Who Tracks All of Your Credit Information: Bureaus, Rights, Disputes

Your credit information is tracked primarily by three national credit bureaus — Equifax, Experian, and TransUnion — along with a wider group of specialty consumer reporting agencies that watch narrower slices of your financial life, such as bank account history, rental payments, insurance claims, and employment records. All of them are private, for-profit companies, not government agencies, and the raw data flows to them from the banks, lenders, landlords, insurers, and other businesses you interact with. Federal law, led by the Fair Credit Reporting Act, sets the rules for what they can collect, who can see it, and how you can push back.

The Three National Credit Bureaus

Equifax, Experian, and TransUnion are the three nationwide bureaus. They are for-profit companies that collect data on hundreds of millions of consumers and sell reports to lenders, insurers, landlords, and other businesses evaluating financial risk. Equifax and TransUnion are publicly traded U.S. corporations; Experian is headquartered in Ireland and listed on the London Stock Exchange.

Your credit file at each bureau typically includes identifying information (name, address, Social Security number), open and closed credit accounts, balances, credit limits, payment history, collection accounts, and public records such as bankruptcies. Most negative information stays on your report for seven years, and bankruptcy can remain for up to ten.¹ Positive information can remain longer.

Each bureau operates independently and pulls data from different sources, so your Equifax file may not match your Experian or TransUnion file. A creditor might report to all three, to only one or two, or to none. That is why checking all three matters when you are hunting for errors.

Specialty Agencies That Track Other Parts of Your Financial Life

The big three are not the whole picture. Specialty consumer reporting agencies track specific types of financial behavior that a standard credit report may miss, and they can decide whether you get a bank account, an apartment, an insurance policy, or a job even when your credit reports look clean.

ChexSystems: Tracks checking and savings account history, including bounced checks, overdrawn accounts, and involuntary account closures. Banks and credit unions commonly check ChexSystems before opening a new account.
LexisNexis: Compiles public records, insurance claims history (through its CLUE database), criminal records, and address history. Insurers and background screening companies use it heavily.
The Work Number (Equifax): Collects employment and income data directly from employers. About 2.9 million employers feed payroll information into this system, and credentialed verifiers such as lenders and background screeners use it to confirm employment and income history.
Tenant screening agencies: Companies like RealPage and CoreLogic track rental payment history, eviction filings, and lease fulfillment. Landlords and property managers pull these when evaluating applications.
Medical payment databases: Specialized firms track outstanding healthcare debts and provide that information to collection agencies and healthcare creditors.

Federal law requires nationwide specialty consumer reporting agencies to give you a free copy of your file once every twelve months, the same way the major bureaus do.² If you have been turned down for a bank account or an apartment, requesting the relevant specialty report is a good first step.

Where the Data Actually Comes From

The agencies do not watch you directly. The raw information comes from “data furnishers” — the banks, credit card issuers, mortgage companies, auto lenders, student loan servicers, collection agencies, utility companies, and other businesses you deal with. When you make a payment, miss one, open an account, or close one, the furnisher sends those details to one or more of the bureaus.

Furnishers are not passive. Under federal regulation, when a furnisher gets notice that you have disputed information, it must conduct a reasonable investigation, review what you provided, and report the results back within the timeframe the FCRA sets.³ If the investigation shows inaccurate data, the furnisher must promptly notify the bureau and correct the record.

Not every creditor reports to all three bureaus, and some smaller lenders and landlords do not report at all. Your credit file could be incomplete in ways that help or hurt you. Credit unions, community banks, and buy-here-pay-here auto dealers vary widely in what they send.

Who Can Legally See Your Credit Report

Bureaus cannot hand your report to anyone who asks. Federal law limits access to parties with a “permissible purpose,” and the statute lists them.⁴ The most common ones:

Lenders evaluating a loan or credit card application, or reviewing an existing account.
Insurers using your credit-based insurance score to set premiums.
Employers checking your report for positions involving financial responsibility or sensitive information.
Landlords assessing whether you are likely to pay rent on time.
Government agencies determining eligibility for a license or benefit that requires evaluating financial responsibility.
A court with proper jurisdiction, or a federal grand jury subpoena.
State or local agencies establishing or enforcing child support.

Employers Have to Ask First

Employers face extra steps. They must give you a written disclosure on a standalone document — not buried in the job application — stating that a consumer report may be obtained, and you must provide written authorization before they can request it.⁴ If the employer decides to take adverse action based on the report, it must give you a copy of the report and a summary of your rights before finalizing that decision.

Hard and Soft Inquiries

When a lender pulls your report because you applied for credit, it creates a “hard inquiry” that shows up on your report and can slightly lower your score.⁵ Soft inquiries, like when you check your own report or a lender prescreens you for an offer, do not affect your score.

