Know Your Rights: FCRA & FDCPA Explained
Two federal laws do most of the heavy lifting when it comes to protecting American consumers in the world of credit and debt. The Fair Credit Reporting Act (FCRA) governs how your credit information is collected, reported, and corrected. The Fair Debt Collection Practices Act (FDCPA) governs how debt collectors are allowed to treat you. Together they give you real, enforceable rights — but only if you know they exist. This guide translates both laws into plain English.
You don't need to memorize statute numbers. What matters is understanding what these laws let you demand, and how to use those rights when a bureau reports something wrong or a collector crosses a line.
The Fair Credit Reporting Act (FCRA)
Passed in 1970, the FCRA is the law that created most of the credit-reporting rights you rely on today. It applies to the three nationwide credit bureaus (Equifax, Experian, and TransUnion), as well as to the businesses that furnish data to them and the companies that pull your report to make decisions. Here are its most important protections.
The right to accuracy
Credit bureaus must follow "reasonable procedures to assure maximum possible accuracy" of the information in your file. The companies that report data about you (your lenders, card issuers, and collectors) also have a duty not to report information they know — or should know — is inaccurate. Accuracy is not a courtesy; it's a legal obligation.
The right to dispute — and a 30-day investigation
If you believe something in your report is wrong, you can dispute it, and the bureau generally must investigate within 30 days (extendable to 45 in some cases). The bureau forwards your dispute to the furnisher, which must investigate and report back. If the item can't be verified, it must be corrected or deleted. Our step-by-step dispute guide walks through exactly how to do this, and our credit report dispute letter template makes the writing easy.
The right to free reports
You're entitled to free copies of your credit reports from the nationwide bureaus. The official, federally authorized source is AnnualCreditReport.com. You're also entitled to a free report after certain events — for example, when you're denied credit based on your report, or if you're a victim of identity theft.
The right to an adverse action notice
If a lender, landlord, insurer, or employer takes an "adverse action" against you (denies you credit, charges you a higher rate, and so on) based on your credit report, they must tell you. This adverse action notice identifies which bureau supplied the report and explains that you can get a free copy and dispute anything inaccurate. It's how you find out a report cost you an opportunity — and it hands you the tools to fight back.
The right to have old information age off
Most negative information can't haunt you forever. Under the FCRA, most negative items — late payments, collections, charge-offs — generally must be removed after about seven years. Certain bankruptcies can remain for up to ten years. This is why patience is sometimes the right strategy for accurate negatives.
The FCRA doesn't guarantee a clean report — it guarantees an accurate one, plus a free, structured way to challenge anything that isn't.
Other FCRA protections worth knowing
- Permissible purpose. Only people with a legitimate need (a lender you applied to, for example) may access your report.
- Security freezes and fraud alerts. You can freeze your credit for free to block new-account fraud, and place fraud alerts if you're a victim of identity theft.
- Limits on medical and outdated data and special protections around employment screening (which usually requires your written consent).
The Fair Debt Collection Practices Act (FDCPA)
The FDCPA, passed in 1977, targets abusive, deceptive, and unfair practices by third-party debt collectors — companies collecting a debt on behalf of someone else, or debt buyers who purchased the debt. (It generally does not cover the original creditor collecting its own debt, though many states have their own rules that do.) Here's what it gives you.
The right to debt validation
Within five days of first contacting you, a collector must send a written notice stating the amount of the debt, the creditor's name, and your right to dispute it. If you request validation in writing within 30 days, the collector must stop collecting until it mails you verification of the debt. This is one of the most powerful tools you have — and our free debt validation letter template makes the request for you.
The right to be free from harassment
Collectors may not harass, oppress, or abuse you. That includes:
- Repeated calls meant to annoy or harass.
- Threats of violence or harm.
- Obscene or profane language.
- Threatening actions they can't legally take (like arrest for a consumer debt) or don't intend to take.
- Falsely claiming to be an attorney, a government agency, or a credit bureau.
Limits on when and how they contact you
Unless you agree otherwise, collectors generally can't contact you before 8 a.m. or after 9 p.m. your local time. They can't contact you at work if they know your employer prohibits it, and they can't discuss your debt with third parties like your neighbors, friends, or coworkers (they may contact others only to find your location, and even then in limited ways).
The right to make them stop contacting you
You can send a cease-communication request in writing. Once the collector receives it, they generally must stop contacting you, except to acknowledge the request or to tell you about a specific action (such as filing a lawsuit). Important caveat: telling a collector to stop contacting you does not make the debt disappear or reset any deadlines — it only stops the calls and letters.
What happens when your rights are violated?
Both laws have teeth. If a bureau or furnisher violates the FCRA, or a collector violates the FDCPA, you can:
- Document everything — dates, times, names, call logs, and copies of every letter.
- File a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov, and with your state attorney general.
- Consider legal action. Both laws allow consumers to sue for violations, and in many cases to recover statutory damages plus attorney's fees. A consumer-rights attorney can evaluate your situation, often at no upfront cost.
Putting it together
Think of the FCRA as your tool for the report and the FDCPA as your tool for the collector. If the problem is a wrong entry on your credit file, the FCRA and a dispute letter are your path. If the problem is a collector who won't prove a debt or won't leave you alone, the FDCPA and a validation letter are your path. Many people end up using both — and knowing which law applies is half the battle.
Frequently asked questions
Does the FDCPA cover the original creditor?
Generally no — it targets third-party collectors and debt buyers. However, many states have their own laws that cover original creditors, so check your state's rules.
How many times can a collector call me?
There's no single magic number, but repeated calls intended to harass or annoy are prohibited. Federal debt-collection rules also place limits on call frequency.
Is a free credit report the same as a free credit score?
No. The FCRA entitles you to free reports, not necessarily free scores. Many card issuers and apps now provide scores for free, but that's a separate benefit.
Where do I report a violation?
Start with the CFPB at consumerfinance.gov and your state attorney general. For serious or repeated violations, talk to a consumer-rights attorney.