| Law Enacted | 1970 (significantly amended in 1996 and 2003 by FACTA) (U.S. Congress) |
| Enforcing Agencies | Federal Trade Commission (FTC) and Consumer Financial Protection Bureau (CFPB) |
| Free Reports Per Year | 1 per major bureau (Equifax, Experian, TransUnion) every 12 months (FCRA § 612; AnnualCreditReport.com) |
| Dispute Investigation Window | 30 days standard; 45 days if consumer submits additional information (FCRA § 611) |
| Adverse Action Notice Required | Yes — for credit, employment, housing, and insurance denials (FCRA § 615) |
| Statutory Damages (Willful Violations) | $100–$1,000 per violation, plus potential punitive damages (FCRA § 616) |
What the FCRA Is and Who It Covers
The Fair Credit Reporting Act (FCRA) is a federal law, originally enacted in 1970 and significantly amended since, that governs how consumer reporting agencies (CRAs) collect, store, share, and correct information about individuals. The law applies broadly — to the three major national credit bureaus (Equifax, Experian, and TransUnion), as well as to tenant-screening firms, employment background check companies, and other specialty reporting agencies.
Any business or person who uses a consumer report to make decisions about credit, employment, housing, insurance, or certain licenses must have what the FCRA calls a permissible purpose. Using a consumer report for any other reason is a violation of the law.
| Law Enacted | 1970 (significantly amended in 1996 and 2003 by FACTA) (U.S. Congress) |
| Enforcing Agencies | Federal Trade Commission (FTC) and Consumer Financial Protection Bureau (CFPB) |
| Free Reports Per Year | 1 per major bureau (Equifax, Experian, TransUnion) every 12 months (FCRA § 612; AnnualCreditReport.com) |
| Dispute Investigation Window | 30 days standard; 45 days if consumer submits additional information (FCRA § 611) |
| Adverse Action Notice Required | Yes — for credit, employment, housing, and insurance denials (FCRA § 615) |
| Statutory Damages (Willful Violations) | $100–$1,000 per violation, plus potential punitive damages (FCRA § 616) |
For a broader look at how federal law governs the data companies collect on you, see our overview of digital privacy rights.
Your Core Rights Under the FCRA
The FCRA grants consumers several enforceable rights:
- Free annual credit reports: You are entitled to one free report from each major CRA every 12 months, available through the official AnnualCreditReport.com portal established under federal law.
- Right to know when a report is used against you: If a creditor, employer, or landlord takes an adverse action — denying credit, rejecting a rental application, or refusing employment — based on information in your consumer report, they must notify you and identify the CRA that supplied the report.
- Right to dispute inaccurate information: You may dispute any item you believe is inaccurate or incomplete, and the CRA must investigate within 30 days in most cases (45 days if you submitted additional information).
- Right to add a statement: If a dispute is not resolved in your favor, you can request that a brief statement of the dispute be included in your file.
- Right to limit prescreened offers: You may opt out of having your name used for unsolicited credit or insurance offers for five years, or permanently, through the official OptOutPrescreen.com process.
Consumer Reporting Agency (CRA)
Any company that assembles or evaluates consumer information and provides consumer reports to third parties. This includes the major credit bureaus as well as specialty agencies that screen tenants or employees.
Consumer Report
A report containing information about a person's creditworthiness, credit history, character, or personal characteristics used to determine eligibility for credit, employment, housing, or insurance.
Permissible Purpose
A legally recognized reason for obtaining a consumer report under the FCRA, such as evaluating a credit application, verifying employment, or underwriting insurance. Obtaining a report without one is a federal violation.
Adverse Action
A decision that negatively affects a consumer based on information in their credit report — such as denying a loan, raising an insurance premium, or rejecting a job application — triggering required notice under the FCRA.
Furnisher
A business or individual that provides information about consumers to a CRA, such as a bank, credit card company, or lender. Furnishers have their own FCRA obligations to report accurate data and investigate disputes.
Reinvestigation
The formal process a CRA must conduct when a consumer disputes an item on their report. The CRA is required to complete this review within 30 days in most cases and notify the consumer of the outcome.
If debt collectors are also contacting you, the FDCPA sets separate rules about how and when they can reach you.
How to Dispute Credit Report Errors
Errors on credit reports are more common than many people realize — a mistake can range from a misspelled name to an account that belongs to someone else entirely. Here is how the dispute process works under the FCRA:
- Request your reports and review each one carefully. Errors at one bureau may not appear at another.
- Submit a written dispute directly to the CRA that reported the error. Include your identifying information, a clear description of the inaccuracy, and any supporting documents (statements, payment confirmations, identity documents).
- The CRA notifies the furnisher — the lender or company that reported the data — and must investigate within 30 days.
- Results are sent to you in writing. If the dispute succeeds, the CRA must correct or delete the information and send a corrected report to anyone who received the report in the past six months (or two years for employment purposes).
- Dispute directly with the furnisher. You may also send a dispute to the company that furnished the information. Furnishers have independent obligations under the FCRA to investigate and correct errors.
Corrected Information That Keeps Reappearing
A known pattern under FCRA litigation involves inaccurate items being deleted after a dispute, only to reappear on a later report — sometimes called 'zombie data.' If this happens to you, document each occurrence in writing. Repeated reappearance of a disputed item that a CRA previously deleted may support a claim for willful noncompliance under FCRA § 616, which carries statutory and potentially punitive damages. Consult a consumer law attorney if this occurs.
For general guidance on your rights when transactions go wrong, see consumer protections for disputed purchases.
Enforcement and When to Seek Legal Help
The FCRA is enforced by the Federal Trade Commission (FTC), the Consumer Financial Protection Bureau (CFPB), and state attorneys general. Importantly, the law also gives individual consumers a private right of action — meaning you may sue a CRA or furnisher in federal or state court for willful or negligent violations.
Remedies available under the FCRA include actual damages, statutory damages (between $100 and $1,000 per willful violation), punitive damages in serious cases, and attorney's fees if you prevail. Many consumer protection attorneys take FCRA cases on contingency.
If your dispute is ignored, if a CRA fails to investigate, or if corrected information keeps reappearing on your report, those circumstances may support a legal claim. Filing a complaint with the CFPB is also a concrete step that creates a formal record and may prompt a faster response.
For questions that touch on credit scores and managing debt, consulting a nonprofit credit counselor or a licensed financial professional can complement — but not replace — the legal protections the FCRA provides.
This article is for general informational and educational purposes only and does not constitute legal advice. Laws may change, and individual circumstances vary. Consult a qualified attorney for advice specific to your situation.