How to See What They Have on You

Federal law entitles you to one free credit report from each of the three national bureaus every twelve months.² The only authorized site for these free reports is AnnualCreditReport.com. The three bureaus have also extended a program that lets you check each report once a week for free through the same site.⁶ Equifax is also offering six additional free reports per year through 2026 at the same address.

You are also entitled to a free report whenever a company takes adverse action against you based on your credit, when you are unemployed and plan to apply for a job within 60 days, when you are on public assistance, or when you believe your file contains fraud-related errors.

For specialty agencies, you request the report directly from the agency. Each nationwide specialty agency is required to provide a free file disclosure once every twelve months.

How to Correct or Lock Down Your Information

Disputing Errors

If something on your report is wrong, you can dispute it with the bureau by mail, online, or by phone. A written dispute should include your contact information, the account number in question, a clear explanation of the error, and copies of any documents supporting your position.⁷ The bureau generally has 30 days to investigate, with a possible 15-day extension if you submit additional information during that period. A bureau can decline to investigate a dispute it reasonably determines is frivolous, such as one that does not specify what is being challenged.

You can also dispute directly with the furnisher, which has the same obligation to investigate and correct any inaccuracy it finds.³

Security Freezes

A security freeze blocks the bureau from releasing your report to new creditors, which effectively stops anyone from opening an account in your name. Placing, lifting, and removing a freeze is free by law.⁸ If you request one by phone or online, the bureau must place it within one business day. When you need to lift it temporarily, say to apply for a mortgage, the bureau must remove it within one hour of an electronic or phone request. A freeze does not affect your credit score and does not prevent you from using existing accounts.

One limit worth knowing: a security freeze does not block requests for employment screening, tenant screening, or insurance underwriting. It is aimed at stopping new credit applications.

Fraud Alerts

A fraud alert tells creditors to take extra steps to verify your identity before opening new accounts. An initial fraud alert lasts at least one year and is available to anyone who suspects they are or may become a victim of identity theft.⁹ An extended fraud alert lasts seven years but requires you to file an identity theft report. Unlike a freeze, a fraud alert does not block access to your report; it flags the file so creditors verify identity more carefully.

Your Rights Under Federal Law

The Fair Credit Reporting Act, at 15 U.S.C. § 1681 and the sections that follow, is the primary federal law governing the credit reporting industry.¹⁰ Its core protections:

Bureaus must follow reasonable procedures to keep your file as accurate as possible.
Most negative items must be removed after seven years; bankruptcies after ten.¹
Your report can only be shared with parties who have a legally recognized permissible purpose.⁴
You can dispute inaccurate information and the bureau must investigate, typically within 30 days.
You get at least one free report per year from each nationwide bureau and from nationwide specialty agencies.²

If a bureau or furnisher willfully violates the FCRA, you can sue for actual damages or statutory damages between $100 and $1,000 per violation, plus punitive damages and reasonable attorney fees.¹¹ Even negligent violations can create liability for actual damages and attorney fees.

Extra Rights for Identity Theft Victims

If you are a victim of identity theft, the FCRA adds rights beyond the standard dispute process. You can place a fraud alert or security freeze. You can also ask a bureau to block any information in your file that resulted from the theft, provided you submit proof of identity, an identity theft report, and identification of the fraudulent items.¹² Creditors must provide copies of applications and records tied to fraudulent transactions when you request them in writing, and debt collectors chasing debts you believe were incurred by an identity thief must provide information about the debt when asked.

Federal Enforcement

The Federal Trade Commission enforces the FCRA through investigations, lawsuits, and settlements against bureaus, furnishers, and report users who violate it.¹³ The Consumer Financial Protection Bureau shares enforcement authority and has historically conducted supervisory examinations of the major bureaus and large furnishers. As of early 2026, the CFPB is undergoing significant organizational changes that have reduced its examination activity compared with prior years, though its statutory enforcement authority under the FCRA remains in place.

1
Consumer Financial Protection Bureau. How Long Does Information Stay on My Credit Report
2
Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures
3
eCFR. 12 CFR Part 1022 Subpart E – Duties of Furnishers of Information
4
Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
5
Consumer Financial Protection Bureau. What Is a Credit Inquiry
6
Federal Trade Commission. Free Credit Reports
7
Consumer Financial Protection Bureau. How Do I Dispute an Error on My Credit Report
8
Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report
9
Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
10
Office of the Law Revision Counsel. 15 USC 1681 – Congressional Findings and Statement of Purpose
11
Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance
12
Office of the Law Revision Counsel. 15 USC 1681c-2 – Block of Information Resulting From Identity Theft
13
Federal Trade Commission. Credit Reporting