Borrower's Guide
General information, not legal or financial advice. Sources are named on every page.

Fair Credit Reporting Act: Consumer Rights Under FCRA

The FCRA (15 U.S.C. § 1681) gives consumers the right to see, dispute, and correct credit reports. Learn what it covers and its limits.

The Fair Credit Reporting Act (FCRA), codified at 15 U.S.C. § 1681, is the federal law that governs how credit reporting agencies (CRAs) collect, use, and share consumer credit information. It also imposes duties on those who provide information to CRAs (furnishers) and those who use credit reports (users). For consumers, the FCRA creates a set of enforceable rights: the right to know what is in your credit file, the right to dispute inaccurate information, the right to have errors corrected within a reasonable time, and the right to be notified when a credit report is used against you. This page explains those rights, who the law covers, and where its limits lie.

The FCRA applies to “consumer reports” and “consumer reporting agencies.” A consumer report is any communication by a CRA that bears on a consumer’s creditworthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living, and is used or expected to be used to establish eligibility for credit, insurance, employment, or other permissible purposes. The three nationwide CRAs—Equifax, Experian, and TransUnion—are the most familiar, but the law also covers specialty agencies that report on medical payments, tenant history, or checking account history.

Your Rights Under the FCRA

Right to Access Your Credit File

Under 15 U.S.C. § 1681g, a consumer has the right to obtain a copy of their credit file from each nationwide CRA. The three major CRAs must provide a free copy once every 12 months upon request, through the centralized channel at AnnualCreditReport.com. You also have the right to a free file if you have been denied credit, insurance, or employment within the past 60 days based on information in your report, or if you are a victim of identity theft. Otherwise, a CRA may charge a reasonable fee for a copy, but the fee must be disclosed before you order.

The file must include all information in your file at the time of the request, the sources of that information, and a list of everyone who received a report in the past two years for employment purposes and the past year for any other purpose.

Right to Dispute Inaccurate Information

Section 1681i gives you the right to dispute information in your file that you believe is inaccurate, incomplete, or unverifiable. The CRA must conduct a reasonable investigation within 30 days (extendable to 45 days if you provide additional information during the investigation). If the information is found to be inaccurate or cannot be verified, the CRA must delete or correct it. If the dispute is not resolved to your satisfaction, you have the right to add a brief statement to your file explaining your side, and the CRA must include that statement in future reports.

Right to Be Told When a Report Is Used Against You

Under Section 1681m, if a user takes an adverse action—such as denying credit, insurance, or employment—based in whole or in part on a consumer report, the user must provide you with an adverse action notice. This notice must include the name, address, and phone number of the CRA that supplied the report, a statement that the CRA did not make the decision and cannot give specific reasons for it, and your right to dispute the accuracy or completeness of the information and to obtain a free copy of your report from that CRA within 60 days.

Right to Have Errors Corrected

When a CRA deletes or corrects information after a dispute, it must notify the furnisher of the information. Under Section 1681i(a)(5), the CRA must also, at your request, send notices of the correction to anyone who received your report in the past two years for employment purposes and the past year for any other purpose. This helps ensure that the error does not keep affecting you.

Who the FCRA Covers and Who It Does Not

The FCRA regulates three types of entities:

  • Consumer reporting agencies (CRAs) – companies that compile and sell consumer reports.
  • Furnishers – entities that provide information to CRAs, such as lenders, credit card issuers, collection agencies, and landlords.
  • Users – entities that obtain and use consumer reports for permissible purposes, such as creditors, insurers, employers, and landlords.

However, the FCRA does not apply to all businesses that report information. For example, a utility company that reports your payment history to a CRA is a furnisher under the FCRA, but a business that only uses your own payment history with it (without reporting to a CRA) is not. Similarly, the FCRA does not cover information that is not part of a consumer report, such as your own bank account records.

A common misconception is that the Fair Debt Collection Practices Act (FDCPA) governs all debt collectors. In fact, the FDCPA applies to third-party debt collectors and debt buyers, but not to original creditors collecting their own debts. The FCRA, by contrast, applies to all furnishers, including original creditors, when they report information to a CRA. This distinction matters because the remedies differ: the FDCPA allows statutory damages for certain violations, while the FCRA allows actual damages, punitive damages, and attorney’s fees for willful or negligent noncompliance.

What the FCRA Does Not Do

The FCRA does not require CRAs to be perfect. It requires them to follow reasonable procedures to assure maximum possible accuracy. An error that is not the result of a failure to follow those procedures may not be a violation. Also, the FCRA does not give you the right to demand that accurate negative information be removed. Negative information that is accurate can remain on your report for a limited time—generally seven years for most items, ten years for Chapter 7 bankruptcy—but the FCRA itself does not require deletion after that time; it only restricts how long CRAs may report such information.

