Updated April 2026 · 14 min read
What Is the FCRA? Your Rights Against Bureaus, Creditors & Collectors
Two federal laws protect you when your credit data is wrong or when debt collectors cross the line: the Fair Credit Reporting Act (FCRA) and the Fair Debt Collection Practices Act (FDCPA). Together, they give you the right to dispute errors, demand investigations, and sue for damages when bureaus, creditors, or collectors break the rules. This guide explains both laws in plain language.
Part 1: The FCRA — Your Rights Against Credit Bureaus and Creditors
The Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.) was passed by Congress in 1970. It regulates how Equifax, Experian, and TransUnion collect, store, and share your financial information. It also imposes duties on “furnishers” — the banks, credit card companies, and lenders that supply your account data to the bureaus.
Without the FCRA, bureaus could report inaccurate information with no consequence, sell your data to anyone, and ignore your complaints. The law changes that by giving you specific, enforceable rights — and the ability to sue when those rights are violated.
Section 1681i — The Right to Dispute and Investigate
When you file a written dispute with a credit bureau, § 1681i requires the bureau to conduct a “reasonable reinvestigation” within 30 days (extended to 45 days if you provide additional information during the investigation). During that investigation, the bureau must:
- Contact the furnisher (creditor or collector) who reported the data
- Forward all relevant information you provided with your dispute
- Review the furnisher's response
- Either verify the item as accurate, correct the item, or delete it
If the bureau cannot verify the accuracy of the disputed item within 30 days, it must be deleted from your report. This is a hard deadline. Many consumers do not know this, which is why bureaus sometimes drag their feet — they are counting on you not following up.
Critically, the investigation must be “reasonable.” Courts have repeatedly found that simply re-asking the creditor the same question (via an automated ACDV form) without reviewing the evidence you provided is not a reasonable investigation. In Cushman v. Trans Union Corp., the court found Trans Union's automated process insufficient and awarded statutory damages.
Section 1681e(b) — Duty to Ensure Maximum Possible Accuracy
This section requires bureaus to “follow reasonable procedures to assure maximum possible accuracy” of the information in your file. It is the foundation for claims based on inaccurate reporting — even before you file a dispute. If a bureau's procedures allowed a mixed file, a re-aged debt, or a reporting error to persist, this section provides your cause of action.
Section 1681n — Willful Violations and Damages
This is the section with teeth. If a bureau or furnisher willfully violates the FCRA, you can recover:
- Statutory damages: $100 to $1,000 per violation — no proof of actual harm required
- Actual damages: provable financial losses (denied loans, higher interest rates, lost employment)
- Punitive damages: additional amounts to punish particularly egregious conduct
- Attorney fees and costs: the defendant pays your lawyer if you win
The willfulness standard does not require intentional wrongdoing. “Reckless disregard” of the law is sufficient. In Safeco Insurance Co. v. Burr (2007), the Supreme Court defined willfulness as including actions taken despite an “unjustifiably high risk” of violating the statute. A bureau that continues to report a disputed item without conducting a real investigation meets this standard.
Section 1681o — Negligent Violations
Even if the violation was not willful, you can still recover actual damages and attorney fees for negligent noncompliance. The standard is lower — you just need to show the bureau or furnisher failed to follow reasonable procedures. However, statutory damages ($100-$1,000) are not available for negligent violations, so you must prove actual financial harm.
Section 1681s-2 — Furnisher Duties (Creditors and Collectors)
This section is often overlooked but is one of the most powerful tools in credit repair. Furnishers — banks, credit card companies, collection agencies, student loan servicers — have a legal duty to:
- Report accurate information to the bureaus
- Investigate disputes forwarded by the bureau
- Review all relevant evidence provided by the consumer
- Correct or delete information found to be inaccurate
- Not report information they know to be inaccurate
A creditor or collector who continues to report false information after being notified through a bureau dispute is independently liable under the FCRA. You can sue them directly, in addition to suing the bureau. In Johnson v. MBNA America Bank, the court found willful noncompliance when MBNA continued reporting inaccurate information after receiving a direct dispute, and the consumer recovered both actual and punitive damages.
Part 2: The FDCPA — Your Rights Against Debt Collectors
The Fair Debt Collection Practices Act (15 U.S.C. § 1692 et seq.) protects you specifically from abusive, deceptive, and unfair practices by third-party debt collectors. While the FCRA focuses on credit reporting accuracy, the FDCPA focuses on how collectors behave when trying to collect a debt.
Who Does the FDCPA Cover?
