Permissible purpose

A permissible purpose is one of the circumstances the Fair Credit Reporting Act lists at 15 U.S.C. 1681b(a), under which a consumer reporting agency may release a consumer report. It is the whole of the permission. A credit report moves under an entry on that list, or it does not move lawfully at all, and the entries describe the consumer and the transaction rather than the person asking.

The list is closed by the words of the section

Section 1681b(a) opens by providing that, subject to subsection (c), any consumer reporting agency may furnish a consumer report under the following circumstances and no other. Then it enumerates them: a court order and certain subpoenas, the written instructions of the consumer to whom the report relates, a group of business uses, child support enforcement, and two federal regulators. A circumstance is on the list or it is outside the permission.

The two words themselves are not in the operative text. They are the heading of the section, and nothing below the heading defines them. What the statute actually regulates is the act of furnishing, and what the trade calls a permissible purpose is a reference to that enumeration rather than to a defined term of art.

The two entries the lead trade leans on

Two entries carry the weight in mortgage, and both sit inside paragraph (a)(3), which is addressed to a person the agency has reason to believe intends something. Subparagraph (A) covers an intent to use the information in connection with a credit transaction involving the consumer on whom the information is to be furnished, and involving the extension of credit to, or review or collection of an account of, that consumer. Subparagraph (F) is the other.

Legitimate business need does not stand on its own

Subparagraph (F) covers a person who otherwise has a legitimate business need for the information, and the sentence does not end there. The need qualifies in connection with a business transaction that is initiated by the consumer, or to review an account to determine whether the consumer continues to meet the terms of the account. Each clause points back at something the consumer already did.

Source: 15 U.S.C. 1681b(a), read verbatim on 20 September 2026 in the 2023 edition of the United States Code at govinfo.gov. That text supports the closing words of the chapeau, the entries summarised above including the written instructions of the consumer at (a)(2), the credit transaction wording at (a)(3)(A), and the two clauses that qualify a legitimate business need at (a)(3)(F)(i) and (ii). The phrase permissible purpose was searched for throughout the section and appears only in its heading.

A second duty lands on whoever uses the report

Subsection (a) binds the agency that furnishes. Subsection (f) binds the user, separately, and provides that a person shall not use or obtain a consumer report for any purpose unless the report is obtained for a purpose for which it is authorized to be furnished under the section, and the purpose is certified in accordance with section 1681e by a prospective user, through a general or specific certification. The two conditions are cumulative.

Nothing on the list is triggered by acquiring a record

The section never mentions leads, lead generators or the purchase of a record, and no entry turns on how a file reached the desk holding it. Every entry is instead a statement about the consumer and the transaction: an instruction that consumer gave, a credit transaction involving that consumer, an account that consumer holds. Whether one of those is true in a given case is a question of fact, not of provenance.

This is where the term is most often misread in marketing material, which treats the arrival of a record as the thing that unlocks the pull. On the wording above, acquisition is not one of the listed circumstances and does not create one. The section prescribes no form wording, no timestamp and no attestation that would establish an entry either.

Prescreening is not a separate entry on that list

A list of people who contacted nobody does not get its own permission. Subsection (c)(1) lets an agency furnish a report pursuant to subparagraph (A) or (C) of subsection (a)(3) in connection with a credit or insurance transaction that is not initiated by the consumer, and only on conditions set out there. Prescreening therefore runs through the same entries, carrying extra requirements rather than replacing them.

How such a list is assembled, what it may carry and how a consumer gets off it is in prescreened offer. The defined term the first of those conditions turns on is in firm offer of credit. Neither is repeated here.

What the section leaves unsettled

Section 1681b fixes no wording for any form, no test for when a consumer has given written instructions or initiated a transaction, no period for which a purpose lasts, and no rule about obtaining a report again later. It hands the certification to section 1681e and says nothing itself about what that certification contains. Those gaps are in the text, not in this summary of it.

No number appears anywhere above, and the absence is deliberate. Counts of how often reports are obtained without a listed purpose circulate in trade commentary; no primary source for any such figure was opened for this page, so none is printed and none can be recomputed from anything else on it. The remedies for getting this wrong live in other sections of the Act, which were not read here and are therefore not cited.

Source: Fair Credit Reporting Act, 15 U.S.C. 1681b, read on 20 September 2026 in the 2023 edition of the United States Code at govinfo.gov. The closed enumeration is subsection (a); the two entries described are (a)(3)(A) and (a)(3)(F) with its clauses (i) and (ii); the user-side prohibition and its two cumulative conditions are subsection (f); and the routing of non-initiated transactions through subparagraph (A) or (C) of (a)(3) is subsection (c)(1). The section says nothing about leads, lead generators or the purchase of a record, prescribes no form wording, and sets no duration for a purpose. Section 1681e, which (f)(2) points at for the certification, and the remedies at 1681n and 1681o were not read for this page, so nothing is stated about either. No court decision was consulted and none is cited.