Furnishing Consumer Data: Duties Under the FCRA
Understand your legal responsibilities when reporting consumer information to credit bureaus and other consumer reporting agencies.
Businesses that report information about consumers to credit bureaus and other consumer reporting agencies (CRAs) take on important legal responsibilities under the Fair Credit Reporting Act (FCRA). These organizations, called furnishers, play a central role in the accuracy, fairness, and privacy of consumer reports used for credit, employment, housing, insurance, and other decisions.
This guide explains the core duties of furnishers, the special rules applicable to certain industries, and practical steps to reduce legal and regulatory risk while protecting consumers.
Who Is Considered a Furnisher of Information?
Under the FCRA, a furnisher is any person or entity that regularly provides information about consumers to one or more CRAs. Furnishers may include:
- Banks, credit unions, and finance companies
- Credit card issuers and auto lenders
- Mortgage lenders and servicers
- Debt collectors and collection agencies
- Landlords and property management companies that report tenant data
- Telecommunications and utility companies that furnish account histories
- Medical providers and medical information services that report medical-related data
Any entity that regularly transmits consumer account or payment information to a CRA is likely to be covered, even if reporting is outsourced to a service provider.
Core Principle: Accuracy and Integrity of Information
The FCRA’s fundamental requirement is that furnishers must provide information that is accurate, complete, and reflects the true status of the consumer’s obligations.
- No knowing or reckless reporting of inaccurate data: A furnisher may not provide information it knows, or has reasonable cause to believe, is incorrect.
- Ongoing responsibility: Once information is furnished, the furnisher must correct or update it if it later discovers that the data is incomplete or inaccurate.
- Context matters: Accuracy includes reporting key details such as account status, credit limits, dates of delinquency, and whether a consumer disputes the information.
Key Duties of Furnishers: Overview
| Obligation | What It Requires |
|---|---|
| Report Accurate Information | Do not furnish data you know or reasonably should know is inaccurate; ensure completeness and integrity of what you report. |
| Correct and Update Data | Promptly notify CRAs when you discover an error or missing information; supply corrected records to all affected CRAs. |
| Handle Consumer Disputes | Investigate disputes received directly from consumers or via CRAs and update or delete information when it cannot be verified. |
| Report Delinquency Dates | Provide the month and year the delinquency began for charged-off or collection accounts so CRAs can apply proper reporting periods. |
| Protect Medical Information | Identify yourself as a medical information furnisher when applicable, and follow restrictions on use and disclosure of medical data. |
| Address Identity Theft | Block or correct information resulting from identity theft and avoid re-reporting fraudulent data. |
Duty to Report Accurate and Complete Information
Furnishers must establish processes designed to ensure the accuracy and integrity of the information they provide to CRAs.
- Validate account data before initial reporting.
- Use consistent formats and coding for account status, payment history, and closures.
- Synchronize internal systems so that billing, collections, and reporting records match.
- Ensure that any systemic errors (for example, misapplied payments) are corrected both internally and in reports to CRAs.
Regulators expect furnishers to have written policies and procedures tailored to the nature, size, and complexity of the business and the type of information furnished.
Duty to Correct and Update Information
When a furnisher discovers that it has reported data that is not accurate or not complete, it must promptly inform the CRAs and provide corrected information.
- Scope: Corrections must be sent to each CRA that received the original inaccurate information.
- Timing: Corrections should be made as quickly as reasonably possible after the inaccuracy is identified.
- Ongoing reporting: Once corrected, the furnisher must continue to report only complete and accurate information about that item going forward.
This duty applies even if no consumer has yet filed a dispute. Internal audits, complaints, or litigation may reveal problems that must be proactively corrected.
Special Rules for Negative Information Furnished by Financial Institutions
Certain financial institutions that regularly extend credit and report to nationwide CRAs are required to provide consumers written notice if they furnish negative information, such as serious delinquencies or charge-offs.
- The notice can be sent before or shortly after the negative information is reported.
- It may be included with billing statements or similar account communications, but cannot be combined with certain required disclosures under other laws.
- The purpose is to alert consumers that negative data has been reported so they can review and challenge any inaccuracies.
Handling Consumer Disputes Sent Directly to Furnishers
Consumers may send disputes directly to the furnisher at an address specified for that purpose. Federal regulations require furnishers to investigate certain direct disputes.
When a dispute comes directly from the consumer and is within the scope of the rules, a furnisher must generally:
- Conduct a reasonable investigation of the issues raised.
- Review all relevant information the consumer provides.
- Complete the investigation typically within 30 days (or 45 days if the consumer provides additional relevant information during that period).
- Notify the consumer of the results and correct any inaccurate or incomplete data with all CRAs that received it.
Certain disputes, such as those deemed frivolous or irrelevant, may be excluded from investigation, but the consumer must be notified of that determination and told what information is needed to proceed.
Responding to Disputes from Consumer Reporting Agencies
CRAs are required to notify furnishers when a consumer disputes information that a furnisher provided. In those cases, furnishers must:
- Investigate the dispute and review all relevant information that the CRA supplies, including documentation submitted by the consumer.
- Report the results of the investigation to the CRA.
- If the information is found to be inaccurate, incomplete, or not verifiable, modify, delete, or permanently block the reporting of that information, and provide updates to every CRA that received it.
- Complete these steps within the timeframes the FCRA sets for CRAs to resolve disputes (usually 30 days, plus up to 15 additional days if the consumer provides more relevant information).
If the furnisher fails to respond within the required time, the CRA must delete the disputed information from the consumer’s file.
Reporting Disputed Information
Once a consumer disputes the completeness or accuracy of information, the furnisher may not continue to report that information to a CRA without indicating that it is in dispute.
- Dispute indicators must be clear and consistent with industry standards.
- When a dispute is resolved, furnishers should promptly update reporting to reflect the outcome.
- Failing to mark disputed items can mislead users of consumer reports and may be treated as a violation of the FCRA or related regulations.
Duty to Report Dates of Delinquency
For accounts that are placed for collection, charged off, or subject to similar actions, furnishers must report the month and year when the delinquency that led to that action began.
- This date helps CRAs calculate how long negative information may appear in a consumer report under FCRA time limits.
- The delinquency date must be accurate and cannot be “re-aged” to extend the reporting period.
- The furnisher generally must provide this date within a limited time (for example, within 90 days of reporting the collection or charge-off).
Special Responsibilities for Medical Information Furnishers
Entities whose primary business is providing medical services, products, or devices—and their agents or assignees—are subject to additional FCRA obligations when they report to CRAs.
- They must identify themselves to CRAs as medical information furnishers so that CRAs can apply special handling and privacy controls.
- Reported information must be limited and coded so that users of consumer reports do not learn unnecessary details about a person’s medical condition.
- These requirements operate alongside, and in addition to, other privacy rules such as health information privacy laws where applicable.
Obligations Related to Identity Theft
When information results from identity theft, the FCRA places specific duties on furnishers to avoid harming victims.
- Once notified that information stems from identity theft, a furnisher may not report it to a CRA unless it later determines the information is accurate and truly relates to the consumer.
- If a furnisher learns it has already furnished data that resulted from identity theft, it must notify each CRA with the correct information and must not re-report the fraudulent data.
- Furnishers may request identity theft reports or other documentation from the consumer, consistent with FCRA identity theft procedures.
Policies, Procedures, and Training
Guidelines issued by federal agencies require furnishers to design and implement written policies and procedures to ensure the accuracy and integrity of information furnished to CRAs.[10]
Effective compliance programs commonly include:
- Documented data validation and reconciliation routines before transmitting files to CRAs.
- Clear workflows for receiving, tracking, and resolving disputes from consumers and CRAs.
- Employee training on legal requirements, dispute handling, and identity theft red flags.
- Periodic internal audits and testing of sample accounts to identify systemic reporting errors.
- Governance structures that assign responsibility for FCRA compliance to specific personnel or committees.
Consequences of Non-Compliance
Failure to meet FCRA duties can result in significant regulatory, financial, and reputational consequences. The Federal Trade Commission (FTC), Consumer Financial Protection Bureau (CFPB), banking regulators, state attorneys general, and, in some circumstances, consumers themselves may bring actions for violations.
- Regulatory penalties: The FCRA authorizes civil penalties and injunctive relief for certain violations brought by government agencies.
- Private lawsuits: Consumers may seek damages, including statutory and punitive damages and attorneys’ fees, in specified situations.
- Operational impacts: Investigations and corrective actions can require significant time, resources, and remediation efforts.
- Reputation risk: Inaccurate reporting or poor dispute handling can erode trust with customers, partners, and regulators.
Best Practices for Furnishers
Although exact compliance steps will vary by organization, the following practices can help furnishers meet FCRA obligations and reduce risk:
- Map all sources and flows of consumer data used for reporting to CRAs.
- Establish a dedicated address and process for receiving consumer disputes, and disclose it clearly in consumer communications.
- Create documented, risk-based procedures for investigating disputes, including timelines and escalation paths.
- Monitor recurring errors or complaint patterns and implement root-cause corrections.
- Coordinate with service providers to ensure they follow FCRA requirements on your behalf.
- Regularly review federal agency guidance and enforcement actions for emerging expectations and interpretations.[10]
Frequently Asked Questions (FAQs)
Q1: Are all businesses that share consumer information considered furnishers?
No. A company is treated as a furnisher under the FCRA when it regularly provides information about consumers to one or more CRAs for use in consumer reports. Occasional or one-time transmissions may not qualify, but ongoing reporting of account or payment data almost always will.
Q2: Can a furnisher avoid liability by relying only on data from a third-party vendor?
No. The furnisher remains responsible for the accuracy and integrity of the information it supplies to CRAs, even if it uses a service provider to manage data or submit files. Contracts and oversight mechanisms should clarify responsibilities and maintain compliance.
Q3: How quickly must a furnisher investigate a dispute?
When a dispute comes through a CRA, a furnisher generally must complete its investigation within the same timeframe the FCRA allows the CRA to resolve the dispute—usually 30 days, with up to 15 extra days if the consumer provides additional relevant information. Similar timelines apply to covered direct disputes.
Q4: What happens if a furnisher cannot verify the disputed information?
If a furnisher cannot reasonably verify the accuracy of the information it furnished, it must modify, delete, or permanently block that information from future reporting and inform all relevant CRAs of the change.
Q5: Where can furnishers find official guidance on their obligations?
Furnishers can consult official rules and guidance from the FTC, CFPB, and federal banking regulators, including the Furnisher Rule, FCRA regulations, and agency guidelines on accuracy and integrity of information. These are published in the Code of Federal Regulations and on agency websites.[10]
References
- Notice to Furnishers of Information — Federal Trade Commission. 2018-09-21. https://consumer.ftc.gov/system/files/consumer_ftc_gov/pdf/notice-to-furnishers.pdf
- Consumer Reports: What Information Furnishers Need to Know — Federal Trade Commission. 2021-11-10. https://www.ftc.gov/business-guidance/resources/consumer-reports-what-information-furnishers-need-know
- 15 U.S. Code § 1681s-2 – Responsibilities of furnishers of information to consumer reporting agencies — Legal Information Institute, Cornell Law School. 2023-04-01. https://www.law.cornell.edu/uscode/text/15/1681s-2
- 16 CFR Part 660 – Duties of Furnishers of Information to Consumer Reporting Agencies — U.S. Government Publishing Office / eCFR. 2024-01-01. https://www.ecfr.gov/current/title-16/chapter-I/subchapter-F/part-660
- Appendix M to Part 1022 – Notice of Furnisher Responsibilities — Consumer Financial Protection Bureau. 2022-03-01. https://www.consumerfinance.gov/rules-policy/regulations/1022/M
- Guidelines for Furnishers of Information to Consumer Reporting Agencies — Federal Trade Commission. 2009-07-01. https://www.ftc.gov/legal-library/browse/federal-register-notices/guidelines-furnishers-information-consumer-reporting-agencies-16-cfr-part-660
Read full bio of Sneha Tete





