What the FCRA does not cover in business credit disputes

What to take away

What the FCRA was written to protect, and who counts as a consumer

The Fair Credit Reporting Act passed in 1970 with a stated purpose: to make consumer reporting agencies fair and accurate, and to protect consumers from the misuse of sensitive information. Congress framed the whole statute around the individual.

That framing is not decoration. It decides who can demand a reinvestigation, who can sue, and who can collect statutory damages when a bureau gets a fact wrong. (15 U.S. Code § 1681 - Congressional findings and statement of purpose | U.S. Code | US Law | LII / Legal Information Institute)

The law reaches past credit. It governs reports used for employment screening, insurance underwriting, apartment applications and, after later amendments, identity theft and fraud alerts. Each of those uses has an individual as its subject.

The statute covers consumer reporting agencies, consumer reports and consumers. A business credit report sold by Dun & Bradstreet or Experian Business describes a company, its payment behavior, its public filings and its risk of failure. The subject is not a consumer, so the machinery does not attach.

This is the first thing owners miss. They file a well-written consumer dispute letter against a business tradeline and wait for a 30-day clock that never started. The bureau is not late. The obligation was never triggered.

Your EIN is the identity thread running through all of it. The IRS issues that number to the entity, not to you, and commercial reports key off it or off the D-U-N-S number tied to it. When a bureau merges your EIN with a similarly named company, the mistake is a business data error, not a consumer reporting violation.

One nuance matters. A sole proprietor who applies for business credit in a personal name, or who personally signs for a trade line, can create a consumer report on themselves. That personal file is covered. The company file is not. Separating the two is the first step in a serious dispute effort.

Business credit activity concentrates in a handful of states, among them California, Texas, New York, Florida and Illinois. Delaware matters most of all, because so many companies are formed there and their registered agent addresses show up on business reports.

Section 1681a definitions: why a business file sits outside the statute

Section 1681a is the definitions section, and it does the gatekeeping. It defines a consumer as an individual. (15 U.S. Code § 1681a - Definitions; rules of construction | U.S. Code | US Law | LII / Legal Information Institute)

It defines a consumer report as one bearing on a consumer's credit worthiness, character or mode of living, used to decide eligibility for personal credit, insurance or employment.

The definition of consumer is the hinge. A corporation, an LLC, a partnership and a sole proprietorship acting in its business capacity are not individuals. Their payment histories, liens, judgments and trade references are commercial data.

Because the subject is not a consumer, the report is not a consumer report, and the furnisher is not a furnisher under the statute. A bank that reports a late payment on your company's line of credit owes you no FCRA duty to investigate your dispute.

This is the FCRA business credit exclusion, and it is structural, not a loophole. Congress wrote a consumer protection statute. Business-to-business credit reporting grew alongside it under contract and state law.

Public records feed these files too. UCC filings, judgments, tax liens and state registration data flow into commercial reports with uneven accuracy, and a released filing can sit on a company profile long after it was cleared. Correcting the underlying record with the county, the state or the IRS is often the fastest route to a cleaner business file.

Practical consequence: a business file can carry an error for years without any federal reinvestigation deadline. Dun & Bradstreet, Experian Business, Equifax Business and TransUnion Business each run their own correction process, on their own terms, with their own timelines.

That does not mean the file is lawless. It means the pressure comes from somewhere else: your contract with the bureau, your state's credit reporting or unfair trade practice statute, and the reputational cost of an unresolved complaint.

Owners who understand this stop writing consumer-style demand letters and start building a record. If you are still deciding which file you are actually fighting, start with the questions that separate one credit bureau from another before you draft anything.

Section 1681i dispute procedure and the business-file gap

Section 1681i is the dispute engine. It requires a consumer reporting agency to reinvestigate disputed information free of charge, usually within 30 days, and to delete or modify anything that cannot be verified. (15 U.S. Code § 1681i - Procedure in case of disputed accuracy | U.S. Code | US Law | LII / Legal Information Institute)

It also gives the consumer a right to add a statement of dispute, to receive written notice of results, and to sue for willful or negligent noncompliance. Those remedies are the reason consumer disputes have teeth.

