Medical Debt Rule Vacated: What Protects Your Credit Now

Medical debt can still legally show up on your credit report in 2026. The federal rule that would have banned it outright — the CFPB's January 2025 amendment to Regulation V — was struck down by a court in July 2025 and never took effect. What protects you today isn't that rule. It's a set of voluntary policies the three major credit bureaus adopted back in 2022 and 2023, plus the baseline protections already built into the Fair Credit Reporting Act (FCRA).

This matters if you have — or had — a medical bill in collections, or if you've been holding off on disputing one because you heard "medical debt was banned from credit reports." It wasn't. Here's what the vacated rule would have done, what's in place now, and what to check on your own report this week.

Why It Matters for Your Credit

The stakes here aren't small. At the time this case was being litigated, an estimated 15 million Americans had more than $49 billion in outstanding medical debt showing on their credit reports. That's a meaningful chunk of the sub-700 FICO population — people already dealing with an insurance dispute, an uncovered ER visit, or a billing error, now watching it drag down a score they need for a car loan or a mortgage.

If you assumed the CFPB's ban had already gone into effect, nothing has changed for you — for better or worse. If you're covered by the bureaus' voluntary policies (more on those below), you already have real protection, and it never depended on the now-vacated rule. Pay closest attention if you're leaning on a state medical-debt law for protection the federal government didn't ultimately deliver. That's the part of this story that's genuinely still unsettled.

How the Law Actually Works Now

The timeline that got us here

The CFPB finalized its medical-debt rule on January 7, 2025. It would have barred creditors from considering medical debt in lending decisions and barred credit reporting agencies from including it on reports at all. Then came the reversal: on May 9, 2025, the agency abandoned its own defense of the rule in Cornerstone Credit Union League et al. v. CFPB et al., in the U.S. District Court for the Eastern District of Texas. Consumer advocacy groups — represented by the National Consumer Law Center — (https://www.nclc.org/court-grants-consumer-groups-authority-to-defend-cfpb-rule-to-remove-medical-debt-from-credit-reports/) on behalf of two individual plaintiffs. It wasn't enough. On July 11, 2025, the court (https://www.consumerfinance.gov/rules-policy/final-rules/prohibition-on-creditors-and-consumer-reporting-agencies-concerning-medical-information-regulation-v/), finding it exceeded the CFPB's statutory authority and was contrary to the FCRA itself.

The statutory floor that never went away

Even with the rule gone, the FCRA still sets real limits. Under 15 U.S.C. § 1681c(a)(6), a consumer reporting agency can't include the name, address, or phone number of a medical information furnisher on your report unless it's coded to avoid identifying the specific provider or the medical services involved. In plain terms: a collection account can say "medical collection," but generally not which doctor, clinic, or condition. The statute also carries separate protections for veterans' medical debt — recent and paid veteran medical debt has to be excluded outright, untouched by anything in this case. For the fuller picture of what the FCRA does and doesn't allow, see (/fcra-basics-your-rights-under-the-fair-credit-reporting-act).

Why State Medical-Debt Laws Are Now on Shaky Ground

Here's the part of the ruling that should worry you if you live somewhere with a strong state medical-debt law. The court didn't just vacate the CFPB's rule — it went further and found that the FCRA preempts state laws that try to ban coded medical debt from appearing on credit reports at all. Roughly 15 states, including California, New York, Colorado, and Minnesota, have laws restricting or banning medical-debt reporting. None of those statutes were directly challenged in this case, so none have been struck down. But the court's reasoning hands anyone who wants to challenge them a clear roadmap.

If your state has one of these laws, don't assume it's permanent. Check whether your state also has a broader credit-services statute worth knowing about — see (/state-credit-services-acts-bonds-and-extra-rights) for the landscape beyond medical debt specifically.

