Title 15 › CHAPTER 41 — CONSUMER CREDIT PROTECTION › SUBCHAPTER III — CREDIT REPORTING AGENCIES › § 1681c–2
A consumer reporting agency must stop showing any item in a person’s file that the person says came from identity theft. The agency has 4 business days after it gets four things: proof of the person’s identity, a copy of an identity theft report, a clear ID of the items to be blocked, and a statement that those items were not the person’s transactions. The agency must quickly tell the company that gave the information that it may be identity theft, that a report was filed, that a block was requested, and when the block starts. The agency can refuse or undo a block if it reasonably finds the block was an error, was based on a serious lie by the person, or the person actually got goods, services, or money from the blocked items. If a block is denied or removed, the person must be told promptly. Different rules apply to resellers and to check-services companies: resellers not selling the report must tell the person how to contact the Bureau; resellers that do keep a file must block it from future use and must tell the person which agencies gave them the data. Law enforcement can still access blocked items if they are otherwise allowed to.
Full Legal Text
Commerce and Trade, Source: USLM XML via OLRC
Legislative History
Reference
Citation
15 U.S.C. § 1681c–2
Title 15, Commerce and Trade
Last Updated
Sep 22, 2026
Release point: 119-110