Credit bureaus are private, for-profit companies that collect records of how you handle debt and other financial obligations, then sell that information to lenders, insurers, landlords, and employers who need to size up financial risk. They don’t decide whether you get a loan. They supply the data that other businesses use to decide. Understanding what credit bureaus are and how they work matters because almost every major financial transaction in your life — a mortgage, a car loan, a credit card, sometimes even a job or apartment — runs through a report one of these companies compiled about you.
The Three Nationwide Credit Bureaus
Equifax, Experian, and TransUnion are the three nationwide consumer reporting agencies that dominate the industry.1Consumer Financial Protection Bureau. Consumer Reporting Companies All three are publicly traded corporations, not government agencies. Each keeps its own independent database, and the information in one bureau’s file will not necessarily match the other two. The main reason: not every creditor reports to all three. A credit card company might send your account data to Equifax and TransUnion but skip Experian, so Experian’s file would be missing that account entirely.
Beyond the big three, specialty reporting agencies focus on narrower slices of your financial life. Some track checking account history, including overdrafts and involuntary closures. Others compile records on apartment rentals, insurance claims, or employment background.2Consumer Financial Protection Bureau. What Are Specialty Consumer Reporting Agencies and What Types of Information Do They Collect? Same business model, narrower audience.
Where the Data Comes From
Most of what a credit bureau knows about you comes from furnishers — the banks, credit card companies, mortgage lenders, and auto lenders that voluntarily report account information to the bureaus.3eCFR. 16 CFR Part 660 – Duties of Furnishers of Information to Consumer Reporting Agencies No federal law forces a lender to send your data to a credit bureau. Most do it anyway because the system runs on reciprocity: a lender that wants to pull reports on applicants generally has to contribute data in return.4Office of the Law Revision Counsel. 15 U.S.C. 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies Because reporting is voluntary, coverage differs from bureau to bureau.
Public records feed into these databases too, though the scope has narrowed. Bankruptcy filings remain a primary data point. Tax liens and civil judgments largely disappeared from credit reports after 2017, when the bureaus adopted stricter standards for public-record data.
What’s Actually in Your File
Your file starts with identifying information the bureau uses to make sure the data belongs to you: full name and any variations you’ve used on credit applications, current and previous addresses, Social Security number, and date of birth.5Consumer Financial Protection Bureau. What Is a Credit Report? Credit bureaus do not collect information about your race, religion, political affiliation, or general medical history.
The heart of the file is your tradelines, one entry for each credit account. Every tradeline shows when the account was opened, the type of account, the credit limit or original loan amount, the current balance, and a month-by-month payment history recording whether you paid on time or fell 30, 60, or 90 days behind.5Consumer Financial Protection Bureau. What Is a Credit Report? Collection accounts appear separately, as do overdue child support obligations reported by a government agency.
Your file also records every time someone checks your credit. A hard inquiry happens when you apply for credit and a lender pulls your report to make a lending decision. Hard inquiries stay on your report for up to two years and can lower your score slightly. A soft inquiry happens when you check your own report, when a lender pre-screens you for an offer, or when an insurer or employer pulls your file for non-lending reasons. Soft inquiries have no effect on your score, and only you can see them.
Who Is Allowed to See Your Report
Federal law restricts credit report access to parties with a specific qualifying reason, called a “permissible purpose.” The common ones are evaluating you for a credit product, underwriting an insurance policy, and screening you for employment or housing.6Office of the Law Revision Counsel. 15 U.S.C. 1681b – Permissible Purposes of Consumer Reports Government agencies can also pull your report when determining eligibility for certain licenses or benefits.
A few of those purposes carry extra protections. Employers cannot pull your credit report without first giving you a standalone written disclosure and getting your written authorization.6Office of the Law Revision Counsel. 15 U.S.C. 1681b – Permissible Purposes of Consumer Reports If they decide not to hire you based partly on the report, they must give you a copy of it and a summary of your rights before finalizing that decision. A growing number of states restrict or ban the use of credit reports in hiring for most positions.
Insurers are another major user. Many auto and homeowners carriers pull credit data to generate a credit-based insurance score, a separate product from the score a lender would see. These insurance scores weigh the same general factors but with different emphasis, and they cannot incorporate personal characteristics like income, age, or marital status.
How Long Negative Information Stays
The Fair Credit Reporting Act caps how long negative information can appear in your file. Most adverse items must be removed after seven years; bankruptcy gets a longer window.7Office of the Law Revision Counsel. 15 U.S. Code 1681c – Requirements Relating to Information Contained in Consumer Reports
- Late payments come off seven years from the date the payment first became delinquent.
- Collection accounts come off seven years from the date of the original delinquency that led to collections.
- Chapter 13 bankruptcy comes off seven years from the filing date.
- Chapter 7 bankruptcy stays for ten years from the filing date.8Consumer Financial Protection Bureau. How Long Does Information Stay on My Credit Report?
- Civil judgments and suits come off seven years from the date of entry, though most have already been removed under current bureau policies.
Medical debt is a moving target. The three major bureaus voluntarily stopped reporting paid medical collections in 2022 and later removed unpaid medical debts under $500. The CFPB finalized a rule in 2024 that would have banned medical debt from credit reports entirely, but a federal court vacated that rule in July 2025 at the joint request of the bureau and the plaintiffs.9Consumer Financial Protection Bureau. CFPB Finalizes Rule to Remove Medical Bills from Credit Reports As of 2026, unpaid medical collections above $500 can still appear on your report if a healthcare provider sends the debt to a collection agency.