What's Actually Protecting You Right Now

The bureaus' own policy — separate from any of this

This is the part that matters day to day, and it has nothing to do with the CFPB rule or the court case. Starting July 1, 2022, Equifax, Experian, and TransUnion voluntarily agreed to remove any medical collection debt that's been paid in full. Then, as of April 11, 2023, the same three bureaus removed medical collections with an original balance under $500 — (https://www.consumerfinance.gov/about-us/blog/medical-debt-anything-already-paid-or-under-500-should-no-longer-be-on-your-credit-report/), unaffected by the vacatur, covering an estimated 70% of medical collection tradelines that used to appear on credit reports. See what's protecting you under the bureaus' under-$500 removal policy for the full mechanics. The bureaus also stretched the reporting delay for unpaid medical debt from 60-120 days to a full year, giving you more time to sort out insurance or billing disputes before anything hits your file.

How this plays out in your score

FICO Score 9 and FICO Score 10 exclude paid medical collections entirely and weight unpaid medical collections lower than other types of collections. Here's the catch: plenty of lenders, especially mortgage lenders, still pull older scoring models like FICO 8 or the FICO 2/4/5 bundle, which don't get that same treatment. A medical collection that qualifies for removal under the bureaus' policy but hasn't actually been removed yet from a given report can still ding you on the exact model a mortgage underwriter pulls.

What You Can Do This Week

Start with your free reports at AnnualCreditReport.com — pull all three, weekly, at no cost. Look specifically for medical collections that should already be gone: anything paid in full, or anything with an original balance under $500. Found one that's still there? File a dispute directly with the bureau reporting it, citing their own published policy. If the bureau doesn't investigate properly, or the item comes back unchanged, you can (/how-to-escalate-a-credit-bureau-dispute-to-the-cfpb) directly.

If the dispute involves multiple accounts, a billing-code error you can't untangle, or a debt that's been re-aged past when it should have dropped off, it can be worth paying a credit-repair company to handle the back-and-forth for you. If you go that route, know your rights under the Credit Repair Organizations Act first: no fees up front, a written contract, and a three-day right to cancel. Credit Repair Review may earn a commission if you sign up through one of our (/#top-companies).

Frequently Asked Questions

Is medical debt still allowed on credit reports in 2026?

Yes. The CFPB rule that would have banned medical debt from credit reports entirely was vacated by a federal court in July 2025, so the FCRA's normal reporting rules apply again. The bureaus' own voluntary policies — no paid medical collections, nothing under $500, and a one-year reporting delay — are the real protection in place today.

What happened to the CFPB's medical debt rule?

The CFPB finalized the rule in January 2025, but a U.S. District Court in the Eastern District of Texas vacated it on July 11, 2025 in Cornerstone Credit Union League et al. v. CFPB et al., after the CFPB itself asked the court to strike it down. Consumer groups represented by the National Consumer Law Center stepped in to defend the rule but couldn't stop the vacatur.

Do the under-$500 and paid-collection removal policies still apply?

Yes. Those are voluntary policies Equifax, Experian, and TransUnion adopted in 2022-2023, separate from the CFPB rule. They're unaffected by the court's ruling and remain in effect: paid medical collections are excluded, medical collections under $500 are excluded, and unpaid medical debt gets a one-year grace period before it can appear.

Does my state's medical-debt law still protect me?

It's uncertain. The court that vacated the CFPB rule also found that the FCRA preempts state laws that try to ban coded medical debt from credit reports. Roughly 15 states have such laws, and while none were directly struck down in this case, the ruling's reasoning puts them on shaky legal ground.

How do I get an incorrect medical collection removed from my report?

Pull your free reports at AnnualCreditReport.com, confirm the collection should have been excluded under the bureaus' paid or under-$500 policies, then file a dispute directly with the bureau reporting it. If the bureau doesn't properly investigate, escalate the complaint to the CFPB.

The Bottom Line

The federal ban on medical debt reporting never actually took effect — it was vacated before it ever changed anything on your credit report. What's real is the bureaus' own policy: paid medical debt and anything under $500 has been coming off credit reports since 2022 and 2023, and that hasn't changed. The one piece of this that's genuinely unresolved is whether your state's medical-debt law survives the next legal challenge, given how directly this ruling undercuts the legal theory behind those statutes.

Don't wait on Washington to sort this out. Pull your reports, check for anything that should already be gone under the bureaus' existing policy, and dispute it directly if it's still there.