Scope: Consumer reports used for credit, employment, housing, insurance, and other eligibility decisions. The official federal starting point is the source linked here. Many people-search sites disclaim FCRA status. That means their reports generally must not be used for FCRA-regulated decisions; it does not create a universal deletion right against every data broker.
Why this law appears in a removal guide
Data brokers and people-search sites frequently refer to federal sectoral laws in their privacy notices, product limitations, or eligibility-use disclaimers. The reference can define what a service may do, which data is exempt from a state-law request, or which dispute channel applies. It should not be treated as a universal shortcut for deletion.
FCRA has a defined statutory subject. The analysis begins with the information and activity, not merely the name of the company holding it. A single organization can maintain records under different legal regimes. A state comprehensive privacy law may exempt the organization, exempt data governed by this federal law, or preserve other rights; the wording differs by state.
Practical request sequence
- Identify the exact record, product, and purpose involved. Save the public URL or the notice that describes the data.
- Use the company’s first-party privacy or dispute channel and state the action you seek.
- If the company invokes FCRA, ask which information and activity it considers covered and which right or process remains available.
- Preserve the response and consult the federal regulator or statutory source before escalating.
Do not send a Social Security number, driver’s-license image, full financial account number, or other sensitive identifier by ordinary email merely because a generic response asks for “proof.” Use a secure first-party channel, provide only what is reasonably necessary, and redact unrelated fields where the process permits. See data minimization and identity verification.
Relationship to state privacy law
The state-law matrix summarizes comprehensive statutes separately because their definitions and exemptions are not identical. Check the resident state’s enacted text and any guidance from the enforcing authority. A sectoral exemption can be entity-wide in one state and limited to data processed under the federal law in another.
California’s DELETE Act also excludes specified entities or activities from its data-broker definition. That does not make every record outside California privacy law; it identifies why the exact product and data flow matter.
What this page does not decide
Trustifo does not decide whether a company is legally subject to FCRA, whether an exemption applies, or whether a regulator would accept a complaint. It provides a source-linked orientation so a reader can distinguish broker suppression, consumer-rights deletion, and a sector-specific dispute. For a company route, start with the broker matrix.
Reviewed July 26, 2026. Primary federal source: https://www.ftc.gov/legal-library/browse/statutes/fair-credit-reporting-act. Informational reference, not legal advice.