What Does FCRA Stand For? The Fair Credit Reporting Act

FCRA stands for the Fair Credit Reporting Act, a federal law Congress passed in 1970 that controls how companies collect, share, and use information about your financial life. It covers the credit bureaus that keep files on you, the banks and lenders that feed those files, and the employers, landlords, and insurers that pull your report to make decisions. The law also gives you a set of enforceable rights: you can see what’s in your file, dispute entries that are wrong, and sue companies that break the rules.

Who the Law Regulates

The FCRA reaches any company that qualifies as a “consumer reporting agency,” meaning a business that regularly gathers or evaluates information about consumers and sells it to third parties.¹ Equifax, Experian, and TransUnion are the familiar names, but specialty agencies also fall under the law, including those that track tenant history, medical payments, check-writing, and insurance claims.

Two other groups carry FCRA duties. Furnishers are the banks, card issuers, and other businesses that report your payment activity to the bureaus. Users are the lenders, landlords, employers, and insurers that pull your report. Any of them can be sued for violating the statute.

What a Consumer Report Contains

A consumer report is a dossier on your financial life. It opens with identifying information: name, Social Security number, date of birth, and prior addresses. The main body tracks your credit accounts, open and closed, with balances, limits, and payment history.

Public records fill out the picture. The statute allows reporting of bankruptcies, civil judgments, paid tax liens, and collection accounts.² In practice the three major bureaus stopped including civil judgments in 2017 over data quality problems, and most tax liens dropped off around the same time. Collections, late payments, and bankruptcies still appear and still matter.

Who Can Pull Your Report

A credit bureau cannot hand your file to just anyone. The FCRA limits access to entities with a “permissible purpose”:

A lender evaluating you for a loan, credit card, or account review.
An insurer underwriting a policy.
An employer running a background check, with your written consent.
A business you’ve approached for a transaction that depends on your finances.
A government agency assessing your fitness for a license or benefit.
Anyone you specifically authorize in writing.
A court with jurisdiction or a federal grand jury subpoena.³

A bureau that releases your report without one of these purposes is breaking the law.

How Long Negative Items Can Stay

The FCRA puts hard time limits on most negative entries. Once the clock runs out, the bureau has to stop reporting the item.

Bankruptcies: 10 years from the date the court enters the order for relief.
Collection accounts and charge-offs: 7 years, measured from 180 days after the delinquency that triggered the collection.
Civil judgments and arrest records: 7 years from entry, or the statute of limitations, whichever is longer.
Paid tax liens: 7 years from the date of payment.
Most other adverse items: 7 years.²

The limits do loosen for high-dollar situations. If you’re applying for credit or life insurance of $150,000 or more, or for a job paying $75,000 or more a year, a bureau is allowed to report older items.² Criminal convictions can be reported indefinitely.

Your Core Rights Under the Law

Free Access to Your File

You’re entitled to a free copy of your credit report from each of the three major bureaus. The statute set the floor at one free report per bureau per year, but the bureaus have made free weekly reports permanently available through AnnualCreditReport.com.⁴ For an additional copy outside that system, an agency can charge no more than $16.00 as of 2026.⁵

Your credit report and your credit score are not the same thing. The law does not require the bureau to include your score with the free report. You can request the score separately, but the agency may charge for it.⁶

Disputing Errors

If something in your report is wrong, you can dispute it directly with the bureau. The bureau then has to run a free reinvestigation and resolve it within 30 days. If you send more information during that window, the bureau gets up to 15 extra days. Anything that can’t be verified must be corrected or deleted.⁷

This is where FCRA matters most in day-to-day life, and also where things most often go wrong. Bureaus process disputes in huge volumes and sometimes rubber-stamp a “verified” answer without a real investigation. If a dispute comes back verified and you still believe the entry is wrong, you can add a short statement to your file, file a complaint with the Consumer Financial Protection Bureau, or sue.

Furnishers have their own duty to investigate. When the bureau forwards your dispute to the bank or lender that reported the item, that furnisher must look into it, review what you submitted, and correct the record with every bureau it reported to if the information turns out to be wrong.⁸ Furnisher investigations are often perfunctory, which is why many FCRA lawsuits go after the furnisher rather than the bureau.

Adverse Action Notices

When a business denies your application or takes another negative action based on your report, it has to tell you. The notice must name the bureau that supplied the report with its address and phone number, state that the bureau itself didn’t make the decision, remind you that you can get a free copy of the report within 60 days, and include the credit score the business relied on.⁹

Freezes and Fraud Alerts

A security freeze blocks the bureaus from releasing your report to new creditors, which stops anyone from opening accounts in your name. Under federal law, placing and lifting a freeze is free, but you have to contact all three bureaus separately.¹⁰ When a legitimate lender needs to pull your credit, you lift the freeze temporarily and put it back afterward.

A fraud alert is a lighter option. An initial alert lasts one year and tells lenders to take extra steps to verify your identity before granting credit. You only need to contact one bureau, which will notify the other two. If you’ve actually been a victim of identity theft and filed a report with the FTC or police, you can place an extended fraud alert that lasts seven years.¹⁰ Active-duty military members have a 12-month active duty alert that also removes them from prescreened credit and insurance offers for two years.¹¹

Extra Protections for Job Background Checks

Employers face the strictest rules of any FCRA user. Before pulling your report, an employer has to give you a written disclosure on a standalone document (not buried in an application) stating that a consumer report may be obtained, and you have to authorize the check in writing.³

If the employer then decides not to hire you (or to fire or demote you) based on the report, two steps are required. First, before taking the adverse action, the employer must give you a copy of the report and a written summary of your FCRA rights so you can spot errors and respond. Only after a reasonable waiting period can the employer follow through with a final adverse action notice.³ Skipping any of these steps creates straightforward grounds for a lawsuit.

Suing for Violations

The FCRA gives you a private right to sue in federal court. There’s no minimum dollar amount, and what you can recover depends on whether the violation was negligent or willful.

For a negligent violation, you can recover your actual damages (whatever financial harm you can prove) plus attorney’s fees and court costs.¹² For a willful violation, you can recover either actual damages or statutory damages between $100 and $1,000 per violation, plus punitive damages and attorney’s fees.¹³ The Supreme Court has held that “willful” includes reckless disregard of the law, not only intentional misconduct, which pulls more conduct into the higher damages range.

You have two years from the date you discover a violation to file suit, with a hard outer limit of five years from the date the violation occurred.¹⁴ The discovery clock doesn’t start until you actually learn about the problem, which is one reason to check your reports regularly. An error you never look at can expire before you know it exists.

1
Office of the Law Revision Counsel. 15 USC 1681a – Definitions and Rules of Construction
2
Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
3
Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
4
Federal Trade Commission. You Now Have Permanent Access to Free Weekly Credit Reports
5
Consumer Financial Protection Bureau. Fair Credit Reporting Act Disclosures
6
Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers
7
Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy
8
Office of the Law Revision Counsel. 15 USC 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies
9
Office of the Law Revision Counsel. 15 USC 1681m – Duties of Users Taking Adverse Actions on the Basis of Information Contained in Consumer Reports
10
Federal Trade Commission. Credit Freezes and Fraud Alerts
11
Consumer Financial Protection Bureau. Fraud Protection Tools to Help Safeguard Servicemembers
12
Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance
13
Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance
14
Office of the Law Revision Counsel. 15 USC 1681p – Jurisdiction of Courts and Limitation of Actions