15 U.S.C. §§ 1681-1681x

Fair Credit Reporting Act

Statute — United States Federal
Effective: October 26, 1970 53 platforms tracked 939 provisions indexed Enforced by: Consumer Financial Protection Bureau (CFPB), Federal Trade Commission (FTC), State Attorneys General Last reviewed May 9, 2026

Overview

The Fair Credit Reporting Act is the primary federal law regulating the collection, dissemination, and use of consumer credit information. It governs consumer reporting agencies (CRAs), users of consumer reports, and furnishers of information to CRAs.

FCRA requires that consumer reporting agencies maintain reasonable procedures to ensure maximum possible accuracy of consumer reports, provide consumers with access to their own files, establish dispute resolution procedures, and limit access to consumer reports to entities with permissible purposes (credit, employment screening, insurance underwriting, government licensing, and legitimate business transactions initiated by the consumer).

For platform governance, FCRA is relevant when platforms perform background checks, credit checks, or identity verification using consumer report data. Platforms that furnish information to CRAs (reporting user payment behavior, account standing, or fraud indicators) must comply with accuracy and dispute resolution requirements. Fintech platforms, gig economy companies, and landlord/tenant platforms are increasingly subject to FCRA scrutiny.

Penalties

Willful noncompliance: actual damages or statutory damages of $100-$1,000 per violation, plus punitive damages and attorneys fees. Negligent noncompliance: actual damages plus attorneys fees. CFPB/FTC enforcement: civil penalties up to $50,120 per violation. Recent enforcement: Equifax $700M settlement (2019).

Key Articles & Sections

Platforms We Track Subject to FCRA

Recent Changes Related to FCRA

ConductAtlas maps governance language to potentially relevant regulatory frameworks. Regulatory applicability and enforceability may vary by jurisdiction, enforcement context, and individual circumstances. This page is informational and does not constitute legal advice. Methodology

Provisions Governed by FCRA (939 across 53 platforms)

Business Transfer Data Disclosure Acorns
Medium
California Resident Privacy Rights (CCPA) Acorns
Medium
California Consumer Privacy Act Rights Acorns
Medium
Device, Behavioral, and Geolocation Data Collection Acorns
Medium
Behavioral Analytics and Tracking Technologies Acorns
Medium
Data Sharing with Affiliates and Service Providers Acorns
Medium
Custodial Account Terms — Minors (Acorns Early) Acorns
Medium
Data Retention and Deletion Rights Acorns
Medium
Account Linking and Third-Party Data Aggregator Access Acorns
Medium
California Consumer Privacy Rights Acorns
Medium
Children's Data and Acorns Early Product Acorns
Medium
California Resident Privacy Rights Acorns
Medium
Collection of Sensitive Financial and Identity Data Acorns
Medium
Geolocation and Device Data Collection Acorns
Medium
Incorporation by Reference of Product-Specific Agreements Acorns
Medium
Data Collection from Third-Party Sources Including Data Brokers Acorns
Medium
KYC Identity Data Collection and Retention Adyen
Medium
Data Processing and Sharing with Card Schemes Adyen
Medium
Data Processing and Privacy Obligations Adyen
Medium
Dual Controller and Processor Role Adyen
Medium
Third-Party Data Sharing Adyen
Medium
Cross-Border Data Transfers Adyen
Medium
California Consumer Rights (CCPA/CPRA) Adyen
Medium
Acceptable Use Policy Compliance Obligation Adyen
Medium
Cookie and Behavioral Tracking Adyen
Medium
Card Scheme Rule Incorporation Adyen
Medium
Data Sharing with Fraud Prevention Networks and Government Authorities Adyen
Medium
Legitimate Interests as Processing Basis Adyen
Medium
Data Retention Periods Adyen
Medium
Behavioral Inference and Profiling Affirm
Medium

Showing 30 of 939 provisions. View all →

Related Regulations

Official Source

View official regulation text →

Get alerted when platforms change their policies — including FCRA-relevant provisions.

Subscribe to Monitor — $19/mo

Frequently Asked Questions

What does FCRA require?

Which platforms does FCRA apply to?

ConductAtlas tracks FCRA-relevant provisions across 53 platforms. Each platform's specific provisions are classified by severity and mapped to FCRA requirements.

How does ConductAtlas monitor FCRA compliance?

ConductAtlas captures policy documents daily, classifies provisions by regulatory framework, and flags changes that affect FCRA obligations. Every change is archived with cryptographic verification.