Your Rights Under the Fair Credit Reporting Act

What the Fair Credit Reporting Act Protects

The Fair Credit Reporting Act is a federal law designed to promote accuracy, fairness, and privacy in consumer reporting. It applies to nationwide credit bureaus and many specialty consumer-reporting companies.

The law also creates duties for businesses that use consumer reports and companies that provide information to reporting agencies.

Companies With FCRA Responsibilities

Permissible Purpose: Who May Access a Consumer Report?

A consumer report generally may be provided only when a legally permitted purpose exists. A business cannot lawfully obtain a report merely because it is curious about your financial history.

Your Right to Know What Is in Your File

Consumers have a right to request information maintained by consumer-reporting agencies. For the nationwide credit bureaus, AnnualCreditReport.com is the federally authorized source.

You may also qualify for additional free disclosures in certain situations, such as after an adverse action, suspected identity theft, fraud, unemployment, or public-assistance status, depending on the applicable requirements.

Your Right to Dispute Inaccurate or Incomplete Information

You may dispute information you reasonably believe is inaccurate or incomplete. A focused dispute should identify the exact account or field, explain the problem, state the requested correction, and include useful supporting records.

CFPB guidance recommends disputing with both the consumer-reporting company and the business that furnished the information.

Examples of possible errors

• An account that does not belong to you.
• An incorrect balance, limit, or payment status.
• Duplicate reporting that misrepresents the account.
• Wrong opening, closing, or delinquency dates.
• Information mixed with another consumer's file.
• Identity-theft accounts or inquiries.
• Adverse information reported beyond an applicable period.

What Happens After You Submit a Dispute?

1. The reporting company reviews the dispute for sufficient detail.
2. It generally sends relevant information to the furnisher.
3. The information is investigated.
4. The reporting company generally completes the investigation within 30 days.
5. Certain circumstances may allow up to 45 days.
6. You generally receive written results and an updated report when information changes.

A reporting company may reject a dispute it determines is frivolous or irrelevant, but it generally must explain the reason and what additional information may be needed.

Responsibilities of Information Furnishers

Businesses that provide information to consumer-reporting agencies generally have duties involving accuracy and disputes. A furnisher should not provide information it knows or has reasonable cause to believe is inaccurate.

When a qualifying dispute is received, the furnisher may need to investigate, review relevant information, report results, and correct information found to be inaccurate or incomplete.

Your Rights After Adverse Action

When a business takes an unfavorable action based in whole or in part on a consumer report, it generally must provide an adverse-action notice.

The notice commonly identifies the reporting company, explains that the reporting company did not make the decision, and tells you about the right to obtain a free copy of the report and dispute inaccurate information.

Examples may include denial of credit, less-favorable credit terms, denial of housing, certain employment decisions, or insurance-related action, depending on the law and transaction.

How Long Can Negative Information Be Reported?

Many types of adverse information are generally limited to about seven years. Certain bankruptcy information may remain longer. The correct starting date depends on the type of item and applicable law.

Accurate positive information may remain longer, and closed accounts can continue appearing after closure.

Fraud Alerts

An initial fraud alert generally lasts one year and asks businesses that check a report to take reasonable steps to verify identity. Contacting one nationwide bureau generally requires that bureau to notify the other two.

Eligible identity-theft victims may request an extended fraud alert that lasts longer and includes additional protections.

Security Freezes

A security freeze restricts prospective creditors from accessing a credit file, making it more difficult for an identity thief to open a new account.

Freezes are free to place, lift, and remove. Consumers generally must contact Equifax, Experian, and TransUnion separately.

A freeze does not affect a credit score and does not prevent a consumer from reviewing their own report.

Additional Rights After Identity Theft

The FCRA provides special rights to identity-theft victims. Depending on the documentation supplied, consumers may request blocks of fraudulent information, extended alerts, additional free reports, and records related to fraudulent transactions.

IdentityTheft.gov can help create an FTC identity-theft report and a personalized recovery plan.

Employment-Screening Rights

Employers generally must obtain written permission before requesting an employment consumer report. Before taking certain adverse action, the employer generally must provide a copy of the report and a summary of FCRA rights.

After the decision, an additional adverse-action notice is generally required. State and local laws may create further restrictions.

What the FCRA Does Not Guarantee

• Automatic deletion of accurate negative information.
• A particular FICO® Score increase.
• Approval for credit, housing, employment, or insurance.
• Removal of an authorized inquiry.
• A specific investigation outcome.
• Compensation without facts and legal support.

The FCRA provides rights and procedures. Outcomes depend on the report, evidence, company response, and applicable law.

Common FCRA Mistakes

• Disputing accurate information solely because it is negative.
• Sending a vague dispute without identifying the exact error.
• Failing to save the original report.
• Sending original documents instead of copies.
• Ignoring adverse-action notices.
• Assuming every report access is unauthorized without reviewing the purpose.
• Believing a security freeze protects existing accounts from every type of fraud.

Your FCRA Rights Checklist

1. Request and save current consumer reports.
2. Identify every reporting company involved.
3. Confirm whether report access had a permissible purpose.
4. Mark exact inaccuracies or incomplete fields.
5. Gather relevant supporting records.
6. Dispute with both the reporting company and furnisher.
7. Track the 30-day investigation period.
8. Review adverse-action notices promptly.
9. Use alerts or freezes after suspected fraud.
10. Continue to Lesson 3 for a complete dispute process.