Consumer Disclosure Report: Contents, Access, and Disputes

A consumer disclosure report is any record a consumer reporting agency keeps about your creditworthiness, character, reputation, or personal habits that a third party may use to decide whether to give you credit, a job, insurance, or housing.¹ It is broader than a credit report. The Fair Credit Reporting Act, at 15 U.S.C. § 1681 and following, controls how these files are built, who sees them, and how you correct them.²

What’s Actually in the File

The federal definition sweeps in any communication from a reporting agency that bears on your credit standing, character, general reputation, personal characteristics, or mode of living, so long as it is used to evaluate you for credit, insurance, employment, or another authorized purpose.¹ Credit histories are the best-known example. Check-writing records, insurance claim histories, tenant screening files, medical underwriting data, and utility payment records all fall under the same statute.

When you request a disclosure of your file, the agency must give you everything currently in it, tell you where the information came from, and list everyone who pulled the report. That list runs back two years for employment inquiries and one year for every other purpose.³ You can also ask for your credit score, the key factors that reduced it, and the range of possible scores under the model used.

Specialty Agencies You’ve Probably Never Checked

Equifax, Experian, and TransUnion get most of the attention, but landlords, insurers, banks, and employers often rely on specialty agencies that hold narrower categories of data. An error in one of those files can block you from opening an account or renting an apartment without you ever seeing the reason.

ChexSystems tracks checking and savings account problems, including accounts closed for cause, bounced checks, unpaid overdrafts, and suspected fraud. It generates a risk score between 100 and 899, and records stay on file for up to five years.
The National Consumer Telecom & Utilities Exchange collects payment history from telecom, pay-TV, and utility providers. New service applications routinely trigger a look at this file.⁴
MIB, Inc. holds medical condition and hazardous-activity data used to underwrite life, health, disability, critical illness, and long-term care insurance.⁵
LexisNexis compiles a broad profile that can include property records, insurance claim history, address history, and professional licenses, and insurers use it to set premiums.

Each specialty agency owes you one free file disclosure every twelve months, the same as the major bureaus. The CFPB maintains a public list of consumer reporting companies, which is the practical way to find every agency that may hold data on you.

Who’s Allowed To Pull Your Report

The FCRA closes the door on random access. A reporting agency may release your report only when the requester has a permissible purpose:⁶

A lender extending credit, reviewing an account, or collecting a debt.
A current or prospective employer, but only with your written consent.
An insurer evaluating an application or renewal.
A government agency required by law to consider your financial status before issuing a license.
A business responding to a transaction you initiated, or reviewing an account you already hold.
A court order or federal grand jury subpoena.
A state or local child support agency setting or enforcing an order.

The Extra Rule for Employment Checks

Before an employer can pull your report, it must give you a written disclosure in a standalone document containing nothing else, and you must authorize the report in writing.⁷ The authorization can sit on the same page as the disclosure, but the disclosure cannot be bundled with other waivers or legal language.⁸ When employers bury the notice inside an application or staple releases onto it, the disclosure is defective and the company is exposed to liability.

How To Get Your Report

You are entitled to one free file disclosure from every nationwide reporting agency every twelve months.⁹ For the three major bureaus, requests run through AnnualCreditReport.com, the site required by federal law. As of 2026, the three bureaus have permanently extended a program that lets you pull each of their reports weekly at no cost through that same site, and Equifax is offering six additional free reports per year through 2026.¹⁰

The same annual free disclosure applies to specialty agencies. There is no clearinghouse for them, so you contact each one directly by website, toll-free line, or mail. A written request should include your full legal name, current address, Social Security number, and date of birth so the agency can locate your file.

You also get a free report anytime someone takes adverse action against you, as long as you request it within 60 days of the adverse action notice. Outside the free scenarios, the maximum a reporting agency may charge for a disclosure in 2026 is $16.00. Once your request is received, the agency has 15 days to deliver the file.⁹

How Long Negative Information Can Stay

The FCRA caps how long most negative items can appear in reports to third parties.¹¹

Bankruptcy: 10 years from the date of the order for relief.
Civil suits and civil judgments: 7 years from the date of entry, or until the statute of limitations expires, whichever is longer.
Records of arrest: 7 years from the date of entry.
Paid tax liens: 7 years from the date of payment.
Collection accounts and charge-offs: 7 years.
Other adverse items, other than criminal convictions: 7 years.

Criminal convictions have no time limit and can be reported indefinitely. The caps also drop away in three high-value situations: credit transactions expected to involve $150,000 or more, life insurance underwriting with a face amount of $150,000 or more, and employment at an annual salary of $75,000 or more.¹¹ For those decisions, older negative items can still appear.

Disputing an Error

Finding a mistake triggers a specific process. Done well, it forces the agency to act. Done sloppily, it usually goes nowhere.

Filing the Dispute

Notify the reporting agency in writing. Certified mail with a return receipt fixes the date the agency received your dispute, and the investigation clock runs from that date. Identify the item, explain why it is wrong, and attach documents that prove it: a court record of a dismissal, a bank statement showing the debt paid, a settlement letter. A bare assertion that “this is wrong” rarely produces a correction.

