FCRA

The Fair Credit Reporting Act

The Fair Credit Reporting Act (FCRA) is the federal law that governs how consumer reporting agencies collect, use, and share your credit information. Enacted in 1970 and amended multiple times — including the FACT Act of 2003 and the Dodd-Frank Act of 2010 — the FCRA exists to ensure that credit reporting is fair, accurate, and respectful of your privacy.

Citation: 15 U.S.C. § 1681 et seq. (FCRA sections §§ 601–629).

Congress found that the banking system depends on fair and accurate credit reporting, and that inaccurate reports directly impair the efficiency of that system. The FCRA requires consumer reporting agencies to adopt reasonable procedures for meeting the needs of commerce in a manner that is fair and equitable to consumers — with regard to confidentiality, accuracy, relevancy, and proper utilization of your information.

Key Sections Explained

Permissible Purposes — § 604 [15 U.S.C. § 1681b]

Your credit report cannot be accessed by just anyone. The FCRA limits who may obtain a consumer report to specific "permissible purposes," including: a court order, your written instructions, a creditor evaluating a credit application, employment screening (with your consent), insurance underwriting, license/benefit eligibility, and legitimate business needs initiated by you. A person who obtains a report under false pretenses may face criminal penalties.

Reporting Time Limits — § 605 [15 U.S.C. § 1681c]

Negative information cannot stay on your report forever. The FCRA sets strict time limits: bankruptcies may report for 10 years; civil suits, judgments, arrests, paid tax liens, collections, and charge-offs are limited to 7 years. The 7-year clock starts 180 days after the commencement of the delinquency that led to the collection or charge-off. Exceptions exist for credit transactions of $150,000+ or salaries of $75,000+.

Identity Theft Prevention — § 605A [15 U.S.C. § 1681c-1]

If you suspect identity theft, you can place a fraud alert on your file. An initial fraud alert lasts 1 year; an extended fraud alert (requiring an identity theft report) lasts 7 years. Active-duty military consumers can place an active duty alert lasting at least 12 months. You also have the right to a security freeze — free of charge — that prevents anyone from accessing your report without your authorization.

Your Right to Dispute — § 611 [15 U.S.C. § 1681i]

If you find inaccurate information on your report, you can dispute it directly with the consumer reporting agency. The agency must investigate within 30 days, forward your dispute to the furnisher, and correct or delete the information if it cannot be verified. If the investigation does not resolve the dispute, you can add a brief statement to your file explaining the situation.

Disclosures to Consumers — § 609 [15 U.S.C. § 1681g]

You have the right to know what is in your file. Consumer reporting agencies must disclose all information in your file upon request, along with the sources of that information and anyone who has received your report in the past two years (or one year for employment purposes). You are entitled to one free disclosure per 12-month period.

Furnisher Responsibilities — § 623 [15 U.S.C. § 1681s-2]

The companies that report information about you (creditors, lenders, collection agencies) have legal obligations. They must report accurate information, correct errors, and notify the agency when you dispute information directly with them. They cannot report information they know is inaccurate.

Civil Liability — § 616 [15 U.S.C. § 1681n] & § 617 [15 U.S.C. § 1681o]

If a violation is willful, you can recover actual damages or statutory damages ($100–$1,000 per violation), plus punitive damages and attorney's fees. For negligent violations, you can recover actual damages and attorney's fees. Actions must be brought within 2 years of the violation (or within 2 years of discovery).

Consumer Rights Under the FCRA

• Access your report. You can obtain a free copy from each nationwide bureau every 12 months via AnnualCreditReport.com.
• Know who accessed your file. You can see every entity that pulled your report in the past 1–2 years.
• Dispute inaccurate information. Agencies must investigate within 30 days and correct verified errors.
• Place fraud alerts. Initial (1 year), extended (7 years), and active-duty alerts are free.
• Place a security freeze. Freeze and unfreeze your credit at no cost, preventing unauthorized access.
• Opt out of prescreened offers. You can stop credit and insurance companies from using your report for unsolicited offers.
• Receive adverse action notices. If denied credit, insurance, or employment based on your report, you must be told and given the agency's contact info.
• Seek damages. You can sue for willful or negligent violations, including statutory damages of $100–$1,000 per violation.

Official Sources & References

This page is for educational purposes only and is not legal advice. The FCRA is codified at 15 U.S.C. § 1681 et seq. and has been amended by multiple laws including the FACT Act (2003) and the Dodd-Frank Act (2010).