FTC Settlement with RentGrow: Implications for SaaS Companies under the Fair Credit Reporting Act

Executive Summary

The Federal Trade Commission (FTC) has reached a settlement with RentGrow, a tenant screening company, requiring it to pay $2.25 million for alleged violations of the Fair Credit Reporting Act (FCRA) and the FTC Act. This settlement underscores the importance of compliance with the FCRA for companies providing consumer reports. SaaS companies, particularly those involved in data processing and reporting, must ensure they adhere to the FCRA's requirements to avoid similar allegations.

Background and Context

The Fair Credit Reporting Act (FCRA) is a federal law that regulates the collection, use, and disclosure of consumer credit information. It aims to protect consumers from inaccurate or unfair credit reporting practices. The FCRA applies to consumer reporting agencies (CRAs), which include companies that collect and disseminate information about consumers to be used for credit, employment, housing, or other purposes. The FTC is responsible for enforcing the FCRA, ensuring that CRAs and users of consumer reports comply with its provisions.

Key Provisions or Requirements

The FCRA requires CRAs to follow specific procedures to ensure the accuracy and fairness of consumer reports. Key provisions include:

• Accuracy and Dispute Procedures: CRAs must have reasonable procedures in place to ensure the accuracy of the information they report and to investigate consumer disputes about the accuracy of their reports.
• Disclosure Requirements: CRAs must provide consumers with clear disclosures about their rights under the FCRA, including the right to access their reports, dispute inaccuracies, and opt-out of certain uses of their information.
• Data Security: CRAs must implement reasonable measures to protect the security and confidentiality of consumer information.

Impact on SaaS Companies

For SaaS companies, especially those that provide or utilize consumer reports (e.g., tenant screening services, employment background checks), this settlement highlights the critical need for FCRA compliance. Non-compliance can result in significant financial penalties, as seen in the RentGrow case. SaaS companies must assess their data handling practices to ensure they meet FCRA standards, particularly in terms of data accuracy, consumer disclosure, and security.

Compliance Deadlines and Timeline

While the specific compliance deadlines for the RentGrow settlement are not detailed in the provided information, SaaS companies should proactively review their compliance with the FCRA. Given the continuous nature of FCRA compliance, companies should regularly audit their practices and update policies as necessary to reflect changes in the law or their business operations.

Recommended Actions for SaaS Operators

Conduct a Compliance Audit: Review current practices for collecting, storing, and reporting consumer information to ensure they align with FCRA requirements.

Implement Reasonable Procedures: Develop and enforce procedures for ensuring the accuracy of consumer reports and for handling consumer disputes and complaints.

Provide Clear Disclosures: Ensure that all necessary disclosures are made to consumers, including their rights under the FCRA.

Enhance Data Security Measures: Implement robust security measures to protect consumer information from unauthorized access or breaches.

Train Personnel: Educate staff on FCRA compliance and the importance of adhering to its provisions.

Source Citations

• Federal Trade Commission. (2026, July 9). RentGrow to Pay $2.25 Million to Settle FTC Allegations the Company Violated the Fair Credit Reporting Act and FTC Act. Retrieved from https://www.ftc.gov/news-events/news/press-releases/2026/07/rentgrow-pay-225-million-settle-ftc-allegations-company-violated-fair-credit-reporting-act-ftc-act
• Federal Trade Commission. Fair Credit Reporting Act. Retrieved from https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-reform-proceedings/fair-credit-reporting-act