The FCRA — your legal rights over your credit report

Your credit report is the financial biography that landlords, lenders, employers, and insurers use to make decisions about you. In the United States, federal law—the Fair Credit Reporting Act, or FCRA—gives you specific, enforceable rights to see that file, to challenge errors in it, and to know who has looked at it and why. Understanding these rights is essential for newcomers to the US, because your credit score and report affect rent approval, car loans, credit cards, job offers, and insurance rates.

What the FCRA Is and Why It Matters

The Fair Credit Reporting Act is a federal law enacted in 1970 and amended several times since. It governs how credit bureaus (also called credit reporting agencies) collect, store, and share information about your financial history. The FCRA also sets rules for who can look at your report and what they must tell you when they do. The FCRA is enforced by the Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC).

Three major credit reporting bureaus maintain files on most Americans: Equifax, Experian, and TransUnion. These bureaus are private companies, not government agencies. They collect information from banks, credit card companies, landlords, debt collectors, and other sources to build a picture of your payment history. This picture is then sold to landlords, employers, lenders, and others who have a legal reason to see it. The FCRA does not force these companies to be correct—but it does require them to investigate errors when you flag them, and it gives you rights if they fail.

Your Right to See Your Credit Report

Getting Your Free Annual Report

Under federal law, you are entitled to one free copy of your credit report from each of the three major bureaus every 12 months. The only official website to request these reports is AnnualCreditReport.com. This site was created jointly by the three bureaus to comply with the law, and it is the only place authorized by the federal government to issue free annual reports. Be cautious: many other websites claim to offer free reports but often come with hidden charges or require you to sign up for paid monitoring services that auto-renew after a trial period.

To request your reports from AnnualCreditReport.com, you will need to provide your name, address, date of birth, and Social Security number (or ITIN if you are not yet eligible for a Social Security number). You can request all three reports at once or one at a time. You can also request them by phone at 1-877-322-8228 or by mail. If you request online, you get immediate access; if you request by phone or mail, the reports will be mailed to you within 15 days.

As a bonus, all three bureaus now offer free weekly reports on AnnualCreditReport.com, even though the law only requires one free annual report. This means you can check your reports much more frequently at no cost. However, note that these reports do not include your credit score; to see your score, you will need to request it separately (often for a fee from the bureaus, though some third-party sites offer free scores).

What Information Is in Your Report

Your credit report includes your name, address, and Social Security number. It also lists your credit accounts (credit cards, loans, mortgages), your payment history on each account, any missed or late payments, collections accounts, public records (such as bankruptcies), and inquiries from companies that have asked to see your report. The report typically does not include your income, employment history, or medical information, though there are specialized consumer reports (such as rental history reports or employment background checks) that may be maintained by other types of consumer reporting agencies.

When you request your report, review it carefully. Look for accounts you do not recognize, incorrect payment statuses, duplicate entries, incorrect personal information, and accounts that should have aged off your report. Negative information (like late payments) typically stays on your report for seven years; bankruptcies may stay for seven to ten years depending on the type. If you find an error, you have the right to dispute it.

Your Right to Dispute and Correct Errors

How to File a Dispute

If you find inaccurate or incomplete information on your credit report, federal law gives you the right to dispute it. This is not a request or a favor; it is a legal right. You can dispute with the credit bureau that is reporting the error, with the original creditor or company that provided the false information (called the furnisher), or with both.

You can dispute online through each bureau's website, by phone, or by mail. Many experts recommend sending a written dispute by certified mail with return receipt, because it creates a paper trail that can be important if you later need to pursue legal action. Your dispute letter should clearly describe the error, explain why it is wrong, and include copies of supporting documents (such as payment confirmations, account closure letters, or identity theft reports). You do not need to use any special form or legal language; clear, factual writing is enough.

What Happens After You Dispute

Once the credit bureau receives your dispute, it is required by law to investigate within 30 days (or 45 days if you provide additional information). The bureau will typically send your dispute to the furnisher (the original source of the information) and ask them to verify whether the information is accurate. Both the bureau and the furnisher have legal obligations to investigate your dispute; this is not optional.

After the investigation, the bureau must send you the results in writing. If the information was inaccurate or cannot be verified, it must be corrected or removed, and you will receive a free updated copy of your credit report. If the bureau determines the information is accurate, it may mark your dispute as verified and the item stays on your report. However, if the bureau fails to investigate properly or refuses to correct an error that is actually wrong, you may have grounds for a legal claim.