From Bureau Data to a Credit Score
The bureaus store the raw data. The scores lenders actually use come from separate scoring models that analyze that data. The two dominant models are FICO and VantageScore. Both produce scores on a 300 to 850 scale, but they weigh the underlying factors differently and have different minimum requirements for producing a score at all.
FICO requires at least one account that has been open for six months and reported to the bureaus within the last six months. Payment history is the largest factor at roughly 35 percent, followed by amounts owed at 30 percent, length of credit history at 15 percent, credit mix at 10 percent, and new credit at 10 percent. VantageScore can produce a score with as little as one month of history and one account reported within the past two years, which makes it more accessible for thin credit files. It weighs payment history even more heavily, around 41 percent, and can incorporate rental payment data where available.
Lenders choose which model to use, and many use industry-specific variations. An auto lender might use a FICO Auto Score that gives extra weight to your history with car loans. A credit card issuer might rely on a bankcard-specific version. This is why the score you see on a free monitoring app rarely matches what a lender pulls during an application. Different model, different data source, different result.
Getting Your Free Credit Reports
Federal law entitles you to one free report every 12 months from each of the three nationwide bureaus, available through the centralized site AnnualCreditReport.com.10Office of the Law Revision Counsel. 15 U.S. Code 1681j – Charges for Certain Disclosures That is the only site authorized under federal law for this purpose. Any other site advertising “free credit reports” is required by statute to disclose that it is not the federally authorized source.
You can actually get reports far more often than once a year. The three bureaus have permanently extended a program that lets you pull your report from each bureau once a week at no cost through AnnualCreditReport.com. Equifax is offering six additional free reports per year through 2026, on top of the standard annual report.11Federal Trade Commission. Free Credit Reports Checking your own report is a soft inquiry and has zero impact on your score.
How to Dispute an Error
If you find something wrong, you have the right to dispute it directly with the credit bureau. You can file online, by phone, or by mail. A written dispute sent by certified mail is the strongest option because it creates a paper trail. Include your name, address, the specific items you are disputing, an explanation of why the information is wrong, and copies of any supporting documents like billing statements or payment confirmations.12Consumer Financial Protection Bureau. How Do I Dispute an Error on My Credit Report?
Once the bureau receives your dispute, it must investigate, typically by forwarding it to the furnisher that originally reported the information. The investigation must be completed within 30 days. That deadline can be extended by up to 15 additional days if you submit new supporting information during the initial 30-day window.13Office of the Law Revision Counsel. 15 U.S. Code 1681i – Procedure in Case of Disputed Accuracy If the bureau cannot verify the disputed item, it must remove or correct it. Send a separate dispute directly to the furnisher as well, because furnishers have their own independent obligation to investigate.
One trap: if a bureau decides your dispute is frivolous, usually because it lacks enough detail to investigate, it can decline to investigate, but it must notify you within five business days of that decision.12Consumer Financial Protection Bureau. How Do I Dispute an Error on My Credit Report? If that happens, resubmit with more specific information about what is wrong and why.
Freezes and Fraud Alerts
A credit freeze, also called a security freeze, locks your file so that no one, including you, can open new accounts in your name until you lift it. Placing and lifting a freeze is free under federal law, and the bureaus must process your request within one business day if you contact them by phone or online, or three business days by mail.14Office of the Law Revision Counsel. 15 U.S. Code 1681c-1 – Identity Theft Prevention; Fraud Alerts A freeze stays in place indefinitely until you remove it. You have to contact each bureau separately to freeze all three files.
A fraud alert is a lighter option. Instead of blocking access to your report, it flags the file so any business reviewing it is supposed to verify your identity before opening new credit. An initial fraud alert lasts one year and can be renewed. You only need to contact one bureau, and that bureau is required to notify the other two.15Federal Trade Commission. Credit Freezes and Fraud Alerts If you have already been a victim of identity theft and have filed a report with the FTC or police, you can place an extended fraud alert that lasts seven years.
The practical trade-off matters. A freeze gives you the strongest protection but requires you to temporarily lift it every time you apply for credit, rent an apartment, or do anything else that triggers a credit check. A fraud alert is easier to manage but relies on creditors actually following through on the verification step.
Your Rights Under Federal Law
The Fair Credit Reporting Act, codified at 15 U.S.C. § 1681, governs how credit bureaus operate. It requires bureaus to follow reasonable procedures for ensuring data accuracy, limits who can access your report, and gives you the right to see what is in your file and challenge anything that is wrong.16Office of the Law Revision Counsel. 15 U.S.C. 1681 – Congressional Findings and Statement of Purpose The Consumer Financial Protection Bureau handles most FCRA rulemaking, while the Federal Trade Commission retains enforcement authority.17Federal Trade Commission. Fair Credit Reporting Act
If a credit bureau or furnisher willfully violates the FCRA, for example by ignoring a valid dispute or failing to correct known errors, you can sue for statutory damages between $100 and $1,000 per violation, plus any actual damages you suffered, punitive damages at the court’s discretion, and attorney’s fees.18Office of the Law Revision Counsel. 15 U.S. Code 1681n – Civil Liability for Willful Noncompliance Even negligent violations entitle you to recover actual damages and legal costs. Those private enforcement rights are how the system stays at least partly accountable to the people whose data it trades in.