Credit reporting agencies are private, for-profit companies that collect your financial history from creditors and package it into reports sold to lenders, landlords, insurers, and employers. They are not government bodies, and they do not decide whether you get approved for anything. Three nationwide bureaus dominate the field, but dozens of specialized agencies track narrower slices of your financial life. The Fair Credit Reporting Act gives you enforceable rights over all of them: to see your file, dispute errors, block new access, and sue when they break the rules.
The Three Nationwide Bureaus
Equifax, Experian, and TransUnion are the three major nationwide consumer reporting companies in the United States.1Consumer Financial Protection Bureau. Companies List Each maintains its own independent database. A creditor might report your account to all three, to two of them, or to just one, which is why your report can look different at each bureau. That inconsistency is normal, and it is the main reason checking all three matters. The bureaus make money by selling reports, scores, and analytics to businesses that need to assess consumers.
Specialized Agencies Beyond the Big Three
Plenty of consumer reporting happens outside the big three. ChexSystems focuses on banking history, recording events like involuntary account closures and bounced checks that can keep you from opening a new checking or savings account.2America’s Credit Unions. ChexSystems Reports Rental history bureaus track lease violations, eviction filings, and rent payment patterns. Utility reporting agencies track whether you pay your electric, gas, and water bills on time. Insurance companies use agencies like LexisNexis to pull your claims history when setting auto or homeowners premiums.
All of these specialized agencies fall under the same federal law as the nationwide bureaus, so you have the same rights to accuracy, access, and disputes.1Consumer Financial Protection Bureau. Companies List If you have been denied a checking account, a rental, or an insurance policy for reasons you do not understand, a specialized agency’s report is often the reason, and you can request a copy and challenge what it says.
What’s in Your Credit File
A credit report is built from four main categories of information. Personal details (name, address history, Social Security number, date of birth) are used to match incoming data to the right file. Account information — sometimes called tradelines — forms the core: each entry shows the creditor’s name, the account type, your credit limit or loan amount, your balance, your payment history, and whether the account is open or closed.
Public records fill in the rest. Bankruptcy filings are the most common. Inquiries are recorded too. When you apply for new credit, the lender’s pull shows up as a hard inquiry, which can lower your score slightly before fading over about a year and dropping off entirely after two. When you check your own credit or a landlord runs a background check, it is a soft inquiry and does not affect your score.
How Long Negative Information Stays
Federal law caps how long adverse items can appear. The limits come from 15 U.S.C. § 1681c.3Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
- Late payments: up to seven years from the date you first fell behind.
- Collections and charge-offs: up to seven years from the original delinquency.
- Chapter 7 bankruptcy: up to ten years from the filing date.
- Chapter 13 bankruptcy: up to seven years from the filing date.
- Paid tax liens: up to seven years from the payment date.
- Civil judgments: up to seven years from entry, or until the statute of limitations expires, whichever is longer.
One exception: for credit transactions above $150,000, life insurance policies above $150,000, or jobs paying $75,000 or more per year, these time limits do not apply, and older negative information can still be reported.
Your Rights Under the Fair Credit Reporting Act
The FCRA, codified at 15 U.S.C. § 1681, is the federal law that governs what bureaus can collect, who can see it, and what you can do when something goes wrong.
Who Can Pull Your Report
A bureau cannot hand your report to just anyone. The requester must have a “permissible purpose.” The common ones include reviewing your application for credit, insurance underwriting, employment screening with your written consent, collecting a debt you owe, and processing a business transaction you initiated.4Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports Government agencies can also pull reports for child support enforcement and certain licensing decisions. Without a qualifying reason, accessing your report is illegal.
Seeing Your File
Every bureau must, on your request, disclose all the information in your file: every tradeline, every inquiry, and the sources of the data. The bureau must also tell you who has requested your report for employment purposes during the past two years, and who has pulled it for any other purpose during the past year.5Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers
Adverse Action Notices
When a lender, insurer, or other business denies your application or offers worse terms based on your credit report, it must send you an adverse action notice. That notice must include the bureau’s name and contact information, a statement that the bureau did not make the decision and cannot explain it, your right to request a free copy of your report within 60 days, and your right to dispute inaccurate information.6Office of the Law Revision Counsel. 15 USC 1681m – Requirements on Users of Consumer Reports If a credit score was used, the notice must include that score too. This is often how people first learn about errors on their reports.
