Your FCRA Rights: What the Fair Credit Reporting Act Means for You

What Is the FCRA?

The Fair Credit Reporting Act (FCRA) is a federal law enacted in 1970 and significantly updated in 2003. It governs how consumer reporting agencies (credit bureaus) collect, store, and share your financial information. It also sets strict rules for the businesses that use your credit reports.

Your Core FCRA Rights

1. Right to Access Your Credit Report

You are entitled to one free credit report every 12 months from each of the three major bureaus — Equifax, Experian, and TransUnion — through AnnualCreditReport.com. You also have the right to a free report if:

• You were denied credit, insurance, or employment based on your report
• You are unemployed and plan to apply for a job within 60 days
• You are on public assistance
• You believe your report contains errors due to fraud

2. Right to Dispute Inaccurate Information

If you find an error on your report, you have the right to dispute it. The bureau must investigate your dispute — typically within 30 days — and correct or delete information that cannot be verified. You can dispute directly with the bureau and with the original creditor (called a furnisher).

3. Right to Know Who Accessed Your Report

Your credit report includes an inquiry section listing everyone who has accessed your report. You have the right to see this list and to know the purpose of each inquiry.

4. Right to Outdated Information Removal

Negative information cannot stay on your report forever. The FCRA mandates these maximum reporting periods:

5. Right to Consent for Employment Checks

Employers must obtain your written permission before pulling your credit report. If they take adverse action (decline to hire, fire, or demote you) based on your report, they must give you a copy of the report and a written summary of your rights.

6. Right to Place a Security Freeze

You can freeze your credit at each bureau for free. A freeze prevents new creditors from accessing your report, making it nearly impossible for identity thieves to open new accounts in your name. You can thaw and re-freeze at any time.

7. Right to Place a Fraud Alert

If you suspect fraud, you can place a free fraud alert lasting one year (or seven years for identity theft victims). Lenders must take extra steps to verify your identity before extending new credit.

What Creditors Must Do Under FCRA

Not just bureaus — any business that furnishes data to bureaus (creditors, debt collectors, landlords) must follow FCRA rules. They must:

• Report accurate information
• Investigate disputes you send directly to them
• Correct or delete inaccurate data within 30 days
• Notify you before reporting negative information (in some cases)

How to Enforce Your FCRA Rights

Step 1: Get Your Reports

Pull all three reports from AnnualCreditReport.com. Review every account, inquiry, and personal data entry.

Step 2: Document Errors

Highlight any inaccurate, incomplete, or unverifiable items. Note the bureau, account name, account number, and nature of the error.

Step 3: File a Dispute

Submit disputes in writing (certified mail with return receipt is best) to the bureau and the furnisher. Include supporting documentation.

Step 4: Track the Timeline

The bureau has 30 days (45 if you provide additional information) to complete its investigation. Keep copies of everything.

Step 5: Escalate if Needed

If the bureau fails to investigate or refuses to correct a genuine error, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov, and you may have the right to sue in federal court.

FCRA Violations and Remedies

Willful FCRA violations allow you to sue for actual damages, statutory damages of $100–$1,000 per violation, punitive damages, and attorney fees. Even negligent violations allow recovery of actual damages and attorney fees. Many consumer rights attorneys take FCRA cases on contingency.