Complete Guide to the Fair Credit Reporting Act

The Fair Credit Reporting Act (FCRA), enacted in 1970 and codified at 15 U.S.C. § 1681 et seq., is the federal law that regulates the collection, dissemination, and use of consumer credit information. It establishes a framework of rights for consumers and obligations for credit reporting agencies (CRAs) and furnishers of information.

FCRA was created to promote accuracy, fairness, and privacy in the credit reporting system. The law recognizes that inaccurate credit information can have devastating consequences—denied loans, higher interest rates, lost employment opportunities, and damaged reputations.

Over the years, FCRA has been amended several times, most notably by the Fair and Accurate Credit Transactions Act (FACTA) in 2003 and the Dodd-Frank Wall Street Reform and Consumer Protection Act in 2010, which transferred rulemaking authority to the Consumer Financial Protection Bureau (CFPB).

FCRA applies to three primary categories of entities:

FCRA grants consumers several important rights designed to ensure accuracy and fairness in credit reporting:

Right to Access Credit Reports

Consumers are entitled to obtain a free copy of their credit report from each nationwide CRA once every 12 months through AnnualCreditReport.com. Additional free reports are available in certain circumstances, such as after adverse action or identity theft.

Right to Dispute Inaccurate Information

If a consumer identifies inaccurate or incomplete information on their credit report, they have the right to dispute it. The CRA must conduct a reasonable investigation, typically within 30 days, and correct or delete information that cannot be verified.

Right to Know Who Accessed Their Report

Credit reports must include a list of entities that have obtained the consumer's report within the past two years (for employment purposes) or one year (for other purposes).

Right to Opt Out of Pre-Approved Offers

Consumers can opt out of receiving pre-screened credit and insurance offers by calling 1-888-5-OPT-OUT or visiting OptOutPrescreen.com.

Right to Sue for Violations

Consumers have a private right of action under FCRA. They can sue CRAs, furnishers, and users of consumer reports for violations, potentially recovering actual damages, statutory damages (for willful violations), and attorney's fees.

Credit reporting agencies have several key obligations under FCRA:

Reasonable Procedures to Ensure Maximum Possible Accuracy

Under 15 U.S.C. § 1681e(b), CRAs must follow reasonable procedures to assure maximum possible accuracy when preparing consumer reports. This is not a guarantee of perfection, but it requires CRAs to implement systems and processes designed to prevent inaccuracies.

Courts have found violations when CRAs fail to implement adequate procedures, ignore red flags, or mechanically verify information without meaningful review.

Reasonable Investigation of Disputes

When a consumer disputes information, the CRA must conduct a reasonable investigation. This typically involves:

• Reviewing all relevant information provided by the consumer
• Forwarding the dispute to the furnisher via ACDV (Automated Consumer Dispute Verification)
• Reviewing the furnisher's response
• Making a determination about the accuracy of the disputed information
• Providing results to the consumer within 30 days (or 45 days in some cases)

Permissible Purpose Verification

CRAs may only furnish consumer reports for permissible purposes as defined in 15 U.S.C. § 1681b. They must have procedures to verify that users have a legitimate purpose before providing reports.

Reinvestigation After Furnisher Notice

If a furnisher notifies a CRA that previously reported information was inaccurate, the CRA must promptly delete or modify the information and may not reinsert it without following specific procedures.

Furnishers of information have obligations under both FCRA and the FCRA Furnisher Rule (Regulation V). Key responsibilities include:

Duty to Provide Accurate Information

Under 15 U.S.C. § 1681s-2(a), furnishers must not report information they know or have reasonable cause to believe is inaccurate. They must also correct and update information when they learn it is inaccurate or incomplete.

Duty to Investigate Disputes

When a CRA forwards a consumer dispute (via ACDV), the furnisher must:

• Conduct a reasonable investigation
• Review all relevant information provided by the CRA
• Report results back to the CRA
• Correct inaccurate information with all CRAs to which it was reported

Duty to Notify CRAs of Disputes

If a consumer disputes information directly with the furnisher (not through a CRA), the furnisher must notify all CRAs to which it reported the information that the information is disputed.

Duty Regarding Identity Theft

Furnishers must have reasonable procedures to respond to identity theft notifications and must not report information resulting from identity theft after receiving proper notice.

Understanding the dispute investigation process is critical for identifying where breakdowns occur:

Step 1: Consumer Files Dispute

The consumer submits a dispute to a CRA, identifying the inaccurate information and providing supporting documentation.

Step 2: CRA Forwards to Furnisher via ACDV

The CRA creates an Automated Consumer Dispute Verification (ACDV) form and sends it electronically to the furnisher. The ACDV includes limited information about the dispute, often using standardized reason codes.

Step 3: Furnisher Investigates

The furnisher is supposed to conduct a reasonable investigation by reviewing its records and any documentation provided by the consumer. In practice, many furnishers conduct only cursory reviews or rely on automated systems.

Step 4: Furnisher Responds

The furnisher reports its findings back to the CRA, typically verifying, modifying, or deleting the disputed information.

Step 5: CRA Provides Results

The CRA must provide written results to the consumer, including a description of the investigation, a copy of the report if changes were made, and notice of the consumer's right to add a statement.

FCRA strictly limits who can obtain consumer reports and for what purposes. Under 15 U.S.C. § 1681b, permissible purposes include:

• Credit transactions: In connection with a credit transaction involving the consumer
• Employment purposes: For employment purposes, with the consumer's written consent
• Insurance underwriting: In connection with underwriting insurance
• Legitimate business need: In connection with a business transaction initiated by the consumer
• Court order or subpoena: In response to a court order or federal grand jury subpoena
• Written instructions from consumer: As instructed in writing by the consumer

Obtaining a consumer report without a permissible purpose is a violation of FCRA and can result in significant liability.

When a user of a consumer report takes adverse action based in whole or in part on information in the report, FCRA requires specific notices to be provided to the consumer.

What is Adverse Action?

Adverse action includes:

• Denial of credit or insurance
• Increase in interest rate or insurance premium
• Denial of employment or promotion
• Reduction in credit limit

Required Notice Contents

The adverse action notice must include:

• Name, address, and phone number of the CRA that provided the report
• Statement that the CRA did not make the adverse decision
• Notice of the consumer's right to obtain a free copy of the report
• Notice of the right to dispute inaccurate information

Failure to provide proper adverse action notices is a common FCRA violation that can result in liability for users of consumer reports.

FCRA violations fall into two categories: negligent noncompliance and willful noncompliance.

Negligent Noncompliance (15 U.S.C. § 1681o)

A violation is negligent when the entity failed to comply with FCRA but did not act knowingly or recklessly. Damages available include:

• Actual damages sustained by the consumer
• Attorney's fees and costs

Willful Noncompliance (15 U.S.C. § 1681n)

A violation is willful when the entity knowingly or recklessly violated FCRA. Willfulness does not require intent to violate the law—reckless disregard of FCRA's requirements is sufficient. Damages available include:

• Actual damages or statutory damages of $100 to $1,000 per violation
• Punitive damages (in appropriate cases)
• Attorney's fees and costs

Common Violations

• Reporting inaccurate information after notice of inaccuracy
• Failing to conduct reasonable investigations of disputes
• Failing to follow reasonable procedures to ensure accuracy
• Obtaining consumer reports without permissible purpose
• Failing to provide required adverse action notices
• Reinserting previously deleted information without proper notice
• Failing to correct information across all CRAs

Calculating damages in FCRA litigation requires careful analysis of the consumer's actual harm and, in willful cases, the appropriate statutory and punitive damages.

Actual Damages

Actual damages can include:

• Lost wages or employment opportunities
• Higher interest rates paid on loans
• Denial of mortgage or auto loan
• Emotional distress and humiliation
• Time and effort spent correcting errors
• Out-of-pocket expenses

Statutory Damages

In willful noncompliance cases, courts may award statutory damages between $100 and $1,000 per violation, even without proof of actual harm. The amount depends on factors such as:

• The nature and extent of the violation
• The defendant's degree of culpability
• The defendant's financial resources
• Whether the violation was isolated or part of a pattern

Punitive Damages

Punitive damages may be awarded in willful noncompliance cases to punish the defendant and deter future violations. Courts consider the defendant's conduct, financial condition, and the need for deterrence.