The FCRA does not preempt all state laws. States may have their own credit reporting laws that provide additional protections, but they cannot conflict with the FCRA. If you are dealing with a state-specific issue, check your state’s consumer protection laws.

How to Exercise Your Rights

To exercise your right to access, request your free annual report from each of the three nationwide CRAs at AnnualCreditReport.com. To dispute, submit your dispute directly to the CRA that furnished the report, either online, by mail, or by phone. Provide your name, address, and the specific items you dispute, along with any supporting documents. The CRA must investigate and respond within 30 days.

If a user takes an adverse action, you have the right to a free report from the CRA named in the notice within 60 days. You also have the right to dispute the information with that CRA.

Common Mistake: Assuming the FCRA Applies to Every Negative Entry

The most frequent error consumers make is assuming that the FCRA gives them the right to have any negative information removed, regardless of accuracy. This misunderstanding leads to disputes that are doomed to fail and frustration when the CRA verifies the information. The FCRA only requires that information be accurate and complete. If the information is accurate, the CRA has no obligation to delete it, even if it is hurting your credit score.

Why does this happen? Credit scores are opaque, and consumers often conflate “negative” with “inaccurate.” Also, some credit repair companies market the idea that you can “challenge” any item and force its removal. In reality, a CRA must only delete information that is inaccurate, incomplete, or unverifiable. If the furnisher verifies the information as accurate, the CRA can keep it.

Another mistake is disputing directly with the furnisher instead of the CRA. While you have the right to dispute with a furnisher under Section 1681s-2, the CRA is the primary channel for disputes. Disputing with the CRA triggers the investigation process and the deletion of unverifiable information.

Comparison Table: When the FCRA Does and Does Not Apply

SituationFCRA Applies?Why / Why Not
A credit card issuer reports a late payment to a CRAYesThe issuer is a furnisher under FCRA
A landlord checks your credit report before rentingYesThe landlord is a user of a consumer report
A utility company reports your nonpayment to a CRAYesThe utility is a furnisher
A friend checks your credit report out of curiosityNoNot a permissible purpose under FCRA
An employer obtains your credit report without your written consentNoFCRA requires written consent for employment purposes
A collection agency that never reports to a CRA calls you about a debtNo (FCRA)The FDCPA may apply, but FCRA only covers reporting
A bank uses its own records to decide your loan applicationNoNot a consumer report; no CRA involved

If a CRA or furnisher violates the FCRA—for example, by failing to investigate a dispute, reporting inaccurate information after being notified, or using a report for an impermissible purpose—you may have a private right of action. Under Section 1681n, you can recover actual damages, punitive damages, and attorney’s fees for willful violations. Under Section 1681o, you can recover actual damages for negligent violations. In some cases, you may also be able to get statutory damages.

However, the FCRA is complex, and the deadlines and procedures are strict. If you are considering a lawsuit, or if you are facing a situation where a credit report error is causing significant harm—such as a denied mortgage or job offer—this is the point to consult an attorney who specializes in consumer law. An attorney can help you understand whether you have a claim and how to pursue it.

State Law Variations

Some states have their own credit reporting laws that provide additional rights, such as shorter reporting periods or free credit freezes. These state laws do not replace the FCRA but supplement it. When dealing with a credit reporting issue, check your state’s attorney general office or consumer protection agency for state-specific rules.

Conclusion

The FCRA provides essential protections for consumers, but it is not a catch-all for removing negative information. Understanding what the law actually requires—and what it does not—is the first step in using it effectively. If you believe your rights have been violated, the FCRA gives you the tools to seek a remedy, but the process requires attention to detail and, often, professional guidance.

Common questions

What is the Fair Credit Reporting Act?

The Fair Credit Reporting Act (FCRA) is a federal law that regulates how credit reporting agencies collect, use, and share your credit information. It gives you the right to see your credit report, dispute errors, and have them corrected, and it requires that your information be accurate and used only for permissible purposes.

How do I get a free copy of my credit report?

You can get a free copy of your credit report from each of the three major credit bureaus once every 12 months by visiting AnnualCreditReport.com. You can also get a free report if you were denied credit, insurance, or employment because of your report, or if you are a victim of identity theft.

How long does a credit bureau have to investigate a dispute?

Under the FCRA, the credit bureau must investigate your dispute within 30 days. If you provide additional information during the investigation, the period can be extended to 45 days. The bureau must notify you of the results in writing.

Can I sue a credit bureau for FCRA violations?

Yes, you can sue a credit bureau or a furnisher for violating the FCRA. You may recover actual damages, and for willful violations, punitive damages and attorney's fees. For negligent violations, you can recover actual damages. It's advisable to consult an attorney because the law has strict requirements.

Does the FCRA apply to original creditors?

Yes, the FCRA applies to original creditors when they report information to credit bureaus. They are considered 'furnishers' and must provide accurate information and correct errors. However, the FDCPA, which regulates debt collectors, generally does not apply to original creditors collecting their own debts.

Read next