The federal FCRA covers everyone. But California adds a second layer — the CCRAA — with damages up to $5,000 per willful violation.
California consumers can pursue both claims for the same conduct — stacking their recoverable damages.
Each of the following is a separate willful violation under Cal. Civ. Code § 1785.1 et seq. — and they stack.
The CCRAA imposes shorter maximum reporting windows for certain negative items compared to the federal 7-year rule, meaning some adverse information must be removed sooner in California.
Cal. Civ. Code § 1785.16.1 gives California identity theft victims additional rights to block fraudulent information, with stricter timelines for bureau compliance than federal law requires.
Under Cal. Civ. Code § 1785.11.2, California consumers have robust rights to place, lift, and remove security freezes on their credit files — stronger than federal baseline protections.
California law requires disclosure of your credit score in certain mortgage and credit transactions, giving you transparency that exceeds what the federal FCRA mandates in many situations.
The California Attorney General has authority to enforce the CCRAA and bring actions on behalf of California consumers — adding an additional layer of accountability for credit bureaus.
California consumers have explicit rights to obtain their complete credit file, including all information the agency has on them — not just a sanitized consumer report version.
The CFPB found that Equifax ran sham dispute investigations — routing disputes to furnishers without meaningful review and systematically ignoring consumer evidence submitted with disputes. California consumers were among the millions affected. The consent order required a full overhaul of Equifax's dispute processing system.
California courts have awarded substantial damages — including punitive damages multiplied from the CCRAA's $5,000 statutory floor — in cases where credit bureaus mixed consumer files or continued reporting disputed information despite clear evidence of error. CCRAA punitive exposure amplifies recoveries beyond the federal baseline.
The 2017 Equifax breach exposed 147 million consumers' Social Security numbers, birth dates, and addresses. California residents were among the largest affected group. The settlement included up to $125 per affected consumer plus free monitoring, and California's AG was a lead party in the multi-state enforcement action.
California has a strong community of consumer protection attorneys who handle both federal FCRA and state CCRAA claims. Most work on contingency — you pay nothing unless you win, and if you win, the defendant pays your attorney's fees under both statutes' fee-shifting provisions.
Kazerouni Law Group, APC (Costa Mesa and San Diego) — One of California's most prominent FCRA and CCRAA firms, handling both individual cases and class actions. Offices at 245 Fischer Avenue, Suite D1, Costa Mesa, CA 92626 and 2221 Camino del Rio South, Suite 101, San Diego. Phone: (949) 612-9999. Website: kazlg.com.
Loker Law, APC (Arroyo Grande) — NACA-verified California consumer rights firm with a strong focus on FCRA, FDCPA, and TCPA claims. Attorney Matthew Loker is a recognized consumer advocate. Website: lokerlaw.com.
Additional California FCRA attorneys are listed in our attorney directory and the full NACA directory at consumeradvocates.org.
With damages up to $5,000 per violation under the CCRAA — and additional federal FCRA damages stacking on top — California consumers have powerful tools. Consult an attorney at no upfront cost.
Find a California FCRA Attorney →