Who Tracks All of Your Credit Information: Bureaus and Creditors

Your credit information is tracked primarily by three nationwide consumer reporting agencies — Equifax, Experian, and TransUnion — along with dozens of specialty reporting companies, the banks and lenders you do business with, and public record vendors who scan court filings. All of them operate under the Fair Credit Reporting Act (FCRA), the federal law that sets the rules for who tracks your credit information, how they can share it, and what you can do to see and correct it.¹

The Three Nationwide Credit Bureaus

Equifax, Experian, and TransUnion are the central hubs of the system.² When you apply for a mortgage, car loan, or credit card, the lender almost always pulls your file from one or more of them. Each bureau independently maintains a database covering hundreds of millions of consumers, and because they collect data separately, the information at Equifax will not always match what sits at Experian or TransUnion.

These companies do not decide whether you get the loan. They sell the raw data; the lender runs it through its own risk model. The FCRA requires the bureaus to follow reasonable procedures to keep the information accurate, verify the identity of anyone requesting a report, and confirm that the requester has a legitimate reason to see it.³

Where the Data Comes From: Your Creditors

The bureaus do not go hunting for your account activity. The companies you borrow from send it to them. Banks, credit card issuers, mortgage servicers, and auto lenders are called data furnishers, and they typically report to the bureaus once a month, on the same cycle as your billing statement. On-time payments get reported. So does a payment that falls 30 days or more past due.

Federal law prohibits a furnisher from reporting information it knows or has reasonable cause to believe is inaccurate.⁴ If a furnisher later discovers it reported something incomplete or wrong, it has to notify the bureau and send a correction. And if you dispute something with the furnisher directly, it cannot keep reporting that item without noting the dispute.

Not every creditor reports to all three bureaus, and some smaller lenders report to none. That is the main reason your three files can look different from each other.

Specialty Consumer Reporting Companies

Outside the big three, a long list of specialty reporting companies tracks narrower slices of your financial and personal life for specific industries. These companies are also governed by the FCRA, and you have the same rights to see and dispute what they hold. The CFPB publishes a public list of them.⁵

Banking history is tracked largely by ChexSystems, which records bounced checks, overdrawn accounts, and involuntary account closures. When you try to open a checking or savings account, many banks pull a ChexSystems report instead of a standard credit report.

Insurance claims are tracked by LexisNexis through the Comprehensive Loss Underwriting Exchange, known as C.L.U.E. The database holds auto and homeowner claim records going back three to seven years, and insurers use it to set premiums and decide whether to offer coverage at all.

Rental history is tracked by several companies that compile eviction records and rent payment patterns. Landlords and property managers routinely check them during tenant screening.

Employment screening companies pull together reports that can include criminal records, past employment, and education history. Employers face extra FCRA rules before they can use these reports to make a hiring decision.

If you have been turned down for a bank account, a lease, or an insurance policy, the fastest way to find out why is often to request the specific specialty report the company used.

Public Records

Bankruptcy filings are the main public record that still shows up on a standard credit report. Bankruptcy courts themselves do not report anything to the bureaus; the filings are public, and third-party data vendors scan court records and sell the information on.⁶

Tax liens and civil judgments used to appear routinely. Starting in 2017, under the terms of a 2015 settlement aimed at cutting errors, the three bureaus began removing most of them. The settlement required public record data to include a consumer’s name, address, and either date of birth or Social Security number, and many court filings did not carry that information. In practice, the public records section of a modern credit report is mostly limited to bankruptcies.

Who Is Legally Allowed to See Your Credit File

The FCRA does not let just anyone pull your report. It lists specific “permissible purposes,” and access outside those situations is prohibited.⁷ The main ones are:

A lender reviewing an application for a loan, credit card, or credit limit increase.
An insurer evaluating an application for auto, homeowner, or life coverage.
An employer considering you for a job, promotion, or reassignment, but only with your written consent.⁸
A landlord assessing whether you can pay the rent.
A court order or federal grand jury subpoena.
Your own written request.
A government agency determining your eligibility for a license or benefit that requires a financial responsibility check.
A state or local child support agency verifying your ability to pay.

Employers have extra steps. They must give you a standalone written disclosure and get your written permission before pulling the report. If they decide not to hire you based on what they see, they have to send you a copy of the report and a summary of your FCRA rights before the final decision, then follow up with a second notice identifying the reporting company.⁹

What Is Actually in Your File

Each bureau’s report on you typically holds four kinds of information. Personal identifying details — your name, addresses, date of birth, and Social Security number — are used to match incoming data to the right file. Account information, often called tradelines, lists each credit account you hold, when it was opened, the limit or loan amount, the balance, and the month-by-month payment history. Inquiries record who has asked to see your report. Public records, as noted above, now mean mostly bankruptcies.

