What Is the Purpose of the Fair Credit Reporting Act?

The purpose of the Fair Credit Reporting Act is to make sure the information collected about your credit is accurate, kept private, shared only with people who have a legitimate reason to see it, and correctable when something is wrong. Enacted in 1970 and codified at 15 U.S.C. § 1681, the FCRA sets the rules that credit reporting agencies, the companies that feed them data, and the businesses that use their reports all have to follow.¹ The three nationwide agencies you’ll hear about most often are Equifax, Experian, and TransUnion, and the reports they produce influence decisions made by lenders, insurers, landlords, and employers.²

The law’s protections fall into a handful of practical categories. Each one addresses a specific way credit reporting can go wrong.

Keeping Your Credit Information Accurate

Credit reporting agencies are required to follow reasonable procedures to ensure the highest possible accuracy of the information in your file.³ That standard is meant to prevent problems like mixing up files between two consumers with similar names or leaving outdated records on your report. An agency that ignores it can be sued.

Accuracy duties reach further than the agencies themselves. The banks, credit card issuers, and other creditors that send data to the agencies, known as furnishers, have to keep their reporting truthful and complete. When a furnisher realizes it sent something wrong, it has to promptly correct that information with every agency it originally reported it to.⁴ So a single error, once discovered, gets cleaned up across the system rather than lingering at one bureau.

Limiting Who Can See Your Report

Your credit report isn’t public. The FCRA restricts access to parties with a specific, legally recognized reason, called a permissible purpose. Those purposes include:

A lender reviewing a loan or credit card application, or looking at an existing account.
An insurer deciding whether to issue or renew a policy.
An employer or prospective employer running a background check, but only after giving you a standalone written disclosure and getting your written consent.⁵
A landlord evaluating a rental application.
A government agency deciding your eligibility for a license or benefit where financial status is relevant by law.
A court with proper jurisdiction, or a federal grand jury subpoena.
You, when you authorize release of your own report in writing.

The employment rule is worth pausing on. The disclosure to you has to sit on its own page, not be buried in a job application, and you have to sign off before the report is pulled.⁶ Without both pieces, the employer isn’t allowed to obtain your report at all.

Agencies have a gatekeeping role too. Before releasing a report, they must take reasonable steps to verify who is asking and confirm the purpose.³ Getting a report under false pretenses is a federal crime.⁷

Your Right to See Your Own File

You are entitled to see everything in your credit file. When you ask for a disclosure, the agency has to give you all information it has on you at that time, tell you where the data came from, and list who has recently requested your report.⁸ Every file disclosure comes with a summary of your rights under the FCRA.⁹

By statute, each of the three nationwide agencies has to give you one free report every 12 months.¹⁰ Beyond that, Equifax, Experian, and TransUnion now offer free weekly reports through AnnualCreditReport.com on a permanent basis, an expansion that began during the pandemic and has been made ongoing.¹¹ You’re also entitled to a free report if an adverse action is taken against you, if you’re unemployed and planning to apply for a job within 60 days, if you’re on public assistance, or if you believe fraud has affected your file.

Limits on How Long Bad Information Can Stay

The FCRA doesn’t let old negative marks follow you forever. Most adverse items, including late payments, collection accounts, and paid tax liens, drop off once they’re more than seven years old.¹² Bankruptcy filings can stay for up to 10 years from the filing date, regardless of chapter.¹³

A few exceptions apply. Criminal convictions can be reported indefinitely, and the time limits don’t apply when you’re being evaluated for a credit transaction or life insurance policy with a face amount of $150,000 or more.¹² For everyday credit decisions, though, the aging-off rules mean past trouble eventually stops counting against you.

