. 1681a definitions
- 15 U.S.C. 1681b permissible purposes
- 15 U.S.C. 1681e compliance and accuracy procedures
- 15 U.S.C. 1681g consumer disclosures
- 15 U.S.C. 1681i dispute procedures
- 15 U.S.C. 1681m duties after adverse action
- 15 U.S.C. 1681n willful noncompliance
- 15 U.S.C. 1681o negligent noncompliance
- 15 U.S.C. 1681c reporting periods
- 15 U.S.C. 1681t relation to state law
