Medical Debt in the Crosshairs: What FCRA Professionals Need to Know as Reporting Rules Shift

Few areas of consumer reporting have attracted more regulatory attention in recent years than medical debt. From rulemaking proposals to voluntary industry changes, the landscape around how medical bills appear on consumer reports is shifting — and FCRA professionals are expected to understand both the existing legal framework and the direction things are heading.

The Regulatory and Industry Backdrop

The three nationwide consumer reporting agencies — Equifax, Experian, and TransUnion — announced voluntary changes beginning in 2022 that phased out reporting of many medical debt collections from consumer reports. These changes included removing paid medical collection accounts and raising the threshold for reporting unpaid medical collections. The Consumer Financial Protection Bureau (CFPB) subsequently proposed formal rulemaking that would go further, potentially prohibiting medical debt from appearing on consumer reports used for credit decisions altogether.

As of this writing, the rulemaking process has not concluded, and rules can change based on agency priorities and administration transitions. CFCRP members should monitor the CFPB's rulemaking docket directly rather than relying on summaries alone. What matters for compliance work right now is understanding the interplay between existing FCRA requirements and these evolving policy changes.

What the FCRA Already Says About Medical Information

The FCRA has long included specific provisions related to medical information. Among the most important:

• Restrictions on the use of medical information: The FCRA restricts consumer reporting agencies and users of consumer reports from using medical information in connection with credit eligibility determinations in certain ways. Regulations implementing these restrictions were issued jointly by banking agencies and the FTC following the FACTA amendments.
• Redaction requirements: CRAs are required to redact the name and address of medical information furnishers so that the nature of the debt (i.e., that it is medical) is not apparent from the report when it is used for employment or credit purposes — unless the consumer consents or the information is relevant to a specific exception.
• Obsolescence rules still apply: Medical collections, like any other negative information, are subject to the FCRA's standard obsolescence periods — generally seven years from the date of first delinquency — regardless of balance or payment status under existing federal law.

Furnisher Obligations Remain Fully in Force

Medical debt furnishers — including hospitals, physician groups, collection agencies, and debt buyers — are subject to the same furnisher accuracy and dispute investigation requirements that apply to any other furnisher under the FCRA. This means:

• They must report accurate information and update or correct inaccuracies promptly.
• When a CRA forwards a consumer dispute, furnishers must conduct a reasonable investigation, review all relevant information provided, and report results back to the CRA within the applicable timeframe.
• They cannot continue reporting information they know to be inaccurate.

Voluntary industry changes by the major CRAs do not override these obligations — they simply mean some medical debt may not appear on reports from those CRAs. Furnishers still bear responsibility for accuracy whenever they do report, and specialty CRAs that report medical collections may operate under different voluntary policies.

Consumer Confusion Is a Compliance Signal

One underappreciated compliance challenge is that consumers are often confused about why a medical debt does or does not appear on their report, or why it appears on a report from one CRA but not another. This confusion drives disputes — some valid, some not — and puts pressure on furnishers and CRAs to explain their reporting decisions clearly. FCRA professionals working in compliance, consumer relations, or training roles should anticipate this confusion and build clear internal guidance around it.

Practical Takeaways for CFCRP Members

1. Distinguish voluntary policy from legal mandate. When advising internal teams or clients, be precise: current industry changes removing certain medical debt from major CRA reports are voluntary, not yet codified in federal statute or final CFPB regulation. Compliance programs should not treat voluntary changes as permanent or universal without ongoing monitoring.
2. Audit furnisher practices for medical accounts specifically. If your organization furnishes medical debt, conduct a targeted review of reporting accuracy, date-of-first-delinquency calculations, and dispute handling workflows. Medical accounts are a high-scrutiny category and errors carry real regulatory and litigation risk.
3. Know which CRAs and specialty bureaus your clients or consumers interact with. The voluntary changes made by Equifax, Experian, and TransUnion do not apply uniformly across all consumer reporting agencies. Specialty CRAs may still report medical collections. FCRA professionals should understand the full scope of reporting environments relevant to their work.
4. Train consumer-facing staff to set accurate expectations. Staff who interact with consumers about medical debt on reports need scripted, accurate talking points — not guesses. Misrepresenting what will or won't appear on a report, or why, can create its own compliance and reputational risk.
5. Stay current on rulemaking developments. Regulatory activity in this area has been unusually fast-moving. CFCRP members should build CFPB rulemaking monitoring into their regular compliance calendars, not treat it as a one-time update.

The Bigger Picture

Medical debt sits at the intersection of healthcare policy, consumer protection, and credit reporting — which is exactly why it draws so much regulatory and public attention. For FCRA professionals, the job is not to predict where policy will land, but to ensure that current obligations are met accurately, that disputes are handled properly, and that any evolving rules are incorporated into compliance programs without delay.

This article is provided for educational purposes only and is intended to support the professional development of CFCRP students and Certified FCRA Professionals. It does not constitute legal advice and should not be relied upon as such. Laws, regulations, and industry practices referenced here are subject to change. Consult qualified legal counsel for advice specific to your organization's circumstances.

Last updated: September 26, 2026 · Published by the FCRA Professional Institute