What Are My Rights Under the Fair Credit Reporting Act?

Your rights under the Fair Credit Reporting Act cover six practical things: seeing what’s in your credit file, forcing old negative information off it, disputing errors, controlling who can pull your report, getting notice when your credit is used against you, and suing for money damages when any of those rights are violated. The law is codified at 15 U.S.C. § 1681, and it binds the three nationwide credit bureaus, the banks and creditors that feed them data, and every business that pulls a report to make a decision about you. Most people only learn what the FCRA does after something goes wrong. Knowing the rights before that happens is what makes them useful.

Your Right to See Your Credit Report

The three nationwide bureaus must give you a free copy of your report once every 12 months on request, and those requests run through a single site, AnnualCreditReport.com.¹ The bureaus have also permanently extended a program that lets you pull your report at each agency once a week at no charge, which is the practical way most people now monitor their credit.²

You get additional free reports in specific situations: if you’re unemployed and plan to apply for a job within 60 days, if you receive public assistance, or if you believe your file contains errors from fraud.¹ You also get one whenever a company takes adverse action against you based on your credit.

Whatever the trigger, the disclosure must include everything in your file at the time, the sources of that information, and a list of everyone who has requested your report. You can request your credit score separately, though the bureau may charge a reasonable fee for it.³

Your Right to Have Old Negative Information Fall Off

Bad news doesn’t stay forever. Section 1681c sets maximum reporting windows, and the clock runs automatically whether or not you dispute anything.⁴

Seven years for most negative items: late payments, collections, charged-off debts, civil judgments, and paid tax liens. The clock starts from the date the event first occurred or the account first became delinquent.
Ten years for bankruptcy cases, measured from the date the court entered the order for relief. The bureau must also identify which chapter was filed.
No time limit for criminal convictions.

If a negative item is still on your report after its window has closed, you can dispute it and demand removal. This is one of the easier disputes to win because the violation is purely a matter of dates.

Your Right to Dispute Errors

You can challenge any item you believe is incomplete or inaccurate. Once you notify a bureau, it must run a free investigation and finish within 30 days. If it cannot verify the disputed information, it must delete or correct it. You get written results, and if your file changed, an updated copy. If the outcome doesn’t satisfy you, you can add a brief statement of dispute that travels with your report whenever a third party pulls it.⁵

Disputing Directly With the Furnisher

You don’t have to go through the bureau. You can send the dispute straight to the bank, lender, or creditor that furnished the information. Your dispute must identify the specific item, explain why it’s wrong, and include any supporting documents the furnisher requires.⁶ The furnisher has the same 30-day window, and if it finds the information was inaccurate, it must promptly notify every bureau it reported to and provide corrections. Disputing with the bureau and the furnisher at the same time is a common approach because it applies pressure from both sides.

Reinsertion of Deleted Items

A bureau can put deleted information back on your report, but the law makes reinsertion harder than the original reporting. The furnisher must first certify that the information is complete and accurate. The bureau must then notify you in writing within five business days of the reinsertion, tell you which furnisher was involved, and remind you of your right to add a dispute statement.⁷ Reinsertion without those steps is itself a violation.

Your Right to Limit Who Sees Your Report

Access to your credit file is restricted to entities with a “permissible purpose,” meaning a legitimate business reason tied to a transaction you’re involved in.⁸ Lenders evaluating a loan, insurers underwriting a policy, and landlords screening a rental applicant all qualify. A nosy neighbor or an ex-spouse does not.

Employment Screening

Employers face extra steps. Before pulling your report, an employer must give you a clear written disclosure in a standalone document (not buried inside an application) that it may obtain a consumer report, and you must authorize it in writing.⁸ If the employer then plans to take adverse action based on what it finds, it must first send you a pre-adverse action notice with a copy of the report and a summary of your rights, so you have a chance to spot errors before the decision is final.⁹ Plenty of employers skip that step, and it is one of the more common FCRA violations in practice.

Prescreened Credit and Insurance Offers

Bureaus can include your name on marketing lists used for unsolicited credit card and insurance offers. You can opt out by contacting the bureaus, and the opt-out lasts five years. A signed written request makes it permanent.⁸

Your Right to Notice When Your Credit Is Used Against You

When a company denies your application or offers you worse terms because of information in your credit report, it has to tell you. Any person who takes adverse action based on your report must send you a notice identifying the bureau that supplied the report (name, address, and phone number) and informing you of your right to a free copy within 60 days.¹⁰ That applies to lenders denying a loan, insurers charging higher premiums, and landlords rejecting a rental application.

