What it means
There are three main players. Consumer reporting agencies, commonly called credit bureaus, assemble the reports.
Furnishers, such as banks and lenders, supply payment information, and users, such as lenders, landlords and employers, rely on the reports to decide whether to offer credit, housing or a job. Each has obligations.
Furnishers must report information accurately and have written policies to support it, and they must investigate when a consumer disputes an entry directly with them. Users must have a permissible purpose to obtain a report, and when they make an adverse decision based on it, they must tell the consumer and say which agency supplied the report.
Consumers have important rights. They can obtain free copies of their reports on a regular basis, dispute errors and have the agency investigate, generally within 30 days.
Old negative information must be removed after the legal time limit, which for most items is seven years. The rule also deals with related topics, such as identity theft red flags and marketing based on information shared between affiliated companies.
Businesses that hold consumer accounts must have programmes for spotting warning signs of identity theft. Affiliates that wish to use information from a sister company for marketing must usually give consumers a chance to opt out.
For employers and landlords, the rule is a practical concern. Running a background check without the right consent and notices can lead to claims, even for small firms.
A written procedure for permissible purpose, consent and adverse action notices reduces the risk. Small businesses that handle consumer information should keep the rule in mind when they decide how to store and dispose of reports.
Credit reports contain sensitive data, and the rule requires that records be properly disposed of when no longer needed, for example by shredding paper copies and wiping electronic files. A short written policy and regular staff training are inexpensive ways to meet this duty.
In practice
Real-world examples.
Example
A bank turns down a loan application because of a low credit score. It sends the applicant a notice naming the agency that supplied the report and explaining the right to a free copy and to dispute errors.
Example
A property manager screens tenants using a credit report. Before running the check, the manager obtains written permission from each applicant and keeps a record of the notice that was sent.
Example
A credit card company discovers that it has been reporting a balance incorrectly. It corrects the entry with the credit bureaus and updates its internal procedures so that the same error does not recur. The compliance team also reviews a sample of other accounts to see whether the fault was isolated, and it records the results for its next audit.
Case study
Seen in the real world.
Willowmere Staffing is an illustrative, fictional recruitment firm that placed temporary workers with clients. It ran background checks on every candidate but did not always send the required advance disclosure, and it sometimes rejected candidates without telling them why.
An internal audit flagged the gaps, and the firm accepted that a single missed notice repeated across hundreds of candidates could become a costly claim. Willowmere introduced a standard consent form, a two-step adverse action process that gave candidates time to dispute inaccurate information, and a log of every report obtained. The illustrative lesson is that the rule applies to any business that uses consumer reports, not only to banks.
Willowmere also introduced a rule that credit and background reports were shredded or securely deleted once the hiring decision was final, and a log recorded when this was done. The practice protected candidates and reduced the firm's exposure if its systems were ever breached.
Watch out
Common mistakes.
- Assuming only credit bureaus have obligations, when furnishers and users of reports are also bound by the rule.
- Checking an applicant's credit without a permissible purpose, which can lead to legal claims even if the information is accurate.
- Failing to send an adverse action notice, when a decision based on a report requires the consumer to be told.
Questions
People also ask.
How long can negative items remain on a credit report?
For most negative items the legal limit is seven years, with a longer period for some matters such as certain bankruptcies.
Can a consumer dispute directly with the lender?
Yes, a consumer can dispute with the furnisher as well as with the credit bureau, and the furnisher must investigate.
Who enforces the rule?
The Consumer Financial Protection Bureau and the Federal Trade Commission are the main enforcers, along with other agencies and, in some cases, private claims brought by consumers who have been harmed by a breach.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related