The FDCPA applies to third-party debt collectors — companies that buy or are assigned debts to collect. It generally does not apply to original creditors collecting their own debts (though some state laws extend similar protections to original creditors). Examples of entities covered:
- Collection agencies (Midland Credit, Portfolio Recovery, Encore Capital)
- Debt buyers who purchase charged-off accounts
- Law firms that regularly collect debts
- Companies hired by creditors to collect on their behalf
Your Key FDCPA Rights
- Right to validation (§ 1692g): Within 5 days of first contact, the collector must send you a written validation notice with the debt amount, creditor name, and your right to dispute. You then have 30 days to send a written dispute. If you dispute, the collector must cease collection until they verify the debt.
- Right to cease communication (§ 1692c): You can send a written request telling the collector to stop contacting you. After receiving it, they can only contact you to confirm they are stopping or to notify you of a specific legal action.
- Protection from harassment (§ 1692d): Collectors cannot call repeatedly to annoy, use obscene language, threaten violence, or publish your name on a “deadbeat list.”
- Protection from false statements (§ 1692e): Collectors cannot misrepresent the amount owed, falsely claim to be attorneys, threaten lawsuits they do not intend to file, or imply you committed a crime.
- Protection from unfair practices (§ 1692f): Collectors cannot add unauthorized fees, deposit post-dated checks early, or contact you at inconvenient times (before 8 AM or after 9 PM).
FDCPA Damages
If a collector violates the FDCPA, you can recover:
- Statutory damages: up to $1,000 per lawsuit (not per violation)
- Actual damages: any financial harm caused by the violation
- Attorney fees and costs: the collector pays your legal expenses if you win
While the $1,000 statutory cap per lawsuit is lower than the FCRA's per-violation damages, FDCPA violations often overlap with FCRA violations. A collector who reports inaccurate information to a credit bureau can be sued under both statutes simultaneously, stacking damages.
How the FCRA and FDCPA Work Together
The most powerful consumer strategy uses both laws together. Here is a typical scenario:
- You discover a collection account on your credit report with an incorrect balance
- You send a written dispute to the credit bureau (triggering FCRA § 1681i obligations)
- You simultaneously send a debt validation letter to the collector (triggering FDCPA § 1692g obligations)
- The collector fails to validate the debt within 30 days — FDCPA violation
- The bureau fails to remove the unverified item — FCRA violation
- You now have claims against both the bureau and the collector under two separate federal statutes
This dual-track approach is exactly how 28Solutio's dispute system works. We generate demand letters to both the bureau and the creditor or collector simultaneously, track both 30-day deadlines, and flag violations from either party.
Your Rights in Plain Language
- You can get free credit reports weekly from each bureau
- You must be told if information in your file is used against you
- You can dispute inaccurate information and the bureau must investigate within 30 days
- Creditors and collectors must investigate disputes and correct errors
- Outdated negative information must be removed (7 years for most items, 10 for bankruptcy)
- Debt collectors must validate the debt if you dispute it within 30 days
- Collectors cannot harass, lie, or use unfair tactics to collect
- You can sue bureaus, creditors, and collectors for violating either law
- If you win, they pay your attorney fees
Frequently Asked Questions
Can I sue a credit bureau without a lawyer?
Yes. You can file in small claims court without an attorney. For larger claims, many consumer rights attorneys take FCRA cases on contingency (no upfront cost) because the law requires the defendant to pay attorney fees if you win. Sue Smart generates the complaint and filing package for both small claims and AAA arbitration.
What is the statute of limitations for FCRA claims?
Two years from the date you discovered the violation, or five years from the date the violation occurred — whichever is earlier. Do not wait to file.
Does the FDCPA apply to medical debt?
Yes. If a third-party collector is pursuing medical debt, the FDCPA applies in full. Additionally, starting in 2023, medical collections under $500 are no longer reported on credit reports under a voluntary agreement by the three major bureaus. Medical debts paid after being sent to collections must also be removed.
Can I dispute a debt I actually owe?
You can dispute the accuracy of the reporting even if the underlying debt is legitimate. Common grounds: wrong balance, wrong creditor name, wrong dates, wrong payment status. The FCRA protects the accuracy of information, not whether a debt exists. If the balance is $3,000 but the report says $5,000, that is inaccurate and disputable.
What happens after I send a dispute?
The bureau has 30 days to investigate. If they verify the item as accurate, you can provide additional evidence and dispute again, file a complaint with the CFPB, or pursue legal action. If they fail to respond within 30 days, the item must be deleted. If they correct it, your score should improve within one billing cycle.
FCRA & FDCPA Dispute Letters — Written From Scratch
Our AI cites the exact statute, case law, and facts from your report. Letters go to the bureau, creditor, and collector — all tracked with 30-day deadlines.
Start Free Trial