Glossary and Quick Explanations

Information that can identify a specific individual, either alone (a Social Security number) or combined with other data (name + birthdate + zip code). The exact legal definition varies by which law is being applied — HIPAA, GLBA, and state privacy laws each define it slightly differently.

A company that collects personal information from public records and other sources and sells it, without a direct relationship with the person the data describes. Examples: Spokeo, Whitepages, MyLife. California and Vermont require broker registration; most other states don't.

The 1970 federal law governing credit report accuracy, giving you the right to see your file, dispute errors, and have the bureau investigate within 30 days. It's the legal basis for annualcreditreport.com and for credit freezes.

A reversal of a credit card charge initiated through your card issuer rather than the merchant, under the Fair Credit Billing Act. Must generally be disputed within 60 days of the statement date showing the charge.

Opt-out regimes (most US data-sharing law, e.g. GLBA) collect and share by default until you actively object. Opt-in regimes (GDPR-style) require affirmative consent before any collection happens. Same underlying activity, opposite default.

The 1967 federal law requiring executive-branch agencies to disclose records on request, with a 20-business-day response clock and specific exemptions (classified info, personal privacy, ongoing law enforcement). Applies only to federal agencies — states have separate public records laws.