Specifications

File Disclosure

A consumer can see their own file — once the agency has confirmed it’s really them.

What it ensures

The FCRA gives consumers the right to a full, accurate copy of their file. It also makes that disclosure conditional on proper identification, because the file is among the most sensitive data an agency holds. This control releases the file only after identity is verified.

It balances the access right against the privacy risk of handing a file to the wrong person.

Watch it run

A request arrives to disclose a consumer’s own file — and the agent is ready to send it.

Illustrative run — one case moving through the File Disclosure specification.

File request Identity verified File released Disclosure denied
Permitted transition Forbidden move Start Terminal state
A consumer has the right to see their own file — but the agency must confirm it is really them first. Releasing the file before verifying identity is in red.
✕ Release file 1 ✓ Request 2 ✓ ID verified 3 ✓ File released
Ready

A request arrives to disclose a consumer’s own file.

  1. Ready

    The request

    Someone asks for the file. The FCRA requires the agency to disclose it — to the right person.

  2. Blocked

    The wrong move

    Handing a file to whoever asks is its own privacy breach. Disclosure is conditioned on proper identification; release is refused until it’s confirmed.

    Where it comes from

    The disclosure right is expressly made subject to identity verification — the file is sensitive, and the agency must know who is receiving it.

    What it satisfies

    Refusing release until proper identification is furnished is exactly what §1681h(a)(1) requires as a condition of the §1681g(a) disclosure.

    FCRA §1681g(a) Statute 15 U.S.C. § 1681g(a)(1) Every consumer reporting agency shall, upon request, and subject to section 1681h(a)(1) of this title, clearly and accurately disclose to the consumer: (1) All information in the consumer’s file at the time of the request… U.S. Code · Cornell LII ↗ §1681h(a)(1) Statute 15 U.S.C. § 1681h(a)(1) A consumer reporting agency shall require, as a condition of making the disclosures required under section 1681g of this title, that the consumer furnish proper identification. U.S. Code · Cornell LII ↗
  3. Permitted

    Identity verified

    The agency confirms it’s the consumer — or their authorized representative.

  4. Permitted

    File released

    Now the consumer gets the full, accurate file the law entitles them to.

  5. On the record

    The proof

    The file shows who received it and that they were verified first.

Why it holds

Why the whole holds

No single check makes disclosure safe. It holds because the file cannot be released until identity is verified, and the verification is recorded. Reliability isn’t a careful clerk; it’s that an unverified requester has no path to the file.

Why it matters

Disclosing a file to an impostor is its own harm and its own violation; the identification condition is what keeps the access right from becoming a leak.