What Are Consumer Reporting Agencies and Your Rights?

Consumer reporting agencies are companies that collect information about your finances, employment, housing, and insurance history and sell that information to businesses deciding whether to extend you credit, hire you, rent to you, or insure you. Federal law requires them to keep the data accurate, give you free access to your own file, and correct mistakes when you point them out. Equifax, Experian, and TransUnion are the three most familiar, but dozens of specialty agencies track narrower slices of your life, and knowing which ones hold your data is the first step to catching errors before they cost you.

What These Agencies Collect and Who Can See It

The Fair Credit Reporting Act defines a consumer reporting agency as any entity that regularly assembles or evaluates information about consumers for the purpose of selling reports to third parties.¹ Banks, credit card issuers, and other creditors send data about your accounts to the agencies. The agencies compile that data, along with public records like bankruptcies, into a file tied to your name, Social Security number, and address, then sell reports drawn from that file.

A standard credit report is organized into four categories:

Personal identification: legal name, current and former addresses, Social Security number, date of birth.
Account history: every open and closed credit account, with balances, limits, and a month-by-month record of on-time or late payments.
Public records: bankruptcies stay up to ten years; other negative records like civil judgments generally fall off after seven.²
Inquiries: a log of businesses that pulled your report. Hard inquiries from credit applications can affect your score and stay for two years. Soft inquiries are visible only to you.

Not everyone can buy your report. A business must have what the statute calls a permissible purpose, which covers credit evaluation, insurance underwriting, employment screening, and reviewing an existing account.³ Curiosity is not a permissible purpose.

One gap worth knowing about: most utility and telecom companies do not report your on-time payments to the three major bureaus. Paying your electric bill faithfully for a decade probably is not helping your credit score. But if the account goes to collections, that negative mark will almost certainly appear.⁴

The Big Three and the Specialty Agencies

Equifax, Experian, and TransUnion focus on traditional credit data: credit cards, mortgages, auto loans, student loans. Most lenders report to all three, though not always, which is why your reports can differ slightly between bureaus.

Beyond those three, a much larger ecosystem of specialty agencies exists. The CFPB maintains a list of companies that identify themselves as consumer reporting agencies, covering check and bank account screening, employment screening, tenant screening, medical records, personal property insurance, retail, and utilities.⁵ A few examples:

ChexSystems tracks checking account applications, openings, closures, and check-writing history. Banks pull it when you apply for a new account, and a negative record can get you denied.⁶
Tenant screening companies compile eviction records, rental payment history, and sometimes criminal background information for landlords.
Medical information bureaus maintain health and prescription records used by life and health insurers during underwriting.
The National Consumer Telecom & Utilities Exchange tracks utility payment history among its members, who can use that data to decide whether to require a deposit for service.

Your financial footprint is not sitting in only three files. It is spread across many databases, and you have the same rights to access and dispute information at specialty agencies that you have at the big three.

How to Get Your Reports for Free

The three major bureaus have permanently extended a program that lets you pull your report from each bureau once per week for free through AnnualCreditReport.com. Equifax is offering six additional free reports per year through 2026 through the same site.⁷ There is no reason not to use this.

You can request your reports three ways:

Online at AnnualCreditReport.com, after answering identity verification questions. Reports are usually available for immediate download.
By phone at 1-877-322-8228, through an automated system.
By mail, using the Annual Credit Report Request Form sent to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281.⁸

Have your full legal name, Social Security number, date of birth, current mailing address, and any addresses from the past two years ready.⁷ Mail requests must be fulfilled within 15 days.⁹

Specialty agencies work differently. Each has its own request method, and the CFPB list includes contact details for each one.⁵ They too must give you one free report per year on request.

Fixing Errors on Your Report

Finding an error is not unusual, and the dispute process is straightforward. File your dispute directly with the reporting agency online, by phone, or by mail. Include copies (not originals) of any documents that support your claim. Once the agency receives the dispute, it generally has 30 days to investigate.¹⁰

Two situations extend that deadline to 45 days: filing shortly after receiving your free annual report, or submitting additional supporting documents during the investigation. After the investigation, the agency has five business days to notify you of the results.