Your Right to Know When Your Report Is Used Against You

One of the most important protections under the FCRA is your right to know when information from your credit report has been used to deny you something or to take adverse action against you. An adverse action can include denial of credit (a loan, credit card, or line of credit), denial of housing (a rental application), denial of employment or withdrawal of a job offer, denial of insurance or an increase in insurance premiums, or any other decision made substantially based on information in your credit report.

By law, anyone who takes an adverse action based on your credit report must provide you with an adverse action notice. This notice must include the name, address, and phone number of the credit bureau that supplied the report. It must also tell you that you have the right to request a free copy of your credit report from that bureau within 60 days, and that you have the right to dispute any information you believe is inaccurate. The notice must also give you the specific reason for the adverse action, or tell you how to request the reason within 60 days.

If you receive an adverse action notice and you want to know what is in your credit report, use the contact information provided in the notice or go to AnnualCreditReport.com. Do not simply accept that the information is correct; review your report carefully and dispute any errors you find. An inaccurate report can haunt your financial life for years, so taking action quickly is important.

Your Right to Know Who Is Checking Your Report

The FCRA limits who can access your credit report and for what reasons. Only companies and individuals with a legitimate business purpose can ask to see your report—for example, a lender considering a loan application, an employer checking your background before hiring, a landlord evaluating a rental application, or an insurance company assessing risk. These are called inquiries or pulls.

Your credit report must disclose all inquiries made in the past year (or past two years for employment-related inquiries). Some inquiries are hard pulls, which occur when you apply for credit and the lender checks your full credit report; hard pulls may lower your credit score slightly. Soft pulls are checks that do not affect your score and may not even be shown on reports you request yourself—these include checks by current creditors for account reviews or by companies doing pre-screening for marketing purposes.

If you see inquiries you do not recognize, it could be a sign of identity theft or an unauthorized application. If you believe an inquiry was made without your permission, dispute it with the bureau and consider placing a fraud alert or security freeze on your credit file to prevent future unauthorized access.

Enforcement and Remedies

Filing a Complaint

If a credit bureau, furnisher, or other company violates your FCRA rights, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov. You can also file a complaint with the Federal Trade Commission (FTC) at reportfraud.ftc.gov. These agencies investigate violations and can take enforcement action against companies that break the law.

You also have the right to contact your state's attorney general or consumer protection agency. Some states have their own credit reporting laws that may give you additional protections beyond the federal FCRA.

Suing for Damages

If a credit reporting agency, furnisher, or person using your credit report violates the FCRA, you have the right to sue in state or federal court. There is no fee to file the lawsuit, because you can recover your attorney's fees and court costs from the defendant if you win. This is an important protection for consumers, because it means you can afford a lawyer even if your damages are modest.

The amount you can recover depends on the type of violation. For a willful violation (one that is intentional or reckless), you can recover statutory damages of not less than $100 and not more than $1,000 per violation, plus your actual damages (which can include lost wages, higher interest rates you were charged, or emotional distress) and attorney's fees. For a negligent violation (unintentional but careless), you can recover actual damages and attorney's fees, but not the statutory damages. If the violation was willful and you can prove actual damages, you may be able to recover uncapped damages—meaning there is no ceiling on what you can recover.

Special Circumstances for Immigrants and International Students

If you are an immigrant, international student, or visa holder, you may face challenges building a credit history in the US because you may not have a Social Security number (SSN) yet. To open a credit report, you typically need either an SSN or an Individual Taxpayer Identification Number (ITIN). If you do not have one, apply for an SSN through the Social Security Administration or an ITIN through the IRS. Many banks and credit card companies will help you with this process.

Even if you have no credit history in the US, the FCRA still applies to any report that is created about you. You have the right to request it, dispute errors, and know who is checking it. Building credit as a newcomer takes time—consider getting a secured credit card (where you deposit money that serves as collateral), becoming an authorized user on someone else's account, or getting a credit builder loan. All of these help establish a positive payment history that will improve your credit score.

Remember that your credit history stays with you for years. Even after you move or change jobs, the bureaus have a file on you. Review your report regularly and dispute errors early. The FCRA protects you—use it.