Permissible Purpose
Permission to pull a report is verified every time it is used, not signed once and trusted forever.
What it ensures
The FCRA allows a consumer report to be furnished only for a permissible purpose. This control binds that check to each request and evaluates it at the moment of furnishing — so a report is not released on the strength of an onboarding certification made months earlier for a different reason.
It closes the gap between “this account is generally allowed to pull reports” and “this specific pull, right now, has a permissible purpose.” Those are not the same thing, and the difference is where impermissible-purpose liability lives.
Watch it run
A request to pull a consumer report arrives, naming a purpose — and the agent is ready to furnish it.
A request to furnish a consumer report arrives, naming a purpose.
- Ready
The request
A request comes in to pull a consumer report. It names a purpose, and the agent is ready to act. Watch the way the agent can go wrong here — and how it is refused.
- Blocked
The wrong move
Pulling first and justifying later is the most common impermissible-purpose failure. This isn’t a skipped step — it’s the wrong action for this point in the process. The furnish is refused in place; the request hasn’t earned it yet.
Where it comes fromThe FCRA forbids obtaining or using a consumer report except for an enumerated permissible purpose, evaluated for this requester and this use. Permission is a precondition of the pull, not a formality applied after it.
What it satisfiesRefusing the furnish until the purpose is verified is what §1681b(a) and (f) require. Using a report without one exposes the user under §1681n / §1681o — and, done knowingly, the false-pretenses provision of §1681q.
FCRA §1681b(a) Statute 15 U.S.C. § 1681b(a) Subject to subsection (c), any consumer reporting agency may furnish a consumer report under the following circumstances and no other: U.S. Code · Cornell LII ↗ §1681b(f) Statute 15 U.S.C. § 1681b(f) A person shall not use or obtain a consumer report for any purpose unless— (1) the consumer report is obtained for a purpose for which the consumer report is authorized to be furnished under this section; and (2) the purpose is certified in accordance with section 1681e of this title by a prospective user of the report through a general or specific certification. U.S. Code · Cornell LII ↗ §1681q Statute 15 U.S.C. § 1681q Any person who knowingly and willfully obtains information on a consumer from a consumer reporting agency under false pretenses shall be fined under title 18, imprisoned for not more than 2 years, or both. U.S. Code · Cornell LII ↗ - Permitted
Permission, first
The requester and the use are checked against the permissible-purpose list. Only a match clears the pull.
Where it comes fromThe permissible-purpose list is closed — employment, a credit transaction the consumer initiated, a legitimate business need, and a handful more. A use that isn’t on it has no lawful basis, however reasonable it seems.
What it satisfiesVerifying the use against the enumerated bases before release is the affirmative duty §1681b(a) places on the agency that furnishes the report.
FCRA §1681b(a) Statute 15 U.S.C. § 1681b(a) Subject to subsection (c), any consumer reporting agency may furnish a consumer report under the following circumstances and no other: U.S. Code · Cornell LII ↗ - Permitted
Furnished
With a verified purpose, the report is released for the use that was authorized — no more.
Where it comes fromA permissible purpose authorizes a defined use: this report, this requester, this reason. It is not a key that stays in the lock.
What it satisfiesFurnishing on the verified basis satisfies §1681b; the authorizing purpose is recorded against the pull so the release can be tied to its basis later.
FCRA §1681b Statute 15 U.S.C. § 1681b(a) Subject to subsection (c), any consumer reporting agency may furnish a consumer report under the following circumstances and no other: U.S. Code · Cornell LII ↗ - On the record
The proof
Every furnishing carries the purpose it was released under — the per-file answer to “why was this report pulled, and for whom?”
Where it comes fromImpermissible-purpose claims turn on a single pull. The defense is the record of the basis for that pull — not a general assertion of good practice.
What it satisfiesA per-use record of the verified purpose answers the only question that matters in a §1681b dispute or examination.
FCRA §1681n Statute 15 U.S.C. § 1681n(a) Any person who willfully fails to comply with any requirement imposed under this subchapter with respect to any consumer is liable to that consumer in an amount equal to the sum of— (1)(A) any actual damages sustained by the consumer as a result of the failure or damages of not less than $100 and not more than $1,000 … U.S. Code · Cornell LII ↗ §1681o Statute 15 U.S.C. § 1681o(a) Any person who is negligent in failing to comply with any requirement imposed under this subchapter with respect to any consumer is liable to that consumer in an amount equal to the sum of— (1) any actual damages sustained by the consumer as a result of the failure … U.S. Code · Cornell LII ↗
Why the whole holds
No single check protects the consumer here. The protection is that every furnishing — the first and the fifth — must independently earn its purpose, and a completed one grants no license to the next. Reliability isn’t one gate; it’s that there is no path to a disclosure that hasn’t passed its own. Take the per-use discipline away and the whole permission model collapses into “pulled once, used forever.”
Why it matters
Furnishing without a permissible purpose is a direct §1681b violation with private liability, and “we verified it at onboarding” is not a defense to the pull that happened today.