Fixing Errors Through the Dispute Process

If you see something on your report you think is wrong, you have the right to dispute it directly with the agency. Once the agency is notified, it has 30 days to investigate. That window can be extended by 15 days, for a total of 45, if you send in additional information during the review.¹⁴

The agency contacts the furnisher that supplied the disputed information. The furnisher reviews its records and reports back on whether the item is accurate, incomplete, or wrong. If the information can’t be verified, or turns out to be inaccurate, the agency has to delete it promptly, and the furnisher has to alert other nationwide agencies it sent the same bad data to.⁴

Protection Against Identity Theft

The FCRA gives you two main tools if you’re worried about identity theft.

A security freeze blocks the agency from releasing your report to new creditors, which stops someone from opening accounts in your name. Placing and lifting a freeze is free.¹⁵

A fraud alert works differently. Instead of blocking access, it flags your file so anyone pulling the report is warned to take extra steps to verify who you are before extending credit. An initial fraud alert lasts at least one year and can be placed by simply telling an agency you suspect you are, or may become, a victim of fraud. An extended fraud alert lasts seven years and requires an identity theft report, such as a police report.¹⁵

If you’ve actually been a victim, you can also ask the agency to block fraudulent accounts from your file. Once you provide an identity theft report, proof of identity, and a statement identifying the fraudulent items, the agency has four business days to block them.

Notice When Your Report Is Used Against You

When a lender, insurer, employer, or landlord uses your credit report to make a decision that hurts you, denying a loan, raising a rate, turning down a rental application, they have to send you an adverse action notice. That notice has to identify the agency that supplied the report, make clear the agency didn’t make the decision and can’t tell you why it was made, disclose the credit score used along with its range and the key factors that hurt it, and tell you that you can get a free copy of your report from that agency within 60 days and dispute anything you think is wrong.¹⁶

Without this notice, you might never know a credit report was involved in a denial or that it contained a mistake worth challenging. It’s one of the law’s most concrete everyday protections.

What Happens When the Law Is Broken

The FCRA is enforceable in court. If a credit reporting agency, furnisher, or user of a report violates the law, you can sue in federal or state court, and what you can recover depends on whether the violation was intentional or careless.

For willful violations, you can recover either your actual damages or statutory damages of $100 to $1,000, whichever is greater. A court can also award punitive damages in whatever amount it considers appropriate, plus attorney’s fees and court costs.¹⁷ If someone obtained your report under false pretenses or without a permissible purpose, the minimum recovery is $1,000 or actual damages, whichever is higher.

For negligent violations, the recovery is limited to actual damages, attorney’s fees, and court costs.¹⁷ Statutory minimums and punitive damages aren’t available, so you’d need to show a real financial harm, like a lost loan or a higher interest rate caused by inaccurate reporting.

There’s a deadline. You have to file suit within two years of discovering the violation, and no more than five years after it happened, whichever comes first.¹⁸ Because credit report errors can go unnoticed for a long time, checking your reports regularly is what keeps both your credit and your legal options intact.

1
Office of the Law Revision Counsel. 15 USC 1681 – Congressional Findings and Statement of Purpose
2
Consumer Financial Protection Bureau. List of Consumer Reporting Companies
3
Office of the Law Revision Counsel. 15 USC 1681e – Compliance Procedures
4
Office of the Law Revision Counsel. 15 USC 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies
5
Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
6
U.S. Equal Employment Opportunity Commission. Background Checks: What Employers Need to Know
7
Office of the Law Revision Counsel. 15 USC 1681q – Obtaining Information Under False Pretenses
8
Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers
9
Consumer Financial Protection Bureau. A Summary of Your Rights Under the Fair Credit Reporting Act
10
Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures
11
FTC Consumer Advice. You Now Have Permanent Access to Free Weekly Credit Reports
12
Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
13
Consumer Financial Protection Bureau. How Long Does a Bankruptcy Appear on Credit Reports?
14
Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy
15
Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
16
Office of the Law Revision Counsel. 15 USC 1681m – Requirements on Users of Consumer Reports
17
Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance
18
Office of the Law Revision Counsel. 15 USC 1681p – Jurisdiction of Courts; Limitation of Actions