Who Tracks All of Your Credit Information: Bureaus, Reports, Freezes

Your credit information is tracked primarily by three national credit bureaus — Equifax, Experian, and TransUnion — along with a network of specialty consumer reporting agencies that watch narrower parts of your financial life, such as your checking account history, rental record, insurance claims, and employment and income. All of them are private, for-profit companies, not government agencies, and all of them operate under the Fair Credit Reporting Act, which sets what they can collect, who can see it, and what you can do when something is wrong.

The Three National Credit Bureaus

Equifax, Experian, and TransUnion collect data on hundreds of millions of consumers and sell reports to lenders, insurers, landlords, employers, and other businesses evaluating financial risk. Your file at each bureau typically holds your identifying information (name, address, Social Security number), your open and closed credit accounts, balances, credit limits, payment history, collection accounts, and public records such as bankruptcies.

Most negative information stays on your report for seven years. Bankruptcy can remain for up to ten.¹ Positive information, such as accounts paid on time, can stay even longer.

Each bureau operates independently and pulls from different sources, so your Equifax file may not match your Experian or TransUnion file. A creditor might report to all three, to one or two, or to none. That’s why checking all three matters when you’re hunting errors.

Specialty Agencies That Track Narrower Slices of Your Financial Life

Beyond the big three, specialty consumer reporting agencies track specific behaviors that a standard credit report may not capture. These agencies can decide whether you get a bank account, an apartment, an insurance policy, or a job, even when your credit reports look clean.

ChexSystems tracks checking and savings account history, including bounced checks, overdrawn accounts, and involuntary closures. Banks and credit unions commonly check it before opening a new account.
LexisNexis compiles public records, insurance claims history through its CLUE database, criminal records, and address history. Insurers and background screening companies are frequent users.
The Work Number, owned by Equifax, collects employment and income data directly from employers. About 2.9 million employers feed payroll information into this system, and credentialed verifiers such as lenders and background screeners use it to confirm employment and income.
Tenant screening agencies such as RealPage and CoreLogic track rental payment history, eviction filings, and lease fulfillment records. Landlords and property managers pull these when evaluating rental applications.
Medical payment databases maintained by specialized firms track outstanding healthcare debts and feed collection agencies and healthcare creditors.

Federal law requires nationwide specialty agencies to give you a free copy of your file once every twelve months, just like the major bureaus.² If you’ve been denied a bank account or an apartment, requesting the relevant specialty report is a sensible first step.

Where the Data Actually Comes From

The agencies don’t observe your financial behavior directly. The raw information flows from data furnishers: banks, credit card issuers, mortgage companies, auto lenders, student loan servicers, collection agencies, utilities, and other businesses you deal with. When you make a payment, miss one, open an account, or close one, the furnisher sends the details to one or more bureaus.

Furnishers aren’t passive reporters. Under federal regulation, when a furnisher gets notice that you have disputed information on your credit report, it has to conduct a reasonable investigation, review what you provided, and report the results back within the timeframe set by the Fair Credit Reporting Act.³ If the investigation shows inaccurate data, the furnisher must promptly notify the bureau and correct the record.

Not every creditor reports to all three bureaus, and some smaller lenders or landlords may not report at all. Your file could be incomplete in ways that either help or hurt you. Credit unions, community banks, and buy-here-pay-here auto dealers vary widely in reporting practices.

Who Is Allowed to See Your Credit Report

Bureaus can’t share your report with anyone who asks. Federal law limits access to parties with a “permissible purpose,” defined by statute.⁴ The most common ones:

Lenders evaluating a loan or credit card application or reviewing an existing account.
Insurers using your credit-based insurance score to set premiums.
Employers screening for positions that involve financial responsibility or sensitive information.
Landlords assessing whether you’ll pay rent on time.
Government agencies determining eligibility for a license or benefit that requires evaluating financial responsibility.
A court with proper jurisdiction or a federal grand jury subpoena.
State or local agencies establishing or enforcing child support.

Employer Access Requires Extra Steps

Employers face added requirements before pulling your report. They must give you a written disclosure on a standalone document, not buried in the job application, and you must provide written authorization first. If the employer decides to take adverse action based on the report, it must give you a copy and a summary of your rights before finalizing that decision.⁴

Hard Inquiries and Soft Inquiries

When a lender pulls your report after you apply for credit, it creates a hard inquiry, which appears on your report and can slightly lower your score.⁵ Soft inquiries, such as checking your own report, an employer pulling it with your permission, or a lender prescreening you for an offer, don’t affect your score.

Stopping Prescreened Offers

Lenders and insurers can use your credit information to send unsolicited “firm offers” without your prior consent. You can opt out of prescreened offers for five years by calling 1-888-5-OPTOUT (1-888-567-8688) or through the associated website. To opt out permanently, you have to download, sign, and mail the Permanent Opt-Out Election form.⁶

How to See What They Have on You

Federal law entitles you to one free credit report from each of the three national bureaus every twelve months.² The only authorized site is AnnualCreditReport.com. The three bureaus have also extended a program letting you check each report once a week for free through the same site.⁷ Equifax is offering six additional free reports per year through 2026, available at the same website.

You’re also entitled to a free report whenever a company takes adverse action against you based on your credit, when you’re unemployed and plan to apply for a job within 60 days, when you’re on public assistance, or when you believe your file contains errors due to fraud.

Disputing Errors

If you find something wrong, you can dispute it with the bureau by mail, online, or by phone. A written dispute should include your contact information, the account number in question, a clear explanation of the error, and copies of any documents supporting your position.⁸ The bureau generally has 30 days to investigate, with a possible 15-day extension if you submit additional information during that window. A bureau can decline to investigate a dispute it reasonably determines is frivolous, such as one that doesn’t say which information is being challenged.

You can also dispute directly with the data furnisher. It carries the same obligation to investigate and correct inaccuracies.³

Locking Down Your File: Freezes and Fraud Alerts

If you want to keep new accounts from being opened in your name, federal law gives you two tools.

Security Freezes

A security freeze blocks the bureau from releasing your report to new creditors, which effectively stops anyone from opening an account in your name. Placing, lifting, and removing a freeze is free.⁹ If you request one by phone or online, the bureau must place it within one business day. When you need to temporarily lift the freeze, say to apply for a mortgage, the bureau must remove it within one hour of an electronic or phone request. A freeze doesn’t affect your credit score and doesn’t stop you from using your existing accounts.

One boundary: a security freeze doesn’t block requests made for employment screening, tenant screening, or insurance underwriting. It’s built specifically to stop new credit applications.

Fraud Alerts

A fraud alert tells creditors to take extra steps to verify your identity before opening new accounts. An initial fraud alert lasts at least one year and is available to anyone who suspects they’re or may become a victim of identity theft.¹⁰ An extended alert lasts seven years but requires you to file an identity theft report. Unlike a freeze, a fraud alert doesn’t block access to your report; it flags the file so creditors verify more carefully.

Your Legal Backstop

The Fair Credit Reporting Act at 15 U.S.C. § 1681 and following is the primary federal law over the credit reporting industry.¹¹ It requires bureaus to follow reasonable procedures for accuracy, caps how long most negative items can stay in your file, limits access to parties with a permissible purpose, gives you the right to dispute and have inaccurate data investigated, and entitles you to free annual reports from the nationwide bureaus and specialty agencies.

If a bureau or furnisher willfully violates the FCRA, you can sue for actual damages or statutory damages between $100 and $1,000 per violation, plus punitive damages and reasonable attorney fees.¹² Even negligent violations can produce liability for actual damages and attorney fees.

Extra Rights After Identity Theft

If you’re a victim of identity theft, the FCRA gives you rights beyond the standard dispute process. You can place a fraud alert or security freeze as described above. You can also ask a bureau to block information in your file that resulted from the theft, as long as you submit proof of your identity, an identity theft report, and identification of the fraudulent items.¹³ Creditors have to give you copies of applications and records related to fraudulent transactions if you request them in writing. Debt collectors chasing a debt you believe was incurred by an identity thief also have to provide information about the debt when asked.

Who Enforces the Rules

The Federal Trade Commission enforces the FCRA through investigations, lawsuits, and settlements against bureaus, furnishers, and report users that violate the law.¹⁴ The Consumer Financial Protection Bureau shares enforcement authority and has historically conducted supervisory examinations of the major bureaus and large furnishers. As of early 2026, the CFPB is going through significant organizational changes that have reduced its examination activity compared with prior years, though its statutory enforcement authority under the FCRA remains in place.

1
Consumer Financial Protection Bureau. How Long Does Information Stay on My Credit Report
2
Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures
3
eCFR. 12 CFR Part 1022 Subpart E – Duties of Furnishers of Information
4
Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
5
Consumer Financial Protection Bureau. What Is a Credit Inquiry
6
Consumer Financial Protection Bureau. Can I Make Issuers Stop Sending Me Credit Card Offers in the Mail
7
Federal Trade Commission. Free Credit Reports
8
Consumer Financial Protection Bureau. How Do I Dispute an Error on My Credit Report
9
Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report
10
Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
11
Office of the Law Revision Counsel. 15 USC 1681 – Congressional Findings and Statement of Purpose
12
Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance
13
Office of the Law Revision Counsel. 15 USC 1681c-2 – Block of Information Resulting From Identity Theft
14
Federal Trade Commission. Credit Reporting