How Long Negative Information Can Stay

The FCRA caps how long bad items can sit on your report:¹⁰

Bankruptcy: up to 10 years from the date of the court order.
Collections and charge-offs: seven years, with the clock starting 180 days after the first missed payment that led to the collection.
Late payments: seven years from the date the payment was missed.
Civil judgments: seven years from entry, or until the statute of limitations expires, whichever is longer. Most are no longer included in practice.
Paid tax liens: seven years from the date of payment, though these too have largely been removed.

Positive information can stay on your report indefinitely, which is why a long record of on-time accounts keeps helping your score even after you close them.

Seeing What They Have on You

Federal law entitles you to a free copy of your report from each of the three nationwide bureaus, and the only site authorized by law to fulfill those orders is AnnualCreditReport.com.¹¹ The original rule was one free report per bureau per year. Since 2023, all three bureaus have permanently made free weekly reports available through the same site.¹²

For a report from a specialty company beyond the free entitlements, the law caps the fee at $14.50.¹³ You are also entitled to a free report whenever a company takes adverse action against you based on your credit — such as denying your application or offering worse terms — and whenever you place a fraud alert.

Fixing What Is Wrong

If something on your report is inaccurate, you can dispute it with the bureau that issued the report. The bureau generally has 30 days to investigate, or 45 if you filed the dispute after requesting your free annual report. The deadline can stretch another 15 days if you submit supporting documents during the investigation.¹⁴

The bureau usually forwards your dispute to the furnisher that originally reported the item, which then has to verify or fix its records. When the investigation ends, the bureau has to send you written results and a free updated copy of your report. You can also go straight to the furnisher. If the furnisher finds the data was wrong, it must notify the bureau and correct the record.⁴

Shutting Access Down: Freezes and Fraud Alerts

If you want to limit who can see your file in the first place, federal law gives you two tools, both free.¹⁵

A security freeze blocks the bureau from releasing your report to anyone new. No new credit account can be opened, by anyone, including you, until the freeze is lifted. A bureau has to place a freeze within one business day of an online or phone request, and lift it within one hour of the same.¹⁶ A freeze does not affect your score and stays in place until you remove it. You can also freeze the file of a child under 16, or of an adult for whom you serve as guardian or hold power of attorney.

A fraud alert is lighter. It tells lenders to take extra steps to verify your identity before opening new credit. An initial alert lasts one year and renews. An extended alert, available if you have filed an identity theft report, lasts seven years and also pulls you from pre-approved credit marketing lists for five. You only have to contact one bureau; it has to notify the other two.

Who Watches the Companies That Watch You

The Consumer Financial Protection Bureau is the primary federal supervisor of the credit reporting industry, with authority to examine both the nationwide bureaus and specialty companies for FCRA compliance.¹⁷ In January 2025 alone, the CFPB issued orders against Equifax and filed a lawsuit against Experian.

Beginning in early 2025, the CFPB went through significant operational changes, including workforce reductions, closed supervisory examinations, and terminated enforcement cases, some of which are the subject of ongoing litigation. The practical reach of federal oversight may be narrower as a result. The Federal Trade Commission still has independent authority to enforce the FCRA, and state attorneys general can bring actions under federal and state consumer protection laws.

Your rights under the FCRA — to free reports, to dispute errors, to freeze your file, to limit who can see it — are written into federal statute and do not rise or fall with any one agency’s enforcement posture.

1
Office of the Law Revision Counsel. 15 USC 1681 – Congressional Findings and Statement of Purpose
2
FTC: Consumer Advice. Free Credit Reports
3
Office of the Law Revision Counsel. 15 USC 1681e – Compliance Procedures
4
Office of the Law Revision Counsel. 15 USC 1681s-2 – Responsibilities of Furnishers of Information to Consumer Reporting Agencies
5
Consumer Financial Protection Bureau. List of Consumer Reporting Companies
6
United States Courts. Bankruptcy Case Records and Credit Reporting
7
Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
8
FTC: Consumer Advice. Employer Background Checks and Your Rights
9
Federal Trade Commission. Using Consumer Reports – What Employers Need to Know
10
Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
11
Annual Credit Report.com. Home Page
12
FTC: Consumer Advice. You Now Have Permanent Access to Free Weekly Credit Reports
13
Consumer Financial Protection Bureau. How Do I Get a Free Copy of My Credit Reports
14
Consumer Financial Protection Bureau. How Long Does It Take to Repair an Error on a Credit Report
15
Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention, Fraud Alerts and Active Duty Alerts
16
FTC: Consumer Advice. Credit Freezes and Fraud Alerts
17
Consumer Financial Protection Bureau. Institutions Subject to CFPB Supervisory Authority