Approval on worse terms can also trigger a notice. Under the risk-based pricing rule, a creditor that offers you materially less favorable terms than what it gives most consumers must send you a notice explaining that your credit information contributed to the pricing. “Materially less favorable” usually means a higher annual percentage rate.¹¹ Many people assume only a denial triggers a notice; a bad rate can trigger one too.

Your Right to Freeze Your File and Block Identity Theft

A security freeze prevents the bureaus from releasing your report for new credit applications, which stops identity thieves from opening accounts in your name. Placing and lifting a freeze is free for all consumers. The bureau must process a phone or online request within one business day, or three business days by mail.¹² A freeze stays in place until you lift it. When you need to apply for credit yourself, a temporary lift by phone or online must be processed within one hour.

A fraud alert is a lighter measure. An initial alert lasts at least one year and requires creditors to take reasonable steps to verify your identity before opening new accounts. If you already have an identity theft report from the police or the FTC, you qualify for an extended alert that lasts seven years. Active-duty military members can place an active duty alert lasting at least 12 months, which also excludes you from prescreened marketing lists for two years.¹²

If an identity thief’s activity already shows up on your report, you can have that information blocked entirely. The bureau must block it once you provide an identity theft report identifying the fraudulent items. A block is a removal based on documented fraud, not an investigation. The bureau may decline to block or may rescind a block if it later determines the information was not actually the result of identity theft, or if you misrepresented the claim.

Your Right to Sue for Violations

The FCRA has real teeth. You can sue a credit bureau, a furnisher, or any other entity that violates the law, in either state or federal court. The deadline is the earlier of two years from when you discovered the violation or five years from when the violation occurred.¹³

What you can recover depends on whether the violation was willful or negligent. For willful violations, you can recover either your actual financial losses or statutory damages between $100 and $1,000 per violation, whichever is greater, plus possible punitive damages for especially egregious conduct, plus attorney’s fees and court costs.¹⁴ For negligent violations, you can recover your actual damages plus attorney’s fees and court costs.¹⁵

The attorney’s fees provision is what makes these cases viable for ordinary consumers. Without it, few people could justify hiring a lawyer to fight a credit bureau over a reporting error. With it, attorneys take FCRA cases knowing the defendant pays their fees if the consumer wins.

You can also file a complaint with the Consumer Financial Protection Bureau, which accepts complaints about credit reporting agencies and forwards them to the company for a response.¹⁶ A CFPB complaint won’t get you damages, but it creates a paper trail and often produces faster responses from bureaus than a dispute alone. For many people, it’s the practical first step before considering a lawsuit.

1
Office of the Law Revision Counsel. 15 U.S. Code 1681j – Charges for Certain Disclosures
2
Federal Trade Commission. You Now Have Permanent Access to Free Weekly Credit Reports
3
Office of the Law Revision Counsel. 15 U.S. Code 1681g – Disclosures to Consumers
4
Office of the Law Revision Counsel. 15 U.S. Code 1681c – Requirements Relating to Information Contained in Consumer Reports
5
Office of the Law Revision Counsel. 15 U.S.C. 1681i – Procedure in Case of Disputed Accuracy
6
Office of the Law Revision Counsel. 15 U.S. Code 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies
7
Office of the Law Revision Counsel. 15 U.S. Code 1681i – Procedure in Case of Disputed Accuracy
8
Office of the Law Revision Counsel. 15 U.S.C. 1681b – Permissible Purposes of Consumer Reports
9
Federal Trade Commission. Using Consumer Reports – What Employers Need to Know
10
Office of the Law Revision Counsel. 15 U.S.C. 1681m – Requirements on Users of Consumer Reports
11
Federal Trade Commission. Using Consumer Reports for Credit Decisions – What to Know About Adverse Action and Risk-Based Pricing Notices
12
Office of the Law Revision Counsel. 15 U.S. Code 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
13
Office of the Law Revision Counsel. 15 U.S. Code 1681p – Jurisdiction of Courts; Limitation of Actions
14
Office of the Law Revision Counsel. 15 U.S.C. 1681n – Civil Liability for Willful Noncompliance
15
Office of the Law Revision Counsel. 15 U.S.C. 1681o – Civil Liability for Negligent Noncompliance
16
Consumer Financial Protection Bureau. Submit a Complaint