Employment Screening
Employers face extra rules. Before pulling your credit report, an employer must give you a clear, standalone written disclosure that it plans to use a consumer report in making employment decisions, and it must get your written consent. The disclosure cannot be buried inside a job application.7Federal Trade Commission. Using Consumer Reports: What Employers Need to Know If the employer decides to take adverse action based on the report, it must give you a copy of the report and a summary of your rights before finalizing the decision, giving you time to respond.
How to Dispute Errors
If you spot an error, you can dispute it directly with the bureau. The bureau must investigate for free and resolve the dispute within 30 days of receiving your notice. If you submit additional supporting information during that window, the bureau gets an extra 15 days.8Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy Disputes filed after requesting your free annual report can extend the timeline to 45 days.9Consumer Financial Protection Bureau. How Long Does It Take to Repair an Error on a Credit Report
After the investigation, the bureau must notify you of the results within five business days and provide an updated copy of your report if changes were made. That updated copy does not count against your free annual report. If the creditor that furnished the incorrect data corrects it, it must forward that correction to every bureau it originally reported to. If the bureau refuses to fix the error, you have the right to add a brief statement to your file explaining your side.
Free Reports, Freezes, and Fraud Alerts
Federal law entitles you to one free credit report per year from each nationwide bureau through a centralized source.10Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures That source is AnnualCreditReport.com, the only site authorized to fulfill free annual requests.11Federal Trade Commission. Free Credit Reports You can also request reports by calling 1-877-322-8228 or mailing a request form. In practice, all three bureaus have permanently extended a program that lets you pull your report from each bureau once a week at no cost through the same site.12Federal Trade Commission. You Now Have Permanent Access to Free Weekly Credit Reports Equifax is offering six additional free reports per year through 2026 on top of that weekly access.
A security freeze goes further than monitoring. It blocks new creditors from accessing your report entirely, which stops most identity thieves from opening accounts in your name. Placing and lifting a freeze is free under federal law, and there is no limit on how many times you can freeze and unfreeze.13Federal Trade Commission. Credit Freezes and Fraud Alerts You must place the freeze separately with each of the three bureaus. If you need to apply for new credit, you temporarily lift the freeze, let the lender pull your report, and refreeze afterward. A freeze is also the only option for protecting a minor child’s file.
A fraud alert is less restrictive. Instead of blocking access, it flags your file so any creditor reviewing it must take extra steps to verify your identity before opening an account. An initial fraud alert lasts one year and is free. You only need to contact one bureau, which must relay the alert to the other two.14Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts If you are an identity theft victim with a police report or similar documentation, you can place an extended fraud alert that lasts seven years. Active duty military and National Guard members can place a free active duty alert.
Suing for Violations
If a bureau or a company that furnishes data to one violates the FCRA, you can sue. What you can recover depends on whether the violation was deliberate or careless.
For willful violations, you can recover either your actual damages or statutory damages between $100 and $1,000 per violation, whichever is greater. On top of that, a court can award punitive damages in whatever amount it considers appropriate, plus attorney’s fees and court costs.15Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance For negligent violations, you can recover your actual damages plus attorney’s fees and costs, with no statutory minimum and no punitive damages.16Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance
The practical difference matters. In willful cases, the statutory minimum means you do not have to prove a specific dollar amount of harm. In negligence cases, you do, which often decides whether a lawsuit is worth pursuing. Anyone who obtains your report under false pretenses or knowingly without a permissible purpose faces a minimum of $1,000 or actual damages, whichever is greater.
Medical Debt: What’s Currently Reportable
Medical debt reporting has been in flux, and the current rules are narrower than many people assume. In 2023, the three major bureaus voluntarily stopped reporting medical debts under $500 and removed records of medical debts that had already been paid. A federal rule finalized in January 2025 would have banned medical debt from credit reports entirely, but a federal court vacated that rule in July 2025 after the CFPB and the plaintiffs agreed it exceeded the bureau’s statutory authority under the FCRA.17Consumer Financial Protection Bureau. Prohibition on Creditors and Consumer Reporting Agencies Concerning Medical Information (Regulation V)
The current standard is the 2023 voluntary industry policy: paid medical debts and unpaid medical debts under $500 should not appear on your reports from the big three, but unpaid medical debts above $500 still can. If you see a medical collection that falls below the threshold or was already paid, dispute it using the process above.