How to Fix Incorrect Address History on Your Credit File

An incorrect address on a credit reference file is not simply a clerical nuisance. Address history is one of the data points recorded by UK credit reference agencies (CRAs), and errors — whether caused by data-entry mistakes, confusion between similarly named individuals, or outdated records — can persist for years if left unchallenged. UK law provides a structured process for identifying, disputing, and correcting inaccurate address information. This article explains how that process works, what the relevant legal rights are, and what timelines apply.

There are three main consumer credit reference agencies in the UK: Experian Ltd, Equifax Ltd, and TransUnion International UK Limited. All three are authorised and regulated by the Financial Conduct Authority (FCA) for certain credit-related activities, and are overseen by the Information Commissioner's Office (ICO) in relation to data protection. Because lenders may report to different agencies, an incorrect address could appear on one, two, or all three files independently.

• Rights: UK consumers have a statutory right to dispute and correct inaccurate information on their credit reference files, including incorrect address history. This right is established by Section 159 of the Consumer Credit Act 1974, reinforced by Article 16 of the UK GDPR (the right to rectification) and the Data Protection Act 2018.
• Cost: The core facts are as follows. Obtaining a statutory credit report (sometimes referred to as a credit file disclosure) is free of charge. Raising a dispute is free of charge. Adding a Notice of Correction is free of charge. A CRA must respond to a formal dispute within 28 days. There is no fee at any stage of this statutory process.
• Agencies: Because each of the three main CRAs holds its own file, consumers may need to check and, if necessary, dispute with each agency separately.

The UK system for correcting credit file errors rests on two overlapping legal frameworks: the Consumer Credit Act 1974 and the UK General Data Protection Regulation (UK GDPR), supported by the Data Protection Act 2018.

Section 159 of the Consumer Credit Act 1974 allows an individual to require a credit reference agency to remove or amend an entry they consider incorrect, where they believe they may be prejudiced if it is not corrected. The statutory language references both elements — that the entry is considered incorrect and that prejudice may result — though in practice, CRAs do not generally apply a high evidential threshold to this test.

Separately, Article 16 of the UK GDPR grants every individual the right to have inaccurate personal data rectified without undue delay. The Information Commissioner's Office (ICO) interprets "without undue delay" as meaning within one calendar month of receipt, with a possible extension of up to two months for complex requests.

Two regulators share oversight of CRAs. CRAs are subject to FCA authorisation for certain regulated activities under the Financial Services and Markets Act 2000, and to ICO oversight for data protection compliance under the UK GDPR and the Data Protection Act 2018. For individual complaints under Section 159, the Information Commissioner is designated as "the relevant authority."

How addresses end up on a credit file

Address links are typically created by CRAs from information given by individuals in credit agreements. Each time a linked address is created, the CRA records the source of the link — meaning it should be able to see exactly when and why a particular address was associated with a file. Addresses linked through credit agreements or financial associations (such as joint accounts) may remain on a file if the link is legitimate, even if the consumer no longer resides at that address.

A specific type of error known as a "mis-trace" can also create false address links. According to ICO guidance, a mis-trace occurs when an organisation searching for an individual mistakenly traces someone with the same or similar name. CRAs are expected to break inaccurate links resulting from mis-traces.

The statutory dispute process follows a sequence of defined steps, each with its own deadline.

1. Step 1 — Obtain a copy of the credit reference file. A consumer requests a copy of their statutory credit report. Under Article 15 of the UK GDPR, CRAs must respond within one calendar month of receiving the request. CRAs typically provide online access immediately; where a statutory report is posted, it is generally sent within 7 working days if there are no identity verification issues. CRAs may require proof of name and address (such as a utility bill or bank statement) before releasing the file, to prevent fraudulent access. The CRA is not required to send the file until it receives adequate identification. In certain circumstances, a CRA may take up to an extra two months to respond, but it must explain the reason for the delay within the first month.

2. Step 2 — Issue a formal correction notice (Section 159 notice). The consumer sends a notice to the CRA requiring removal or amendment of the incorrect entry. The CRA then has 28 days to respond. Within that period, it must inform the consumer whether it has removed the entry, amended the entry, or taken no action. If the entry is amended, the CRA must include a copy of the amended entry with its response.

3. Step 3 — If needed, request a Notice of Correction. If the CRA takes no action, or if the consumer disagrees with the outcome, the consumer may serve a further notice requiring the CRA to add a Notice of Correction (NOC) to the file. This further notice must be served within 28 days of receiving the CRA's response — or, if no response was received, within 28 days after the expiry of the original 28-day response period. The NOC is a statement drawn up by the consumer and must not exceed 200 words. The NOC must not be incorrect, defamatory, frivolous, scandalous, or otherwise unsuitable for publication.

4. Step 4 — CRA acknowledges the NOC request. Within 28 days of receiving the NOC request, the CRA must inform the consumer that it has received the notice and intends to comply — unless the CRA intends to challenge the NOC.

5. Step 5 — Referral to the Information Commissioner (if the NOC is contested or the CRA fails to act). If the CRA considers the NOC to be incorrect, unjustly defamatory, frivolous, scandalous, or otherwise unsuitable, it cannot unilaterally refuse to add it. It must refer the matter to the Information Commissioner for a ruling. Equally, if the CRA fails to respond within 28 days, the consumer may apply to the Information Commissioner. The Commissioner may make such order as they think fit and may vary or revoke any order made. There is no statutory timeframe specified for the Commissioner's decision.

