15 U.S.C. §§ 1681-1681x

Fair Credit Reporting Act

Statute — United States Federal
Effective: October 26, 1970 53 platforms tracked 2693 provisions indexed Enforced by: Consumer Financial Protection Bureau (CFPB), Federal Trade Commission (FTC), State Attorneys General Last reviewed May 9, 2026

Overview

The Fair Credit Reporting Act is the primary federal law regulating the collection, dissemination, and use of consumer credit information. It governs consumer reporting agencies (CRAs), users of consumer reports, and furnishers of information to CRAs.

FCRA requires that consumer reporting agencies maintain reasonable procedures to ensure maximum possible accuracy of consumer reports, provide consumers with access to their own files, establish dispute resolution procedures, and limit access to consumer reports to entities with permissible purposes (credit, employment screening, insurance underwriting, government licensing, and legitimate business transactions initiated by the consumer).

For platform governance, FCRA is relevant when platforms perform background checks, credit checks, or identity verification using consumer report data. Platforms that furnish information to CRAs (reporting user payment behavior, account standing, or fraud indicators) must comply with accuracy and dispute resolution requirements. Fintech platforms, gig economy companies, and landlord/tenant platforms are increasingly subject to FCRA scrutiny.

Penalties

Willful noncompliance: actual damages or statutory damages of $100-$1,000 per violation, plus punitive damages and attorneys fees. Negligent noncompliance: actual damages plus attorneys fees. CFPB/FTC enforcement: civil penalties up to $50,120 per violation. Recent enforcement: Equifax $700M settlement (2019).

Key Articles & Sections

Platforms We Track Subject to FCRA

Recent Changes Related to FCRA

ConductAtlas maps governance language to potentially relevant regulatory frameworks. Regulatory applicability and enforceability may vary by jurisdiction, enforcement context, and individual circumstances. This page is informational and does not constitute legal advice. Methodology

Provisions Governed by FCRA (2693 across 53 platforms)

Acorns collects information from other companies Acorns
Medium
Personal data shared with third parties upon user instruction Acorns
Medium
Session replay data not shared with third parties Acorns
Medium
New customer sharing begins after 30 days Acorns
Medium
Aggregated or deidentified data disclosed to third parties Acorns
Medium
Affiliate brand partners receive purchase data for rewards crediting Acorns
Medium
Vermont residents information sharing restricted to law or authorization Acorns
Medium
Session replay sensitive information automatically masked Acorns
Medium
Personal information used to send direct marketing communications Acorns
Medium
Customer right to limit affiliate marketing sharing Acorns
Medium
Sensitive personal information not used to infer characteristics Acorns
Medium
Promotional programs use personal information Acorns
Medium
Data retention determined by legal and business necessity Acorns
Medium
Early gifting shares name and transfer details with recipient Acorns
Medium
California residents information not shared beyond state law Acorns
Medium
Acorns shares for own marketing purposes Acorns
Medium
Acorns does not sell personal information under CCPA Acorns
Medium
User Warrants Authority To Share Client Information Acorns
Medium
Federal law limits consumer sharing rights Acorns
Medium
California opt-out applies only to submitting browser and device Acorns
Medium
Personal information used for service delivery purposes Acorns
Medium
Service providers contractually bound on personal information handling Acorns
Medium
Affiliates share transaction and experience information Acorns
Medium
Sensitive personal information not used for CCPA-limitable purposes Acorns
Medium
Sensitive personal information processed only as described in policy Acorns
Medium
Third-party sign-in data used solely for account management Acorns
Medium
Affiliates marketing to you can be limited Acorns
Medium
Personal information used for compliance and fraud prevention Acorns
Medium
Personal information shared with corporate affiliates Acorns
Medium
User right to access copy of personal information Acorns
Medium

Showing 30 of 2693 provisions. View all →

Related Regulations

Official Source

View official regulation text →

Get alerted when platforms change their policies, including FCRA-relevant provisions.

Subscribe to Monitor, $19/mo

Frequently Asked Questions

What does FCRA require?

Which platforms does FCRA apply to?

ConductAtlas tracks FCRA-relevant provisions across 53 platforms. Each platform's specific provisions are classified by severity and mapped to FCRA requirements.

How does ConductAtlas monitor FCRA compliance?

ConductAtlas captures policy documents daily, classifies provisions by regulatory framework, and flags changes that affect FCRA obligations. Every change is archived with cryptographic verification.