Your Rights Under the Fair Credit Reporting Act (FCRA)
The Fair Credit Reporting Act gives you specific, enforceable rights over the information on your credit report. It also places strict legal obligations on the companies that collect and report that information. As a data furnisher, we operate under these rules every day. This guide explains what you can demand, who must comply, and what happens when they do not.
What is the Fair Credit Reporting Act?
The Fair Credit Reporting Act (FCRA) is a federal law originally passed in 1970 and codified at 15 U.S.C. 1681 et seq. It is the primary law governing how consumer credit information is collected, shared, and used in the United States. The FCRA regulates three categories of entities: consumer reporting agencies (the credit bureaus), users of consumer reports (lenders, landlords, employers), and furnishers of information (banks, credit card companies, and companies like ours that report account data to the bureaus).
Congress has amended the FCRA several times since 1970, most significantly through the Fair and Accurate Credit Transactions Act of 2003 (FACTA), which added free annual credit report rights, identity theft protections, and stronger furnisher obligations. The Dodd-Frank Act of 2010 transferred enforcement authority to the Consumer Financial Protection Bureau (CFPB). In 2024, the Supreme Court's ruling in Kirtz v. Trans Union LLC expanded consumer rights further by confirming that individuals can sue furnishers directly.
Why does the FCRA matter for your credit?
Without the FCRA, credit bureaus and furnishers would have no legal obligation to report your data accurately, investigate your disputes, or remove information that cannot be verified. The FCRA is why you can pull your credit report for free, why negative items must fall off after 7 years, and why you can sue if a company reports information it knows to be wrong. Every trade line on your credit report exists within the framework of this law.
Your right to access your credit file
Section 609 of the FCRA (15 U.S.C. 1681g) requires each credit bureau to disclose all information in your consumer file upon your request. This includes every trade line, the name and address of every company that furnished the information, and a record of everyone who has requested your credit report within the past 2 years (1 year for employment-related inquiries).
Under FACTA's amendment to the FCRA, you are entitled to one free credit report from each of the three major bureaus (Equifax, Experian, and TransUnion) every 12 months through AnnualCreditReport.com. Since 2020, the bureaus have voluntarily extended this to free weekly reports, though that policy could change. You are also entitled to a free report any time you are denied credit, insurance, or employment based on your credit information, or if you believe your file contains inaccurate information due to fraud.
What should you look for when you pull your report?
Check that every account listed is yours, that the balances and payment statuses are accurate, and that there are no accounts you do not recognize. Pay attention to the date of first delinquency on any negative item because that date determines when the item must be removed under Section 605. If anything is wrong, you have the right to dispute it under Section 611.
Your right to dispute inaccurate information
Section 611 of the FCRA (15 U.S.C. 1681i) establishes your right to dispute any information on your credit report that you believe is inaccurate, incomplete, or unverifiable. When you file a dispute with a credit bureau, the bureau must conduct a reasonable investigation within 30 days. If you provide additional supporting documentation after filing, the bureau gets 45 days instead. If the bureau cannot verify the disputed information with the furnisher, it must delete or modify the item.
The bureau must forward all relevant information you provide to the furnisher within 5 business days of receiving your dispute. This is where the e-OSCAR system comes in. e-OSCAR (Online Solution for Complete and Accurate Reporting) is the electronic system the bureaus use to forward disputes to furnishers. The bureau translates your dispute into a standardized format using a 2-digit reason code and a brief description field. The CFPB has publicly criticized this process, noting that a 2-digit code often cannot convey the specific nature of a consumer's dispute, leading to what the agency called "sham investigations" in a 2025 enforcement report.
What is the difference between disputing with the bureau and disputing directly with the furnisher?
When you dispute through a bureau, your dispute gets compressed into a coded format before reaching the furnisher. When you dispute directly with the furnisher under Section 623(a)(8) of the FCRA (15 U.S.C. 1681s-2(a)(8)), the furnisher receives your full written explanation, supporting documents, and specific details. Direct disputes bypass the e-OSCAR compression and require the furnisher to conduct an investigation based on your actual complaint. For companies that take their FCRA obligations seriously, a direct dispute with full context leads to a more thorough investigation than a coded e-OSCAR notification. You can file a dispute directly with us through our dispute resolution page.
Bureau dispute timeline
What furnishers must do when you dispute
Section 623 of the FCRA (15 U.S.C. 1681s-2) defines the legal duties of data furnishers. Most FCRA guides focus on what bureaus must do. But the furnisher is the company that originally reported the data, and its obligations are equally binding. As a data furnisher ourselves, we operate under Section 623 every time we report a trade line to the bureaus.
Section 623(a) establishes the furnisher's duty of accuracy. A furnisher may not report information to a bureau if it knows or has reasonable cause to believe the information is inaccurate. If a furnisher discovers that information it previously reported is not complete or accurate, it must promptly notify the bureau and provide the corrected data. A furnisher must also report the date of first delinquency on any account that goes into default, because this date controls when the negative item must be removed under Section 605.
