Your Rights Under the FCRA: What Every Consumer Should Know
The Fair Credit Reporting Act gives you the right to dispute errors, demand investigation, and sue for violations. Know your FCRA rights before contacting any bureau.
The Fair Credit Reporting Act (FCRA) is a federal law that controls how your credit information is collected, shared, and used. It was enacted in 1970 and has been amended multiple times since, most significantly by the Fair and Accurate Credit Transactions Act (FACTA) in 2003.
This law gives you specific, enforceable rights. If a credit bureau or creditor violates the FCRA, you can sue them in federal court and collect damages. This is not theoretical — consumers win FCRA lawsuits regularly, with statutory damages of $100 to $1,000 per violation plus attorney fees.
Understanding these rights is not optional if you are serious about managing your credit.
The Right to Access Your Credit Reports
Under FCRA Section 612, you are entitled to one free credit report from each of the three major bureaus — Equifax, Experian, and TransUnion — every 12 months through AnnualCreditReport.com.
Since April 2020, the bureaus have extended this to weekly free access. This may revert to annual at some point, so take advantage of weekly checks while available.
You are also entitled to a free report: - Within 60 days of being denied credit, insurance, or employment based on your report - If you are unemployed and plan to apply for jobs within 60 days - If you are on public assistance - If you believe your file contains errors due to fraud
The free report does not include your credit score. Scores are sold separately. But the report itself — the data that drives your score — is free.
The Right to Dispute Errors
FCRA Section 611 gives you the right to dispute any information on your credit report that you believe is inaccurate, incomplete, or unverifiable.
When you file a dispute, the bureau must: 1. Investigate within 30 days (or 45 days if you provide additional information during the investigation) 2. Forward your dispute and all relevant information to the creditor that furnished the data 3. Record the current status of the disputed item as "disputed" 4. Delete or modify the item if the investigation finds it to be inaccurate or unverifiable 5. Notify you of the results in writing within 5 business days of completing the investigation
If the bureau cannot verify the disputed information within the 30-day window, it must be removed. This is the key mechanism that makes disputes effective. The burden of proof is on the bureau and the furnisher, not on you.
How to dispute effectively: - Dispute in writing, sent by certified mail with return receipt - Be specific about what is inaccurate and why - Include any supporting documentation (payment receipts, account statements, court records) - Dispute with the bureau AND directly with the creditor (furnisher) — Section 623 gives you the right to dispute directly with the data furnisher - Keep copies of everything
Online disputes through the bureau websites are faster but create a weaker paper trail. For serious disputes, always use certified mail.
The Right to Know Who Has Accessed Your Report
FCRA Section 609 requires credit bureaus to disclose: - Every entity that has requested your credit report in the past 12 months (for most purposes) - Every entity that has requested your report for employment purposes in the past 24 months - The name, address, and phone number of each entity that received your report
This is how you find out if someone pulled your credit without authorization. An unauthorized hard inquiry is an FCRA violation that you can dispute and potentially sue over.
The Right to Opt Out of Prescreened Offers
Those "pre-approved" credit card offers in your mailbox come from creditors who purchased lists from the credit bureaus. Under FCRA Section 615, you can opt out of these prescreened offers:
- Call 1-888-5-OPT-OUT (1-888-567-8688) to opt out for 5 years
- Mail in the permanent opt-out form to opt out permanently
- Visit OptOutPrescreen.com
Opting out does not affect your credit score. It simply stops your information from being sold for marketing purposes.
The Right to Place a Fraud Alert
If you suspect identity theft, FCRA Section 605A allows you to place a fraud alert on your credit file. There are three types:
Initial fraud alert: Lasts 1 year. Requires creditors to take reasonable steps to verify your identity before opening new accounts. You only need to contact one bureau — it is required to notify the other two.
Extended fraud alert: Lasts 7 years. Requires you to file an identity theft report with the FTC. Provides stronger protections than the initial alert.
Active duty military alert: Lasts 1 year. For active military personnel deployed away from their usual duty station.
The Right to a Credit Freeze
A credit freeze (also called a security freeze) locks your credit report so that new creditors cannot access it. Without access to your report, they cannot approve new accounts in your name.
Under the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018, credit freezes are free at all three bureaus. Before this law, bureaus charged up to $10 per freeze.
Key facts about freezes: - You can freeze and unfreeze your report at any time for free - A freeze does not affect your credit score - A freeze does not prevent you from using your existing credit cards or loans - You can temporarily lift a freeze when you want to apply for new credit - Each bureau must place the freeze within 1 business day of receiving your request
A freeze is the most effective protection against identity theft. If you are not actively applying for new credit, there is no reason not to have a freeze in place.
The Right to Sue for Violations
This is the enforcement mechanism that gives the FCRA real power.
Under FCRA Section 616 (willful noncompliance), you can recover: - Actual damages (provable financial harm) - Statutory damages of $100 to $1,000 per violation - Punitive damages (determined by the court) - Attorney fees and court costs
Under FCRA Section 617 (negligent noncompliance), you can recover: - Actual damages - Attorney fees and court costs
Common violations that lead to successful lawsuits: - Failing to investigate a dispute within 30 days - Reinserting previously deleted information without notifying you - Reporting information that the furnisher knows is inaccurate - Pulling your credit report without a permissible purpose - Continuing to report a debt that has been discharged in bankruptcy
The statute of limitations is 2 years from when you discover the violation, or 5 years from when the violation occurred, whichever is earlier.
Many FCRA attorneys work on contingency — they only get paid if you win. This means you can pursue violations without upfront legal costs.
What the FCRA Does Not Cover
The FCRA is powerful but has limits:
- It does not guarantee that accurate negative information will be removed. If you legitimately missed a payment, the bureau can report it for 7 years.
- It does not set credit scores. FICO and VantageScore are private companies with proprietary algorithms.
- It does not regulate interest rates or lending decisions. The Equal Credit Opportunity Act (ECOA) covers discrimination in lending.
- It does not apply to business credit reports. D&B, Experian Business, and Equifax Business operate under different rules.
How to Use These Rights Strategically
- Pull all three reports. Errors often appear on one bureau but not the others.
- Document everything. Dates, names, reference numbers, copies of letters. If you ever need to escalate to a lawsuit, documentation is everything.
- Dispute in writing. Certified mail creates a legal paper trail that online disputes do not.
- Dispute with the furnisher too. Section 623 disputes go directly to the creditor and create an independent investigation obligation.
- Track the 30-day deadline. If a bureau does not respond within 30 days, the disputed item must be deleted.
- Freeze your reports. It is free, it is effective, and it has zero downside if you are not actively applying for credit.
Frequently Asked Questions
Can a credit bureau refuse to investigate my dispute? Only if the dispute is frivolous — meaning it does not identify the specific information being disputed or provide enough information for the bureau to investigate. If your dispute is specific and supported, they must investigate.
Do I need a lawyer to dispute errors? No. You can dispute directly with the bureaus and furnishers yourself. But if the bureau violates your rights during the process, consulting an FCRA attorney is worthwhile — many offer free consultations.
How long do negative items stay on my report? Most negative items stay for 7 years from the date of the first delinquency. Bankruptcies stay for 7 years (Chapter 13) or 10 years (Chapter 7). Tax liens can stay for 7 years after being paid.
Can a creditor report a debt I already paid? They can report that the debt existed, but the status must be updated to "paid" or "paid in full." If they continue to report it as unpaid or delinquent after you have paid, that is a potential FCRA violation.