None of that reaches a business credit file. There is no federal 30-day reinvestigation clock for a Dun & Bradstreet report. There is no statutory right to a free copy of your company's business credit report, and no statutory damages for a bureau that ignores you.

What exists instead is a voluntary process. Each bureau publishes a dispute channel, accepts documents, and updates the file if it agrees. The timeline is whatever the bureau says it is, and the outcome is discretionary.

That gap is why so many first attempts fail. An owner sends a section 1681i style letter, the bureau treats it as a customer service request, and weeks pass with no formal response. Nothing was violated.

The workaround is to make the bureau's own process work harder. Send the evidence a consumer would send, in a form the business file can absorb. That means a signed letter on company letterhead, a copy of the contract, proof of payment, and a clear statement of the correct figure.

Ask for a correction, not a deletion. Bureaus resist removing a tradeline a supplier genuinely reported, and a request to delete an accurate but unfavorable item reads as a credit repair tactic. Name the wrong figure and the right one.

Keep the consumer file and the business file separate in your head and in your paperwork. Mixing them is how owners accidentally trigger a personal credit issue while trying to fix a company one. A structured set of business credit disputes keeps the two apart from the first letter.

Regulation V and the consumer-only scope of CFPB rules

Regulation V, at 12 CFR Part 1022, is how the CFPB implements the FCRA. It covers permissible purposes, accuracy and integrity of furnished information, direct disputes, identity theft rules and the notices consumers receive. (Regulation V (12 CFR Part 1022))

Its scope tracks the statute. Regulation V governs consumer reporting and consumer disputes. It does not create a federal dispute right for a company file at Experian Business or TransUnion Business.

This is the Regulation V scope point that trips people up. The CFPB writes rules for consumer reporting agencies and furnishers of consumer information. A commercial credit report is outside that perimeter.

The CFPB supervises large consumer reporting agencies, including the nationwide consumer bureaus, for compliance with these rules. That supervision is about consumer files. It is not a channel for adjudicating your company's trade line.

Where Regulation V does help indirectly is through the furnisher accuracy rules. A bank that furnishes consumer information must investigate direct disputes about that consumer information. If a business tradeline also appears on your personal file because you co-signed it, that personal entry is within reach.

So the strategy splits. Attack the personal entry under Regulation V and the FCRA. Attack the business entry under contract and state law. Owners who run both tracks at once get more movement than owners who run one.

What Dun & Bradstreet and the other business bureaus do voluntarily

The four main commercial reporting companies each maintain a dispute or correction process, even though federal law does not compel it. The details differ, and the differences matter when you are choosing where to spend your effort.

Dun & Bradstreet anchors business identity through the D-U-N-S number. A wrong D-U-N-S linkage can merge two companies' data or attach another firm's payment history to yours. D&B accepts correction requests through its own channels and treats the D-U-N-S record as the central key.

Experian Business blends commercial tradelines, public records and its own scores. It accepts disputes through a business support path and generally asks for documentation tying the disputed item to your entity.

Equifax Business maintains commercial reports and scores, and its dispute intake runs through a business services channel rather than the consumer dispute portal. Using the consumer portal for a company file is a common misstep.

TransUnion Business reports on commercial entities and also operates in the consumer space. That dual role is exactly why owners confuse the two. A TransUnion Business disputes request is not a consumer dispute, even though the brand name is the same.

The D-U-N-S number also gates federal contracting and many large vendors' onboarding systems, so a bad record costs more than a score. Each of the four sells business reports into lending, insurance and trade credit decisions, and each prices access differently.

The table below summarizes what each channel gives you and what it does not.

All four respond better to documentation than to argument. A signed letter, a contract, a payment record and a specific correction request move faster than a legal citation the bureau knows does not apply.

