The Fair Credit Reporting Act And The Birth Of Data Privacy Laws

The real story of the fair credit reporting act and the birth of data privacy laws is far weirder, older, and more consequential than the version most people know.

The Unlikely Roots Of Data Privacy

The origins of the Fair Credit Reporting Act (FCRA) and the modern data privacy movement can be traced back to an unexpected source: a case involving a home improvement store credit card in 1968. That year, a Detroit man named William Prosser sued the Sears, Roebuck and Company over what he claimed was an invasion of his privacy.

Prosser, a former construction worker, had applied for a Sears charge card to finance some home renovations. When his application was denied, he discovered that Sears had obtained a detailed credit report about him from a little-known agency called Trans Union Credit Reporting. Prosser was outraged that this private information had been shared without his knowledge or consent.

What followed was a landmark case that eventually reached the Michigan Supreme Court. In a surprise ruling, the court sided with Prosser, declaring that the unauthorized acquisition and use of an individual's personal data did in fact constitute an "invasion of privacy" under state law.

"The right to be let alone is indeed the beginning of all freedom." - Michigan Supreme Court Justice John Voelker

The Rise Of The Credit Reporting Industry

The Prosser v. Sears case shone a light on the shadowy world of consumer credit reporting, which had been growing rapidly in the decades following World War II. As more Americans gained access to credit cards, mortgages, and other loan products, lenders needed a way to assess the risk of each applicant.

Enter companies like Equifax, Experian, and Trans Union, which began amassing detailed financial profiles on millions of Americans. These "credit bureaus" collected information from banks, retailers, and other sources, compiling it into comprehensive credit reports that could be sold to businesses for a profit.

The Prosser case forced legislators to grapple with this new reality. If an individual's private financial information could be obtained and used without their consent, what other rights were being violated? The court's ruling made it clear that the status quo was unacceptable - something had to be done.

Introducing The Fair Credit Reporting Act

In the wake of the Prosser decision, Congress moved quickly to address the growing privacy crisis. After years of debate and negotiation, the Fair Credit Reporting Act (FCRA) was signed into law by President Richard Nixon in 1970.

The FCRA established a number of landmark consumer protections:

• Consumers had the right to access their credit reports and dispute any inaccurate information
• Credit bureaus were required to follow strict procedures for collecting, storing, and sharing consumer data
• Businesses could only access credit reports for "permissible purposes" like evaluating loan applications
• Consumers could seek damages if their privacy was violated

Crucially, the FCRA also empowered the Federal Trade Commission (FTC) to oversee and enforce the new law. This gave the government a powerful tool to regulate the burgeoning credit reporting industry and protect consumer rights.

The FCRA's Lasting Impact

The passage of the FCRA marked a major turning point in the history of data privacy. For the first time, Americans had enforceable legal rights over how their personal information could be collected and used. It was a profound shift that would have ripple effects for decades to come.

In the years that followed, the FCRA paved the way for a wave of new privacy laws and regulations, both in the U.S. and around the world. It laid the groundwork for landmark legislation like the General Data Protection Regulation (GDPR) in the European Union, which aimed to give individuals even greater control over their digital data.

Today, the credit reporting industry is a multi-billion dollar business, with Equifax, Experian, and TransUnion dominating the market. But the FCRA has ensured that consumers have a legal recourse if their rights are violated. It's a legacy that continues to shape the ongoing battle over how our personal information is collected, stored, and used.