If the investigation does not go your way and you still believe the information is wrong, you can add a brief statement of up to 100 words to your file explaining your side. That statement will travel with future reports the agency issues.

A protection that matters: if a disputed item is deleted from your file and the agency later wants to put it back, the agency must first get certification from the furnisher that the information is complete and accurate. Then the agency must notify you in writing within five business days of the reinsertion, identify who furnished the data, and remind you of your right to add a dispute statement.¹¹ Deleted items cannot quietly reappear.

Freezes and Fraud Alerts

A security freeze and a fraud alert are both identity theft tools, but they work differently. A freeze blocks all access to your credit report, so no one (including you) can open new accounts until you lift it. A fraud alert leaves your report accessible but tells lenders to verify your identity before approving anything.¹²

Both are free under federal law. A freeze stays in place until you remove it, and you can lift it temporarily when you need to apply for credit. Phone and online lift requests must be honored within one hour. Mail requests take up to three business days.¹³ The catch: you have to contact each bureau separately. Freezing your Experian file does not freeze Equifax or TransUnion.

Fraud alerts come in three forms:

An initial fraud alert lasts one year and is renewable. You only need to contact one bureau, and it must notify the other two.
An extended fraud alert lasts seven years and is available if you have filed an identity theft report.
An active duty alert lasts one year and is renewable for the length of a military deployment.¹⁴

A freeze is stronger protection. If you are not actively applying for credit, a freeze at all three bureaus is the better choice. Fraud alerts make more sense if you are shopping for a loan and need lenders to keep accessing your report.

What to Do If You Are Denied Based on Your Report

When a business denies your application for credit, insurance, or employment based on information in a consumer report, it must send you an adverse action notice. The notice must include:

The name, address, and phone number of the agency that provided the report
A statement that the agency did not make the decision and cannot explain why it was made
Your credit score, if one was used
Notice of your right to a free copy of the report within 60 days
Notice of your right to dispute inaccurate information¹⁵

That 60-day free report is separate from your weekly free reports through AnnualCreditReport.com. You request it directly from the agency named in the notice.¹⁶ Denials are often where disputes start: pull the report, spot the error, file the dispute. Ignoring the notice leaves a free investigation on the table.

When You Can Sue

The FCRA has real enforcement teeth. If an agency or furnisher willfully violates the law, you can sue for statutory damages between $100 and $1,000 per violation, plus any actual damages you suffered. Courts can also award punitive damages and require the violator to pay your attorney’s fees.¹⁷

Even when a violation is negligent rather than intentional, you can still recover actual damages and attorney’s fees.¹⁸ The willful/negligent distinction matters because willful violations unlock the statutory damages range and punitive damages. An agency that repeatedly ignores your dispute or reinserts deleted information without following the reinsertion rules faces more serious exposure than one that makes a good-faith procedural mistake.

The CFPB and FTC also have enforcement authority, but individual FCRA lawsuits are common, and the attorney’s fees provision means lawyers will sometimes take these on contingency. Documented disputes, dated correspondence, and copies of the errors you flagged are what a claim is built on. Keep everything.

1
GovInfo. 15 U.S.C. 1681a
2
Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
3
Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
4
Consumer Financial Protection Bureau. Does My History of Paying Utility Bills Go in My Credit Report
5
Consumer Financial Protection Bureau. List of Consumer Reporting Companies
6
Consumer Financial Protection Bureau. Chex Systems, Inc.
7
Federal Trade Commission. Free Credit Reports
8
Annual Credit Report.com. Getting Your Credit Reports
9
Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures
10
Consumer Financial Protection Bureau. How Long Does It Take to Repair an Error on a Credit Report
11
Office of the Law Revision Counsel. 15 U.S. Code 1681i – Procedure in Case of Disputed Accuracy
12
Consumer Advice – FTC. Credit Freezes and Fraud Alerts
13
Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report
14
Military OneSource. FTC Active-Duty Fraud Alert
15
Office of the Law Revision Counsel. 15 U.S. Code 1681m – Requirements on Users of Consumer Reports
16
Consumer Financial Protection Bureau. How Do I Get a Free Copy of My Credit Reports
17
Office of the Law Revision Counsel. 15 U.S. Code 1681n – Civil Liability for Willful Noncompliance
18
Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance