The Fair Credit Reporting Act, or FCRA, is the federal law for information used in consumer reports. It covers how those records are collected, accessed, and shared. Its stated goals are accuracy, fairness, and privacy. If you are looking at an unfamiliar account or a possible error on your report, this is the law that frames your options.

What the FCRA covers

The law is codified at 15 U.S.C. § 1681 and the sections that follow. Most people link it only to Experian, Trans Union, and Equifax, the three national credit reporting agencies. The statute reaches further than that.

Private investigators, detective agencies, collection agencies, inspection bureaus, companies that sell information to insurers or support background checks, and even some college placement offices have been treated as consumer reporting agencies. A consumer report, in general terms, is a communication from such an agency that bears on a person's creditworthiness, credit standing, credit capacity, or character. The exact statutory wording matters when a specific dispute turns on whether a company counts.

  1. The law concerns information about consumers. It governs records assembled and communicated for purposes the statute covers, not every fact that exists about a person.
  2. Covered companies go beyond the big three. Other organizations can fall within the definition when their activities fit the law's terms.
  3. The purpose is broader than credit scores. The framework reaches credit decisions and other uses the statute describes, including some background and insurance uses.
A tabletop with a tablet displaying a simple connected diagram of icons, beside an open folder, representing how consumer information flows between people, reporting agencies, and organizations that use reports.
A plain-language map showing how the FCRA connects consumer information, reporting agencies, and users of consumer reports.

How the statute becomes a working rule

A statute sets the foundation. Regulations add the operating detail. The Consumer Financial Protection Bureau's Regulation V is the regulation that implements the FCRA. The Bureau's FCRA compliance resources are written mainly for businesses that furnish or use credit information. They show how the rules are built, but they are not a consumer filing guide.

The Federal Trade Commission keeps an FCRA legal library page. It works mostly as a directory. It points to topics such as getting a free credit report and reporting identity theft.

Be careful with online summaries. A summary may name a right and skip its conditions, exceptions, deadlines, or the party that must receive your request. The CFPB and FTC both publish plain-language summaries of consumer rights under the FCRA. Those original documents are the better check on anything that affects your money or your file.

  1. Start with the statute. It defines key terms and sets the basic framework.
  2. Check Regulation V. It supplies regulatory detail and can be updated, interpreted, or changed by court action.
  3. Use agency consumer guidance for filing steps. Confirm the page is current and fits your issue.
  4. Watch for state law. States can add protections or procedures on top of the federal floor.

What changed around medical information

On July 11, 2025, the U.S. District Court for the Eastern District of Texas vacated the CFPB's medical information rule under Regulation V. The court found that the rule exceeded the Bureau's statutory authority. In the court's reading, the FCRA permits furnishing and considering coded medical debt information, as long as the code does not identify the provider and does not give enough detail to infer the nature of the medical services, products, or devices.

That is a narrow holding. It does not tell you what will appear on your own report. How reporting systems apply the decision, and how later appeals or agency action might change it, can shift over time. If medical accounts are part of your problem, read the current Regulation V text and the CFPB's published information. A qualified professional may also be appropriate for a fact-specific legal question.

The CFPB also withdrew a proposed rule on May 15, 2025. The subject of that proposal is not stated in the material behind this article, so it would be a guess to say what the withdrawal means for consumers. Reports of other Regulation V changes in 2026 have circulated, including from law firm marketing pages. Treat those as unconfirmed until they appear in CFPB materials.

Using the law when something looks wrong

The FCRA is the legal basis for disputing inaccurate information with a reporting agency, and for asking about reports used against you. Agency summaries commonly describe rights to see your file, to dispute incomplete or inaccurate items, and to have disputes investigated within a set period. Commonly cited figures include a free report on a regular schedule, a 30-day investigation window, and a roughly seven-year limit on most negative items. Confirm each of those against the CFPB or FTC summary before you rely on it, because conditions and exceptions apply.

Fraud alerts, security freezes, and identity theft steps are separate topics. The FTC's legal library page links to resources on identity theft and on getting a free credit report. Start there for current instructions instead of relying on a general explainer.

Before you contact anyone, write down the exact item in question. Note which company supplied it and which company displayed it. Separate what you can prove from what you assume. Keep copies of what you send and the date you sent it. Then follow the current official instructions for that specific issue.

This article describes the federal framework as of July 15, 2026. It is educational information, not legal, financial, or tax advice.

Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.