The Investigation

The agency has 30 days to complete a reinvestigation. Within the first five business days, it must forward your dispute and supporting information to the furnisher, meaning the entity that originally supplied the data.¹² The furnisher must then run its own reasonable investigation into whether what it reported was accurate and complete.¹³

If the item is inaccurate, incomplete, or cannot be verified, the agency must correct or delete it and notify you of the results within five business days of finishing the investigation.¹⁴ If a correction is made, you can request that the agency send notice of the correction to anyone who received the flawed report for employment purposes in the past two years, or for any other purpose in the past six months.¹²

When the Item Stays

If the furnisher insists the data is accurate, the item stays. You can then file a brief statement of dispute of up to 100 words, and the agency must include that statement or a summary in every future report containing the disputed item.¹² One hundred words is little room, so pick the single most useful fact: a docket number, a dismissal date, a payment confirmation.

You can also file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint. The CFPB expects that you have already disputed directly with the agency, and it will forward the complaint to the company for a response.¹⁵

What Happens When a Report Costs You Something

When information in your report leads to a rejection or a worse offer, that decision is an adverse action, and the FCRA imposes two notifications.

First, before the decision is final, the user must send a pre-adverse action notice. For employment, that notice must include a copy of the report and a summary of your FCRA rights so you can review it and flag errors.¹⁶ The FCRA does not fix a waiting period; the standard is a reasonable interval, and most employers treat five business days as the minimum.

Second, after the final decision, the user must send a post-adverse action notice with the reporting agency’s name and contact information, a statement that the agency did not make the decision, and notice that you have the right to dispute the report’s accuracy and to get another free copy within 60 days.¹⁶

Blocking Access With Freezes and Alerts

If the goal is preventing new accounts rather than fixing existing errors, the FCRA offers two tools.

Security Freezes

A security freeze blocks the agency from releasing your report, which stops most new credit accounts from being opened in your name. Placing and lifting a freeze is free. Agencies must put a phone or online request in place within one business day, and must lift it within one hour for electronic or phone requests, or three business days for mail requests.¹⁷ A freeze has no expiration and stays until you lift it. You must contact each bureau separately, and you will need to lift the freeze whenever you apply for something that requires a report pull.

Fraud Alerts

A fraud alert is lighter. It flags your file so any business pulling your report is told to take extra steps to verify identity before opening a new account. You contact one of the three major bureaus, and that bureau must notify the other two.¹⁷

An initial alert lasts one year and requires only a good-faith statement that you suspect fraud. If you have actually been an identity theft victim and can supply an identity theft report filed with law enforcement, you can request an extended alert that stays for seven years and removes you from pre-screened credit and insurance offer lists for five.¹⁷ Active-duty military members can place a one-year active-duty alert, renewable for the length of deployment.¹⁸

Suing When the Law Is Broken

If a reporting agency, a furnisher, or a report user violates the FCRA, you can sue in federal or state court. What you can recover depends on whether the violation was willful or negligent.

A willful violation covers conduct where the entity either knew it was breaking the law or acted with reckless disregard for its obligations. You can recover actual damages or statutory damages of $100 to $1,000, whichever is greater, and the court may add punitive damages. It must award reasonable attorney’s fees and costs to a successful plaintiff.¹⁹ The statutory damages provision is what makes class actions viable: when an employer uses a defective disclosure on thousands of applicants, per-person awards of $100 to $1,000 add up quickly.

A negligent violation gives you actual damages you can prove, plus attorney’s fees and costs to a successful plaintiff.²⁰ The fee-shifting piece matters: it makes it economically possible to bring a case when actual damages are small, which is often the situation with reporting errors.

1
Office of the Law Revision Counsel. 15 U.S. Code 1681a – Definitions; Rules of Construction
2
Office of the Law Revision Counsel. 15 U.S. Code 1681 – Congressional Findings and Statement of Purpose
3
Office of the Law Revision Counsel. 15 USC 1681g – Disclosures to Consumers
4
Consumer Financial Protection Bureau. National Consumer Telecom and Utilities Exchange
5
Consumer Financial Protection Bureau. MIB, Inc.
6
Office of the Law Revision Counsel. 15 U.S. Code 1681b – Permissible Purposes of Consumer Reports
7
Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports
8
Federal Trade Commission. Background Checks on Prospective Employees: Keep Required Disclosures Simple
9
Office of the Law Revision Counsel. 15 USC 1681j – Charges for Certain Disclosures
10
Federal Trade Commission. Free Credit Reports
11
Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
12
Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy
13
Federal Trade Commission. Consumer Reports: What Information Furnishers Need to Know
14
Consumer Financial Protection Bureau. How Long Does It Take To Repair an Error on a Credit Report?
15
Consumer Financial Protection Bureau. Submit a Complaint
16
Federal Trade Commission. Using Consumer Reports: What Employers Need to Know
17
Office of the Law Revision Counsel. 15 U.S. Code 1681c-1 – Identity Theft Prevention; Fraud Alerts and Security Freezes
18
Military OneSource. FTC Active-Duty Fraud Alert
19
Office of the Law Revision Counsel. 15 U.S. Code 1681n – Civil Liability for Willful Noncompliance
20
Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance