General legal information, published for everyone. It does not apply the law to anyone’s particular situation and is not legal advice. Laws change and differ by place; check the primary sources below.
Quick summary
- Credit reports can contain wrong names, accounts, balances, payment histories, addresses, or fraud-related information.
- Most countries give you a process to challenge inaccurate information with both the credit reporting agency and, where appropriate, the business that supplied the information.
What it means
Credit reports can contain wrong names, accounts, balances, payment histories, addresses, or fraud-related information. Most countries give you a process to challenge inaccurate information with both the credit reporting agency and, where appropriate, the business that supplied the information.
How the law works
How the law usually works
Credit reporting agencies collect information from lenders, debt collectors, banks, utility providers, courts, and other sources. They generally do not decide whether the underlying debt is valid; they report information supplied by another organization.
The usual legal principle is that information must be accurate, complete, relevant, and handled fairly. If information is inaccurate, incomplete, duplicated, out of date, or belongs to someone else, you can usually ask for it to be corrected or removed.
Common examples include:
- An account that you never opened
- A debt that belongs to another person with a similar name
- A payment shown as late when you paid on time
- An incorrect balance, credit limit, account status, or date
- The same debt appearing more than once
- A debt reported after the applicable reporting period
- An account still showing as unpaid after a settlement or bankruptcy-related event
- A hard credit inquiry that you did not authorize
You usually dispute the report with the credit reporting agency. It is also often useful to contact the lender, collector, or other company that supplied the information. That company is sometimes called the “furnisher” or “data provider.”
A dispute does not necessarily erase a debt. If the information is accurate, the business may continue reporting it. A credit reporting agency may also leave information in place if it reasonably concludes that the report is correct, although the result should generally be explained and you may have further complaint or court options.
Common processes
- Obtain and review your reports. People commonly request reports from each major credit reporting agency because agencies may hold different information. They compare account names, dates, balances, payment codes, inquiries, public-record information, and personal details.
- Identify each specific error. A clear dispute usually lists the account or entry, explains what is wrong, and states what correction is requested. A general statement that the whole report is inaccurate may be harder to investigate.
- Collect supporting documents. Useful evidence can include account statements, payment confirmations, letters from a lender, settlement agreements, identity documents, police or identity-theft reports, court orders, bankruptcy records, and correspondence with the creditor.
- Send a dispute to the reporting agency. People commonly use the agency’s online, postal, or other official process. A written submission can create a useful record. Copies—not originals—of documents are generally retained.
- Contact the information provider. A separate dispute to the lender, collector, or other provider can address the source of the information. The provider may update its records and notify the reporting agencies.
- Keep proof of what was sent. People commonly save the report, dispute, attachments, delivery confirmation, reference number, and all responses. They also note the date each dispute was submitted.
- Review the investigation result. The agency or provider may correct, delete, or verify the entry. People commonly obtain an updated report to check whether the change appeared consistently across agencies.
- Escalate if the problem remains. Options may include a formal complaint to a financial regulator, privacy regulator, ombudsman, or consumer protection agency. Some systems allow you to add a brief explanatory statement to your file. Court action may be available for serious or repeated violations, but the rules and remedies differ substantially by location.
If the problem involves identity theft, people commonly secure affected accounts, change passwords, contact the relevant financial institutions, and report the suspected fraud to the appropriate government or police service. In the United States, a fraud alert or security freeze may also be available. Other countries have comparable fraud-reporting services, but the procedures differ.
Deadlines and time limits
Deadlines depend on both the country and the type of dispute.
- United States: Under the Fair Credit Reporting Act, a credit reporting agency generally investigates a dispute within 30 days. The period can be extended to 45 days in some circumstances, including when additional relevant information is provided during the investigation. The agency generally must communicate the result shortly after completing the investigation. Most negative information is generally reportable for about seven years, while some bankruptcy information can remain longer, subject to statutory rules.
- England and Wales: Data protection law requires inaccurate personal data to be corrected without undue delay, but there is not one universal credit-report dispute deadline equivalent to the U.S. investigation period. A complaint to a financial business commonly has an eight-week stage before escalation to the Financial Ombudsman Service, although exceptions and different rules can apply.
- Canada: Credit reporting practices and complaint routes are affected by federal privacy law and provincial or territorial law. Credit reporting agencies commonly investigate disputes within about 30 days, but the applicable period and process should be confirmed where you live.
- Australia: Credit reporting bodies generally have a statutory process for correction requests, commonly involving an initial 30-day period that may be extended in some circumstances. Complaints to a credit provider, the Australian Financial Complaints Authority, or the Office of the Australian Information Commissioner may have separate requirements.
These are typical ranges, not a calculation of your legal deadline. Confirm the applicable period with the relevant agency, court, regulator, or a licensed lawyer where you live.
Documents that usually matter
Documents often include:
- A current copy of each credit report, with disputed entries marked
- Identification and proof of address, if required
- Account statements and payment receipts
- Bank records or canceled-payment evidence
- Letters showing a debt was paid, settled, discharged, or assigned
- Loan, credit-card, lease, or collection agreements
- Identity-theft, fraud, or police reports
- Bankruptcy, insolvency, or court documents
- Correspondence with the credit reporting agency and data provider
- Delivery confirmations and investigation results
Sensitive information should be sent only through a verified official channel. People commonly redact unrelated account numbers and retain secure copies of everything submitted.
How it differs by jurisdiction
United States: The Fair Credit Reporting Act governs nationwide consumer reporting, including duties of reporting agencies and businesses that furnish information. State laws may provide additional privacy, identity-theft, or consumer-protection rights. The Consumer Financial Protection Bureau and Federal Trade Commission provide complaint and education resources. The legal process can differ when the issue involves a debt collector, identity theft, medical debt, employment screening, or a business credit report rather than a personal consumer report.
England and Wales: The UK GDPR and Data Protection Act 2018 provide the main accuracy and correction principles. Credit reference agencies also operate under industry arrangements and must handle complaints through their stated procedures. The Financial Ombudsman Service may consider complaints involving regulated financial businesses. Scotland and Northern Ireland have different court and institutional arrangements, although much UK data-protection law is shared.
Canada: Privacy rules can be federal or provincial. The federal Personal Information Protection and Electronic Documents Act may apply to many private-sector organizations, while Alberta, British Columbia, and Quebec have substantially similar private-sector privacy legislation in relevant situations. Provincial consumer agencies and financial regulators may also have roles. The process can differ depending on whether the provider is federally regulated and where you reside.
Australia: The Privacy Act 1988 and its credit-reporting provisions are central. The Office of the Australian Information Commissioner handles privacy matters, while the Australian Financial Complaints Authority may handle many disputes involving financial firms. State and territory law can matter for identity theft, contracts, debt collection, and court records.
When people consult a lawyer
Legal advice may be useful when:
- The dispute involves identity theft, a large loan, housing, employment, or insurance
- The error is preventing you from obtaining credit or causing financial loss
- A collector is threatening legal action or continuing collection activity
- The agency or provider repeatedly verifies information that you can prove is wrong
- You received court papers or a bankruptcy or insolvency notice
- You suspect discrimination, unlawful access, privacy misuse, or retaliation
- You are considering a claim for compensation
A lawyer, legal aid service, or authorized consumer adviser can assess local deadlines, evidence, court procedures, and possible remedies.
Primary sources
- StatuteUnited States: Fair Credit Reporting Act, 15 U.S.C. §§ 1681–1681x; Consumer Financial Protection Bureau, “How do I dispute an error on my credit report?”; Federal Trade Commission, Fair Credit Reporting Act materials.United States (federal)
- RegulationEngland and Wales: UK General Data Protection Regulation, Article 5(1)(d) and Article 16; Data Protection Act 2018; Information Commissioner’s Office, “Credit reference agencies”; Financial Ombudsman Service, complaint guidance.England & Wales
- StatuteCanada: Personal Information Protection and Electronic Documents Act; Financial Consumer Agency of Canada, guidance on disputing errors on credit reports; applicable provincial privacy and consumer-protection legislation.Canada
- StatuteAustralia: Privacy Act 1988 (Cth), including credit-reporting provisions; Office of the Australian Information Commissioner, credit reporting guidance; Australian Financial Complaints Authority, credit-reporting complaint guidance.Australia
Links go to official or widely used free sources. Check that a source is current before relying on it. Browse all sources →
- Last updated
- Sep 26, 2026
- Jurisdiction
- General — United States, England & Wales, Canada, Australia
- Written by
- House Legal editorial (AI-generated, earlier format)