What to Do If a Company Refuses to Correct Your Personal Information
Incorrect personal information can cause anything from a failed login to the denial of credit, housing, employment, or medical coverage. Getting it corrected may require more than contacting customer service because the applicable rights depend on the type of record and the company holding it.
The United States does not have one federal law giving everyone a universal right to correct information held by every private company. Federal sector-specific laws and state privacy laws may provide correction rights in particular situations.
This article provides general U.S. information, not individualized legal advice. Rights and procedures vary by state and jurisdiction.
Identify the Exact Information and Its Source
Begin by identifying the specific entry that is wrong. Avoid making a broad request such as “correct my account.” Instead, state:
What the company currently shows
What the information should say
Why the existing information is inaccurate or incomplete
Where the information appears
What documents support the requested correction
A company may have received the information from a credit bureau, data broker, court, lender, health care provider, or another business. Correcting the original source can be necessary to prevent the error from returning.
If a background report contains the wrong criminal record, for example, the reporting company may need evidence from the court. Correcting only the background report may not fix the underlying public record.
Send a Written Correction Request
Use the company’s designated privacy, dispute, or records-correction process when one exists. A written request should include:
Your name and sufficient information to locate the account
A description of each disputed item
The requested correction
Copies of supporting records
The date and preferred method of response
A request for a written explanation if the correction is denied
Send copies rather than original documents. Redact unrelated account numbers, medical details, and other sensitive information unless the company genuinely needs them to verify the request.
Keep the request, attachments, delivery confirmation, screenshots, reference numbers, and every response. These records become important if the matter must be escalated.
Determine Which Law Applies
Your options depend heavily on the kind of information involved.
Credit and Consumer Reports
The federal Fair Credit Reporting Act covers credit reports and many employment, tenant, insurance, banking, and other consumer reports prepared by reporting companies.
You generally have the right to dispute inaccurate or incomplete information with both the reporting company and the business that supplied it. The reporting company must conduct a reasonable reinvestigation, usually within 30 days and sometimes within 45 days.
Information that is inaccurate, incomplete, or cannot be verified must generally be corrected or deleted. If the dispute remains unresolved, you can ask the reporting company to include a brief statement of dispute in your file.
Before filing a credit-reporting complaint with the Consumer Financial Protection Bureau, complete the reporting company’s direct dispute process or allow the required response period to pass.
Medical and Billing Records
The HIPAA Privacy Rule gives patients the right to request an amendment to inaccurate or incomplete information in records maintained by covered health care providers and health plans.
A provider can deny an amendment on limited grounds, including when it believes the information is accurate and complete or did not create the record. A disagreement with a professional medical opinion does not automatically make the record factually inaccurate.
If the request is denied, the provider or plan generally must issue a written explanation. You can submit a statement of disagreement that must be linked to the disputed record. HIPAA generally allows up to 60 days for a response, with a possible 30-day extension when proper notice is provided.
HIPAA does not cover every health-related app, website, employer, or business.
Employment and Tenant Background Reports
Background-screening companies are often subject to the Fair Credit Reporting Act. If an employer or landlord takes an unfavorable action based on a report, you generally have the right to receive information identifying the reporting company and to dispute inaccurate or incomplete entries.
Ask the screening company to send the corrected report to the employer or housing provider. Notify the decision-maker promptly that the information is disputed, especially when a job or housing decision is pending.
State and local laws may provide additional protections or shorter deadlines.
State Consumer Privacy Laws
Some states give qualifying residents the right to request correction of inaccurate personal information held by covered businesses.
California, for example, gives consumers a right to ask a covered business to correct inaccurate personal information. A business receiving a verifiable request must use commercially reasonable efforts to correct it, subject to statutory exceptions. The business may require identity verification and may deny requests it reasonably considers fraudulent or abusive.
Coverage, response periods, appeal procedures, and exemptions vary among states. A small business, nonprofit, financial institution, employer, or information covered by another law may be partially or completely exempt.
Respond to a Denial
If the company refuses the correction, request a written response identifying:
The reason for the denial
The evidence it relied upon
The source of the disputed information
Any internal appeal or reconsideration process
Whether a statement of disagreement can be attached
Which third parties received the inaccurate information
Review the denial for misunderstandings or missing documents. If the company says it cannot verify the correction, submit focused evidence that directly addresses that concern rather than repeatedly sending the same general request.
Where an appeal right exists under state privacy law, follow the stated instructions and deadline.
Escalate to the Appropriate Regulator
The correct regulator depends on the record:
Submit credit and consumer-reporting complaints to the Consumer Financial Protection Bureau.
Report potential Fair Credit Reporting Act violations or deceptive practices to the Federal Trade Commission.
Submit HIPAA complaints to the HHS Office for Civil Rights.
Contact the relevant state attorney general or state privacy regulator.
California residents can review complaint options through the California Privacy Protection Agency.
A regulator may investigate compliance, seek a company response, or use complaints to identify broader violations. Filing a complaint does not guarantee compensation or an immediate correction.
If the inaccurate information has caused the loss of employment, housing, credit, insurance, or another significant opportunity, consult an attorney familiar with consumer reporting, privacy, or the relevant area of state law. Legal deadlines may apply.
Watch for Identity Theft
Information involving unfamiliar accounts, addresses, or transactions may indicate identity theft rather than an ordinary recordkeeping error. Use IdentityTheft.gov to create an FTC Identity Theft Report and recovery plan.
Change affected passwords, review financial and consumer reports, and consider fraud alerts or credit freezes. Continue correcting the information at its source so that it is not repeatedly redistributed.
The strongest correction requests are specific, supported by records, and directed through the process created for that type of information.
