Fair Credit Reporting Act Explained: Consumer Rights, Credit Reports, and Enforcement

Introduction

The Fair Credit Reporting Act (FCRA) is a U.S. federal law that governs how consumer credit information is collected, shared, and used. The law sets standards for accuracy, privacy, and permissible uses of credit reports and establishes consumer rights to access and dispute information held by consumer reporting agencies and furnishers.

What is the Fair Credit Reporting Act?

The Fair Credit Reporting Act establishes requirements for consumer reporting agencies (commonly called credit bureaus), organizations that provide consumer credit reports, and companies that furnish data to those agencies. Key statutory goals include promoting maximum accuracy and fairness in consumer reporting and protecting consumer privacy. The FCRA is codified in federal law at 15 U.S.C. § 1681 and related sections.

Who and what the FCRA covers

The FCRA applies to several categories of entities and activities related to consumer data:

Consumer reporting agencies

Entities that assemble or evaluate consumer credit information and provide consumer reports to third parties. Major consumer reporting agencies compile credit histories used by lenders, employers, and insurers for permissible purposes.

Users of consumer reports

Companies that use credit reports to make decisions such as credit approvals, employment screening, insurance underwriting, or rental decisions must have a permissible purpose under the FCRA and follow notice requirements when adverse actions occur.

Furnishers of information

Businesses that report account information—such as lenders, credit card issuers, and collection agencies—must not knowingly provide inaccurate data and must investigate disputes forwarded by consumer reporting agencies.

Key consumer rights under the FCRA

Access to credit reports

Consumers are entitled to obtain a free copy of their credit report from each nationwide consumer reporting agency once every 12 months, and additional free reports in certain circumstances (for example, after a denial of credit or suspected fraud).

Right to dispute and reinvestigation

If information is incomplete or inaccurate, consumers may file a dispute with the consumer reporting agency. The agency must investigate the disputed items, usually within 30 days, and correct or remove information found to be inaccurate.

Notice of adverse action

If a decision such as a credit denial, increased interest rate, or employment denial is based on information in a consumer report, the user must provide an adverse action notice that explains the consumer’s rights and identifies the reporting agency involved.

Enforcement and remedies

Enforcement of the FCRA is shared among federal regulators and state authorities. The Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC) supervise compliance and can take enforcement actions. State attorneys general may also enforce the law. Consumers can bring private lawsuits for certain violations, and remedies can include correction of records, statutory damages, and attorney’s fees in defined circumstances.

For official consumer guidance and enforcement information, consult the Consumer Financial Protection Bureau's resources Consumer Financial Protection Bureau.

Common terms and concepts

Permissible purpose

Only certain parties and situations qualify for legally obtaining a consumer report—examples include credit or insurance underwriting, employment screening with prior consent, and collection of an account.

Adverse action

Any action that negatively affects a consumer based in whole or part on information in a consumer report that triggers specific notice requirements to the consumer.

Identity theft and fraud alerts

The FCRA includes provisions that help victims of identity theft, including placing fraud alerts or credit freezes to limit further unauthorized use of credit reports.

How to dispute errors and protect credit information

Steps to dispute a credit report item

Consumers should obtain their report, identify the inaccurate item, and submit a clear dispute to the reporting agency with supporting documentation. Keep records of communications. The reporting agency must investigate and notify the furnisher; outcomes should be provided in writing.

Practical protections

Regularly review credit reports, use fraud alerts or freezes when appropriate, and follow identity-theft recovery plans if accounts are compromised. Employers and lenders must follow FCRA rules when they use consumer reports for decisions.

Limits and exclusions

The FCRA does not cover all types of consumer data or all companies that hold personal information. State laws, other federal statutes, and industry rules may apply in addition to the FCRA. Certain consumer information used for purposes other than credit reporting may be outside FCRA scope.

Frequently asked questions

What is the Fair Credit Reporting Act and who enforces it?

The Fair Credit Reporting Act is a federal law that regulates consumer reporting agencies, furnishers, and users of consumer reports. Enforcement is carried out by federal agencies such as the CFPB and the FTC, and by state attorneys general; consumers also have limited private rights to sue for statutory violations.

How can a consumer get a free credit report?

Consumers are entitled to one free report each year from nationwide consumer reporting agencies; additional free reports may be available following an adverse action, suspected fraud, or if certain public benefits are denied for credit report reasons.

What should be included in a dispute to a credit bureau?

A dispute should clearly identify the disputed item, explain why it is incorrect, and include copies of documents that support the correction request. The bureau is required to investigate and respond within a statutory timeframe.

Does the FCRA regulate credit scores?

The FCRA governs information contained in consumer reports and certain disclosures about credit scores when they are used in consumer decisions, but it does not set the methodologies used by private companies to calculate credit scores.

Can employers use credit reports for hiring?

Employers may use consumer reports for employment purposes only with the applicant's or employee’s written consent and must comply with notice and adverse action requirements under the FCRA.