9 Things You May Not Know About the Fair Credit Reporting Act - But Should

When you apply for things like a new credit card, a mortgage or an apartment, the companies you apply with will often request a copy of your credit report from one or more of the three major credit bureaus – Equifax, TransUnion, and Experian. The companies use the information in your credit report as one factor in helping them decide whether to approve your application based on their decision-making criteria.

All of these companies – the lenders and creditors you apply with and the credit bureaus – must operate under laws protecting consumers and how their credit information can be used.

The primary law is the Fair Credit Reporting Act (FCRA). Among other things, the FCRA limits who can access your credit reports and for what purposes. Here are some of the rights provided to consumers under the FCRA:

  1. Credit bureaus must provide your credit report to you when you ask for it.

    If you ask for a copy of your credit report and verify your identity, a credit bureau must provide it to you. Consumers are entitled to one free credit report every 12 months from each of the three major credit bureaus. 

    Ready to get your free credit report? Please review instructions here.

  2. Credit bureaus must limit access to your credit information.

    The only people or companies allowed to access your credit report are those with “permissible purpose.” This means they must have one of many very specific reasons to be checking your credit. That might be because you’ve applied for a loan or credit card, for example, or you’re renting an apartment.

    Who has permissible purpose? Here are some examples:

    • Lenders and creditors you are applying for credit with
    • Lenders who wish to prequalify you for credit or insurance
    • Existing creditors you have a relationship with
    • Debt collection companies to use in collecting payment
    • Insurance companies, to underwrite insurance involving you
    • Employers or prospective employers (with your permission)
    • Rental companies/landlords, phone and utility companies
    • Certain government agencies

    Learn more about permissible purpose and who can access your credit report here.

  3. A potential employer must get your written permission before accessing your credit report.

    You must provide written consent to an employer before the employer can request your credit report from a credit bureau.

  4. Credit bureaus must investigate disputed information and correct or delete inaccurate information.

    If you believe your credit report contains inaccurate or incomplete information and file a dispute with a credit bureau, the bureau must investigate the dispute within a specific period of time. If the investigation finds the disputed information is inaccurate, or if the information can’t be verified, the bureau must correct that information or delete it from your credit report. If an investigation fails to resolve your dispute, you can ask the credit bureau to add a statement to your credit report explaining the matter.

    Have you found inaccurate or incomplete information in your Equifax credit report? Please review instructions on how to file a dispute or visit the Equifax dispute page.

  5. Credit bureaus must delete outdated information after certain periods of time.

    The FCRA specifies how long credit bureaus can keep certain types of information on your credit reports. Negative information generally must be removed after 7 years.

  6. Credit bureaus must remove your name from marketing lists if you ask.

    If you don’t want to receive unsolicited pre-screened offers for credit cards or insurance, you can ask the three nationwide credit bureaus to stop sharing your information for those purposes. Call (888) 5-OPT OUT or visit www.optoutprescreen.com.

  7. Credit bureaus must add fraud and active duty military alerts to your file if you ask.

    If you believe you are a victim of identity theft, you can add a 90-day initial fraud alert to your credit file for free. With a fraud alert, potential lenders and creditors must to take reasonable steps to verify your identity before extending credit in your name. If you are active duty military, you may place a one-year active duty military alert to your file to help guard against identity theft. If you have been a victim of identity theft or fraud and have a police or law enforcement report or a Federal Trade Commission Identity Theft Report, you can add an extended fraud alert to your credit report. An extended fraud alert lasts for seven years.

    Please review more information on how to add fraud and active duty military alerts to your credit report.

  8. Credit bureaus must give you your credit score if you ask.

    There are many different credit scores, and each bureau has its own method of calculating them. You can request your credit score from the major credit bureaus. You may need to pay a fee for this.

  9. If they deny you credit, lenders and creditors must tell you the information they used and where it came from.

    Any potential lender or creditor who uses information in your credit report to deny  your application for credit, insurance or employment, or takes other adverse action against you, must tell you, and must provide the name, address and phone number of the nationwide credit bureau where they got the information.

To read more about your rights under the FCRA, click here for a summary from the Consumer Financial Protection Bureau.

Lock and Alert Logo

Help control who has access to your Equifax® credit report. It's free.

Equifax is helping put you in control of your Equifax credit report. With Lock & Alert, you can quickly and easily lock and unlock your Equifax credit report with a click or swipe, and we’ll send a confirmation alert.1

  1. Locking your Equifax credit file will prevent access to it by certain third parties. Locking your Equifax credit file will not prevent access to your credit file at any other credit reporting agency. Entities that may still have access to your Equifax credit file include: companies like Equifax Global Consumer Solutions which provide you with access to your credit report or credit score, or monitor your credit file; federal, state, and local government agencies; companies reviewing your application for employment; companies that have a current account or relationship with you, and collection agencies acting on behalf of those whom you owe; for fraud detection purposes; and companies that wish to make pre-approved offers of credit or insurance to you. To opt out of such pre-approved offers, visit www.optoutprescreen.com.