Read the terms attached to the product you bought. Monitoring subscriptions and report purchases sometimes carry their own update or appeal path, separate from the free correction channel, and that language may set a response time the company has to honor.

It also helps to know what each bureau sells and to whom. Credit bureaus services, seen from the seller's side, explain why a clean file is worth more to one company than another.

Where the CFPB complaint database still helps a business owner

The CFPB complaint database is a public record of complaints about financial products and services, including credit reporting. Companies respond to complaints routed through the CFPB, and the responses are published in aggregate form. (Consumer Complaint Database)

Business credit reporting complaints do appear in that system. A company that cannot get a commercial bureau to correct a file can still file a complaint describing the problem, and the bureau may respond through the CFPB channel even when it owes no federal duty.

The database is also research. Filter by credit reporting, read how the nationwide bureaus answer complaints, and you learn the language that gets a response. That is useful when you draft your own dispute letter.

Complaint volume is informative too. If many companies describe the same problem with a commercial tradeline, that pattern is useful context in your own letter and in any later conversation with a regulator.

Set expectations, though. The CFPB routes and publishes complaints. It does not adjudicate a commercial dispute or order a bureau to change a business file. A complaint is pressure and a paper trail, not a remedy.

Use it as one rung in an escalation ladder, not the whole ladder. The CFPB complaint database business use case is strongest when the same error also appears on your personal file, because that entry is squarely within the CFPB's consumer reporting remit.

File the complaint with dates, account numbers, the specific inaccurate item, what you already sent the bureau, and what outcome you want. Vague complaints get vague responses.

State law and contract terms as the real dispute lever

With federal consumer law out of reach, the state law fallback for business files becomes the main legal lever. States regulate credit reporting and unfair or deceptive trade practices, and some go further than the FCRA in specific areas.

California, New York, Illinois and Texas maintain consumer protection statutes that can reach a business harmed by inaccurate commercial reporting, depending on the facts. Georgia, Washington and Delaware add their own angles, from business filing records to unfair practice rules.

State attorneys general take complaints about deceptive practices inside their own states, and a business harmed by inaccurate commercial reporting can file there without proving an FCRA violation. A written complaint backed by a bureau's refusal carries more weight than a phone call.

Read your bureau contract or terms of service. When you buy a business credit report or subscribe to monitoring, you agree to a dispute process. That contract may set a response timeline, a documentation standard and an appeal path the bureau must follow.

Contract claims are often more practical than statutory ones. A breach of the agreed dispute process is easier to document than a violation of a statute that may not apply to your entity at all.

The Better Business Bureau adds a reputational lever. A bureau that ignores a documented correction request may respond faster when the same conduct is described in a public complaint about its own business practices.

SBA loan programs raise the stakes. If a business credit file error affects an SBA loan application or a lender's decision, the harm is concrete and documentable, which strengthens both a contract claim and any state law claim.

FICO business scoring models depend on the data these bureaus hold. An uncorrected error can suppress a score that lenders and vendors use, and that downstream harm is what you describe in a state law demand or a contract dispute.

Escalation order matters, and the four rungs of equifax canada vs transunion business credit make each refusal useful rather than final.

Building a dispute record that survives a bureau's refusal

Assume the first request will be refused or ignored. Build the record so the second and third attempts are stronger, and so a state regulator or attorney can act on your file without starting over.

Use this checklist before you send anything.

Two habits decide the outcome. First, keep the personal file and the business file separate, so a business dispute never becomes an accidental consumer dispute. Second, treat silence as data: a bureau's refusal, in writing, is the evidence you need for the next rung.

Keep the paper. Dated copies of every report, letter and response are what a regulator or an attorney works from, and memory is not evidence.

If you want the full sequence from evidence gathering to escalation, work through the business credit scores examples in order. The order of the steps is what makes each later stage harder for a bureau to ignore.

Common questions