The Fair Credit Reporting Act (FCRA) is a federal law that governs how a credit reporting agency (CRA) handles your credit information. It is designed to protect the integrity and privacy of your credit information. The FCRA requires credit reporting agencies—and the entities that report your credit information to them and others—to ensure that your information is fair and accurate, and kept private. The FCRA protects your right to access and correct any inaccuracies in your credit report and provides you with remedies if a credit reporting agency or information furnisher violates your rights.
A CRA is any entity that collects and furnishes credit information about you. A common type of CRA is a credit bureau, such as Transunion, Equifax or Experian. A CRA also includes a company or person who collects and sells your credit information (often in the form of background checks) to landlords, employers, or anyone else who makes a credit decision about you.
A CRA is obligated to:
Upon your request, provide you with the information it has on file about you (called your “file disclosure”), often for free (see Credit Reports & Credit Scores to learn how to get your credit report)
Provide you with your credit score upon your request (you'll most likely have to pay a fee; see Credit Reports & Credit Scores)
Investigate disputed credit information in your file (there are a few exceptions to this rule)
Investigate disputed credit information in your file (there are a few exceptions to this rule)
Refrain from reporting old credit information, usually more than seven to ten years old (see How Long Does Negative Information Stay on Your Credit Report)
Limit disclosure of your credit file to third parties who have a “valid need” (such as a creditor, landlord, or employer), and
Withhold disclosure of your credit information to employers unless you consent.
An “information supplier” is any entity that submits your credit information to a CRA. Usually, that means your creditor. But it could also mean any other third party that you have even a loose credit relationship with, such as a government entity to whom you owe taxes, costs, or fines.
Obligations of an Information Supplier
Must not report to a CRA any information about you that it knows -- has “reasonable cause” to know -- is inaccurate
Has a duty to promptly update and correct any inaccurate information that it previously supplied to the CRA
Must tell you about any negative credit information it reports to a CRA within 30 days
Must notify the CRA when you voluntarily close an account with it, and
Must maintain a “reasonable procedure” to respond to identity theft notices by a CRA, and refrain from reporting information about an account that you previously reported was the result of identity theft.
If you dispute the inaccurate information with your creditor, in writing, it cannot continue to report the wrong information to the CRA until it investigates. It must also notify the CRA of your dispute.
In addition to CRAs and your creditors, anyone who uses your credit information for employment, credit, or insurance purposes is covered by the FCRA. They must:
Obligations of an Information Supplier
Identify the CRA or information supplier who provided the report.
TrustScore 4.8