By Mike Reeves | ComplianceJournal.news | Updated April 2026
FCRA lawsuit filings rose 47.5 percent year over year in January 2026. FDCPA filings rose 26.5 percent. The Consumer Financial Protection Bureau conducted 107 examinations in 2024 and projects 64 in 2026 — a 40 percent reduction. The divergence matters: the FCRA's private right of action does not require a federal agency to be involved. Consumers can sue directly, and plaintiffs' attorneys have built a sophisticated litigation industry around FCRA claims that operates independently of the CFPB's enforcement calendar.
This guide covers what the Fair Credit Reporting Act requires of employers who use background checks, data furnishers who report to credit bureaus, and consumer reporting agencies — in plain language, current as of April 2026.
What Is the FCRA?
The Fair Credit Reporting Act, codified at 15 U.S.C. § 1681 et seq., was enacted in 1970 and has been amended multiple times — most significantly by the Fair and Accurate Credit Transactions Act (FACTA) in 2003 and the CFPB's Regulation V rulemaking. The law governs how consumer reporting agencies collect and report consumer information, what employers and other users can do with that information, and what consumers' rights are when inaccurate information affects their credit, employment, or housing.
The FCRA's reach is broader than most businesses realize. It covers employment background checks, credit decisions, tenant screening, insurance underwriting, and any other decision that relies on a consumer report — information assembled by a consumer reporting agency about a consumer's credit, character, personal characteristics, or mode of living.
FCRA Requirements for Employers
Any employer that uses a third-party background check service to screen job applicants or employees is using a consumer report and must comply with the FCRA. This applies to every business regardless of size.
Disclosure and Authorization
Before obtaining a consumer report, an employer must provide the applicant with a clear and conspicuous written disclosure stating that a consumer report may be obtained. This disclosure must appear on a document that consists solely of the disclosure — it cannot be combined with a job application, employment agreement, liability waiver, or any other document. The applicant must provide written authorization before the employer can order the report.
Courts have repeatedly found FCRA violations where disclosure forms were embedded in employment applications, combined with authorization for drug testing, or included release of liability language. The standalone requirement is strictly enforced and is a frequent source of class action liability.
The Adverse Action Process
When an employer intends to take adverse action — declining to hire, failing to promote, reassigning, or terminating — based in whole or in part on information in a consumer report, the FCRA requires a two-step process.
Step 1 — Pre-adverse action notice. Before making the final decision, the employer must provide the applicant with a copy of the consumer report, a copy of the FTC's Summary of Consumer Rights under the FCRA, and a notice that adverse action is being considered based on the report. The applicant must be given a reasonable time to review the report and dispute any inaccuracies. While the FCRA does not specify an exact waiting period, compliance guidance and litigation outcomes consistently establish five business days as the practical minimum. Some courts have found shorter periods insufficient.
Step 2 — Final adverse action notice. After the waiting period, if the employer proceeds with the adverse action, a final adverse action notice must be sent. This notice must identify the consumer reporting agency that provided the report, include the agency's contact information, state that the CRA did not make the adverse decision and cannot explain it, and inform the applicant of their right to dispute the accuracy of the report with the CRA within 60 days.
AI in Hiring and FCRA
The increasing use of AI-powered hiring platforms — Indeed, LinkedIn Recruiter, Workday, HireVue — creates a new layer of FCRA compliance complexity. When these platforms use AI to rank candidates or screen applicants, employers must understand what information is being used and whether the AI outputs constitute consumer reports or are influenced by consumer report data. The CFPB withdrew its advisory opinions on AI and background screening in 2025, leaving employers to rely on the statute and FTC guidance directly.
FCRA Requirements for Data Furnishers
Data furnishers — banks, credit card issuers, auto lenders, mortgage servicers, and other creditors who report account information to Equifax, Experian, TransUnion, and other consumer reporting agencies — have specific FCRA obligations under Sections 1681s-2(a) and 1681s-2(b).
Duty to Report Accurate Information
Under § 1681s-2(a), furnishers must not knowingly report inaccurate information. They must have reasonable procedures to ensure the accuracy and integrity of the information they furnish. They must correct and update reported information when they learn it is inaccurate. And they must report the Date of First Delinquency accurately — the DOFD determines how long negative information can appear on a credit report, and DOFD errors are one of the most litigated FCRA issues.
Dispute Investigation Obligations
When a consumer reporting agency notifies a furnisher that a consumer disputes information in their report, the furnisher is triggered into a § 1681s-2(b) investigation. This is where most FCRA class action liability against furnishers arises.
The investigation must be conducted within 30 days of the CRA notification (or 45 days if the consumer provides additional information during the investigation period). The furnisher must review all relevant information provided by the CRA, investigate each disputed element separately, report the results of the investigation to the CRA, and — if the information is found to be inaccurate or unverifiable — notify all CRAs to which the information was furnished to correct or delete the information.
Courts have consistently held that a furnisher's investigation must be reasonable — not just performed. A rubber-stamp verification that does not actually examine the disputed information does not satisfy the statute. Documentation of the investigation process is essential: what records were reviewed, when, by whom, and what findings were reached.
Critical: § 1681s-2(b) creates a private right of action only when the dispute notification came from a CRA. Direct disputes from consumers to furnishers are governed by Regulation V but do not give rise to private lawsuits under § 1681s-2(b). The distinction — whether the dispute came from a CRA or directly from the consumer — is litigated frequently and matters enormously.
The Date of First Delinquency
The DOFD is the date a consumer first became delinquent on an account that was later charged off or placed for collection, without the account becoming current in the intervening period. It is the date that starts the seven-year clock for negative information to appear on a credit report under § 1681c(c). Furnishers must report the DOFD accurately and may not manipulate it to extend the period during which negative information can be reported. DOFD errors — whether inflated to extend reporting periods or deflated to minimize them — are among the most frequent sources of FCRA disputes and litigation.
FCRA Requirements for Consumer Reporting Agencies
Consumer reporting agencies — Equifax, Experian, TransUnion, and the specialized CRAs serving employment screening, tenant screening, and other markets — have the most comprehensive FCRA obligations.
CRAs must maintain reasonable procedures to ensure maximum possible accuracy of reported information. They must investigate consumer disputes within 30 days and notify furnishers of disputed information. They must provide consumers with free annual file disclosures through AnnualCreditReport.com, and they must limit who can access consumer reports to those with permissible purposes under § 1681b.
The maximum fee for a consumer file disclosure not covered by free disclosure rights is $16 for 2026, adjusted annually by the CFPB based on the Consumer Price Index.
The Current Enforcement Environment
The CFPB's reduced examination program does not diminish FCRA compliance risk. Private litigation is the primary enforcement mechanism for most FCRA obligations, and the plaintiffs' bar has been extremely active in 2026. The CFPB's October 2025 interpretive rule significantly expanded the scope of federal FCRA preemption — putting some state medical debt laws and criminal history reporting restrictions in legal jeopardy — but did not reduce the scope of the federal FCRA's requirements themselves.
State attorneys general have stepped up FCRA-related enforcement in parallel with the CFPB's withdrawal. Multi-state enforcement coalitions on credit reporting practices are well-established and active.
This guide is for informational purposes only and does not constitute legal advice. For legal advice specific to your situation, consult a licensed attorney. ComplianceJournal.news is an independent publication. Content current as of April 2026.