Section 623(b) covers what happens when a bureau forwards a consumer dispute. Once the furnisher receives notice of the dispute, it must conduct an investigation, review all relevant information provided by the bureau (including any documentation you submitted), report its findings back to the bureau, and, if the disputed information is found to be inaccurate or unverifiable, direct the bureau to modify or delete it. The statute requires a "reasonable investigation," which means the furnisher cannot simply confirm its original data without actually looking into the dispute. Courts have interpreted "reasonable" to require the furnisher to go beyond its own records when the consumer provides contradicting evidence.
What does a "reasonable investigation" require from a furnisher?
Federal courts have consistently held that a furnisher's investigation must go beyond checking its own database. In Cushman v. Trans Union Corp. (3rd Cir. 1997), the court ruled that merely comparing the disputed data against internal records is not sufficient if the consumer provides specific evidence of an error. The furnisher must consider the information the consumer submitted with the dispute, weigh it against internal records, and reach a conclusion based on both. A furnisher that automatically verifies every dispute without meaningful review exposes itself to liability under Sections 616 and 617. You can read our full investigation procedures on our FCRA policies page.
Can you sue a furnisher directly?
Yes. In Kirtz v. Trans Union LLC (2024), the U.S. Supreme Court resolved a circuit split and confirmed that consumers have standing to sue furnishers directly for violations of Section 623. Before this ruling, some courts held that only the CFPB or FTC could enforce furnisher duties. After Kirtz, a consumer who disputes information with a furnisher and receives an inadequate investigation can bring a private lawsuit for actual damages, statutory damages, and attorney fees. This decision significantly expanded consumer rights and raised the stakes for every company that reports data to the credit bureaus.
How long negative information can stay on your credit report
Section 605 of the FCRA (15 U.S.C. 1681c) sets maximum time limits for how long negative information can remain on your credit report. These limits are absolute. A bureau that continues to report a negative item past its removal date is in violation of federal law, regardless of whether anyone disputes it.
The clock for most negative items starts from the date of first delinquency, not the date the item was reported to the bureau or the date it was sold to a collection agency. This distinction matters because debt collectors sometimes re-report old debts, which can make a 5-year-old collection look like a recent one. The original date of first delinquency cannot legally be changed, and the Metro 2 reporting format includes a specific field for this date.
Maximum reporting periods under Section 605
What happens if your FCRA rights are violated
The FCRA includes two sections that allow consumers to sue when their rights are violated. Section 616 (15 U.S.C. 1681n) covers willful noncompliance, and Section 617 (15 U.S.C. 1681o) covers negligent noncompliance. The difference between the two determines the damages available to you.
What can you recover for a willful violation?
Under Section 616, if a bureau or furnisher willfully fails to comply with the FCRA, you can recover actual damages or statutory damages between $100 and $1,000 per violation (your choice), plus punitive damages as the court determines appropriate, plus reasonable attorney fees and court costs. "Willful" does not require malicious intent. In Safeco Insurance Co. v. Burr (2007), the Supreme Court held that a violation is willful if the company acted with reckless disregard for its FCRA obligations, meaning it knew the law existed and failed to follow a reasonable interpretation of it.
What can you recover for a negligent violation?
Under Section 617, if the violation was negligent rather than willful, you can recover actual damages sustained as a result of the violation, plus reasonable attorney fees and court costs. Statutory and punitive damages are not available for negligent violations. Actual damages can include denied credit, higher interest rates paid, emotional distress, and lost time spent correcting errors.
The statute of limitations for FCRA claims is 2 years from the date you discover the violation, or 5 years from the date the violation occurred, whichever comes first (15 U.S.C. 1681p). This means you do not have unlimited time to bring a claim. If you discover inaccurate reporting and want to preserve your legal options, you should dispute the information promptly and document every step.
Recent FCRA enforcement actions
The CFPB and FTC have pursued significant cases against both bureaus and furnishers in recent years. In 2025, the CFPB fined Equifax $15 million for systemic inaccuracies in consumer files. The agency also issued a report finding that bureau dispute investigations relying solely on e-OSCAR codes failed to meet the "reasonable investigation" standard. These enforcement actions demonstrate that FCRA compliance is actively monitored and that consumers who file complaints with the CFPB contribute to industry-wide accountability.
Key FCRA rights at a glance
Section 609
Access your file
Free credit report from each bureau annually. Full disclosure of all data, sources, and inquiries upon request.
Section 611
Dispute inaccuracies
Bureaus must investigate within 30 days. Unverified information must be deleted. You must be notified of results.
Section 623
Furnisher accountability
Furnishers must report accurately, investigate disputes, and correct errors. You can dispute directly with the furnisher.
Section 605
Time limits on negatives
Most negative items: 7 years. Chapter 7 bankruptcy: 10 years. Hard inquiries: 2 years. Clock starts at first delinquency.
Section 616
Willful violations
$100-$1,000 statutory damages per violation, plus actual damages, punitive damages, and attorney fees.
Section 617
Negligent violations
Actual damages sustained plus reasonable attorney fees and court costs. No statutory or punitive damages.
For the full text of the FCRA, see 15 U.S.C. 1681 at Cornell Law Institute. To file a complaint about a bureau or furnisher, visit the Consumer Financial Protection Bureau. To learn how payment data affects your score, read our guide on payment history. To see our own data accuracy and dispute resolution procedures, visit our FCRA policies page or submit a dispute.