6. Step 6 — Notification to lenders. According to published ICO guidance, if an entry is amended, the agency may notify any lender that searched the consumer's credit reference file in the previous six months. In most cases, this notification process is handled by the CRA.

Summary of key numerical values

"I only need to contact one credit reference agency."

Because each of the three main CRAs — Experian, Equifax, and TransUnion — holds its own file and lenders may report to different agencies, an incorrect address could appear on one file but not another. Consumers may need to check and dispute with each agency separately.

"The old £2 fee still applies."

Under the Data Protection Act 1998, there was a £2 fee for statutory credit reports. Under the UK GDPR and current ICO guidance, statutory credit reports are now free of charge. Some outdated sources may still reference the earlier fee, but it no longer applies.

"The 28-day deadline and the one-month deadline are the same thing."

Two different legal frameworks run in parallel. Under Section 159 of the Consumer Credit Act 1974, the deadline for a CRA to respond to a correction notice is 28 days. Under the UK GDPR right to rectification, the deadline is one calendar month (with a possible two-month extension for complex requests). These are separate obligations arising from different legislation.

"An address I have never lived at will always be removed immediately."

Address links created in error — such as through a mis-trace — should be corrected. However, addresses that are legitimately linked to a consumer's file through financial associations or credit agreements may remain, even if the consumer no longer lives there. The CRA's determination of whether an address is "incorrect" depends on verification against source data. The statutory test is whether the entry is incorrect and whether the consumer may be prejudiced if it is not corrected.

"Filing a dispute will change a credit score."

The outcome of a dispute depends on what is disputed and the result. This article does not address the relationship between disputes and credit scores, as the outcome varies case by case.

Addresses linked through financial associations

An address link created by a CRA can be broken if it is inaccurate. However, addresses linked through legitimate financial associations — such as a joint account or authorised user status — may remain on the file even if the consumer no longer resides at that address. The distinction turns on whether the link reflects a genuine financial connection.

Mis-traces

A mis-trace occurs when an organisation searching for an individual mistakenly traces someone with the same or similar name. This can result in another person's address appearing on a consumer's file. ICO guidance indicates that CRAs are expected to break inaccurate links resulting from mis-traces.

Temporary suppression during investigation

According to TransUnion's published guidance, if the CRA does not receive a response from the data provider within 28 days during a dispute investigation, it may temporarily suppress the disputed information from the credit file until a response is received. This specific process may vary between CRAs.

CRA refusal to publish a Notice of Correction

A CRA cannot simply refuse to add a Notice of Correction. If it considers the NOC to be incorrect, defamatory, frivolous, scandalous, or otherwise unsuitable, it must apply to the Information Commissioner for a ruling. The Commissioner then decides the matter.

Extended response times for complex requests

Under the UK GDPR, CRAs may extend the one-month response time for data subject access requests by up to two additional months if requests are complex or numerous. The CRA must inform the individual of the extension within one month of receipt and explain why the extension is necessary.

Retention of address data

Account information, including linked addresses, is typically kept on a credit file for six years from account closure. Electoral roll information is kept indefinitely. Linked addresses may remain on file for as long as the information is considered relevant for credit referencing purposes.

The process of correcting an incorrect address on a credit file follows a structured legal pathway. A consumer first obtains their statutory credit report — free of charge — from one or more of the three main CRAs. If an incorrect address appears, the consumer issues a formal notice under Section 159 of the Consumer Credit Act 1974 requiring the CRA to remove or amend the entry.

The CRA has 28 days to respond. If the CRA amends or removes the entry, it must confirm this in writing and, according to published ICO guidance, may notify any lender that searched the file in the previous six months. If the CRA takes no action, or if the consumer disagrees with the outcome, the consumer may request a Notice of Correction — a statement of up to 200 words that is added to the file and visible to anyone who searches it. The request for a NOC must be made within 28 days of the CRA's response (or within 28 days of the response deadline expiring, if no response was received).

If the CRA objects to the Notice of Correction or fails to act, the matter can be referred to the Information Commissioner, who has the authority to make such order as they see fit.

Because the three CRAs operate independently, an incorrect address may need to be disputed with each agency separately. Each dispute follows the same statutory framework, but the investigation at each CRA proceeds on its own timeline.

The entire process — from obtaining a statutory report, to raising a dispute, to adding a Notice of Correction — carries no fee to the consumer.

• Statutory Right: UK consumers have a statutory right to dispute and correct inaccurate address history on their credit reference files, established by the Consumer Credit Act 1974, the UK GDPR, and the Data Protection Act 2018.
• Free Process: There is no charge for obtaining a statutory credit report, raising a dispute, or adding a Notice of Correction.
• Timeframes: The statutory timeframe for a CRA to respond to a dispute under the Consumer Credit Act 1974 is 28 days. Under the UK GDPR, the equivalent deadline is one calendar month, with a possible two-month extension for complex requests.
• Step-by-Step: If a dispute is unsuccessful, a consumer may add a Notice of Correction of up to 200 words to their file within the statutory deadline.
• Escalation: If a CRA fails to act or refuses to add a Notice of Correction, the matter can be referred to the Information Commissioner.
• Independent Agencies: Because the three main CRAs — Experian, Equifax, and TransUnion — hold separate files and receive data from different lenders, consumers may need to check and dispute with each agency independently.
• Correction Types: Address links created in error, including those caused by mis-traces, should be correctable. Addresses linked through legitimate financial associations may remain on file even if the consumer no longer resides at that address.