Under 15 U.S.C. 1681g, disclosures to consumers are mandatory: when you ask a consumer reporting agency for your file, it must hand over all information it has on you at the time of the request, tell you where that information came from, list who has accessed your report, and, if you ask separately, provide your credit score along with the key factors behind it.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers This is the core disclosure section of the Fair Credit Reporting Act, and knowing exactly what an agency owes you makes it easier to catch errors before they cost you a loan approval or a job offer.
What Has to Be in Your File Disclosure
The agency must give you everything in your file at the time of the request.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers In practice that covers open and closed credit accounts, payment history, balances, collection accounts, and public records such as bankruptcies or tax liens. The statute also requires the disclosure to be “clear and accurate,” so an agency cannot bury your data in a format designed to confuse you. Equifax, Experian, and TransUnion each present their reports differently, but all three have to meet that same baseline.
Sources and Inquiry Logs
Alongside the data itself, the agency must identify the sources of the information, which lets you trace any disputed entry back to the creditor or data furnisher that reported it.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers
The disclosure also has to include a record of who pulled your report. For employment-related inquiries, the agency must identify everyone who accessed your file in the past two years. For every other purpose, the window is one year.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers Read this section carefully. A company you don’t recognize can signal an unauthorized pull, a data breach, or identity theft, and each unauthorized access is separately actionable under the FCRA.
Credit Scores Are a Separate Request
Your score is not part of a standard file disclosure. Section 1681g explicitly says agencies are not required to include credit scores when they hand over your file.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers A separate subsection creates the right to request the score on its own. When you do, the agency must provide:
- Your current credit score, or the most recent score previously calculated for a credit-related purpose
- The range of possible scores under the model used
- Up to four key factors that adversely affected your score
- The date the score was created
- The name of the entity that provided or generated the score
The agency also has to include a notice that the score and model it provides may differ from the ones a particular lender actually uses.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers That caveat matters. FICO alone has dozens of industry-specific variants, so a lender pulling your score for an auto loan may see a different number than the one on your credit monitoring dashboard.
Truncating Your Social Security Number
You can ask the agency to leave the first five digits of your Social Security number off the disclosure, and it must comply as long as you provide proof of identity.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers Truncation is consumer-initiated. Agencies don’t do it automatically, so if you’re worried about intercepted mail, you have to ask.
Extra Rights If You’re an Identity Theft Victim
Section 1681g layers additional protections on top of the standard file disclosure for people who believe they’ve been victimized. When you contact a reporting agency and report suspected identity theft, the agency must provide a summary of your rights under the FCRA’s fraud and identity theft procedures.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers
The obligation reaches past the credit bureaus. Any business that extended credit or completed a transaction with the person who stole your identity must give you copies of the application and transaction records within 30 days of your request, at no charge. You’ll need to verify your identity and your claim, typically with a government-issued ID plus either a police report or the standardized identity theft affidavit from the CFPB.1Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers Those records are what you’ll use to document fraudulent accounts for a police investigation or to dispute fraudulent entries with the bureaus.
How to Get the Disclosure and What It Costs
Federal law entitles you to a free credit report every 12 months from each of the three major bureaus. The only authorized source for that free report is AnnualCreditReport.com.2Consumer Advice. Free Credit Reports Don’t contact Equifax, Experian, or TransUnion individually for the annual report; the centralized site handles all three. As of 2025, all three bureaus also offer free weekly online reports through the same site, so you can check far more often than once a year.3Annual Credit Report.com. About This Site
You can request by web, phone, or mail. Online requests involve security questions built from your financial history; mail requests need a completed form plus identifying documents like a driver’s license or utility bill.
Beyond the standard annual or weekly report, you’re entitled to a free disclosure in several other situations:
- Within 60 days of an adverse action notice, if you were denied credit, employment, or insurance based on your report
- If you’re unemployed and plan to apply for a job within the next 60 days
- If you currently receive public welfare assistance
- If you have reason to believe your file contains inaccurate information due to fraud
- If you’ve placed an initial or extended fraud alert on your file
Each of these triggers its own separate right to a free disclosure, independent of the annual report.4Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures If you request a report outside these free categories, the agency can charge a capped fee. The CFPB adjusts the ceiling each year for inflation. For 2026, the maximum charge is $16.00.5GovInfo. Fair Credit Reporting Act Disclosures Some states set lower caps or grant additional free reports on top of what federal law requires.
If an Agency Won’t Comply
Disclosure rights matter because they’re enforceable. If a reporting agency willfully refuses to comply with any requirement under the statute, you can sue for actual damages or statutory damages of $100 to $1,000, plus punitive damages at the court’s discretion, plus attorney’s fees and court costs.6Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance The $100 statutory floor matters because you don’t have to prove a specific dollar loss to recover something. If someone obtains your report under false pretenses, the minimum jumps to $1,000 or actual damages, whichever is greater.
When the violation is negligent rather than willful, you can still recover actual damages plus attorney’s fees and costs, but punitive damages and the $100-to-$1,000 statutory floor aren’t on the table.7Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance The practical difference between the two often turns on whether the agency knew its procedures were deficient or simply failed to catch the problem. Either way, the attorney’s fees provision means a consumer lawyer can typically take the case without you paying upfront.