Subchapter III from s. 1681c-2, 15 USC ch. 41

This page is Subchapter III, Credit Reporting Agencies, s. 1681c-2 to s. 1681m of TILA, FCRA and ECOA, 15 USC chapter 41: 12 sections, in the publisher's own words. The text was read on September 8, 2026.

Reproduced from the official United States Code. The official version is the one linked above. Nothing has been added to the text, and nothing inside this chapter has been left out.

Section 1681c–2§Sections Block of information resulting from identity theft

(a) Block

Except as otherwise provided in this section, a consumer reporting agency shall block the reporting of any information in the file of a consumer that the consumer identifies as information that resulted from an alleged identity theft, not later than 4 business days after the date of receipt by such agency of—

(1) appropriate proof of the identity of the consumer;

(2) a copy of an identity theft report;

(3) the identification of such information by the consumer; and

(4) a statement by the consumer that the information is not information relating to any transaction by the consumer.

(b) Notification

A consumer reporting agency shall promptly notify the furnisher of information identified by the consumer under subsection (a)—

(1) that the information may be a result of identity theft;

(2) that an identity theft report has been filed;

(3) that a block has been requested under this section; and

(4) of the effective dates of the block.

(1) In general

A consumer reporting agency may decline to block, or may rescind any block, of information relating to a consumer under this section, if the consumer reporting agency reasonably determines that—

(A) the information was blocked in error or a block was requested by the consumer in error;

(B) the information was blocked, or a block was requested by the consumer, on the basis of a material misrepresentation of fact by the consumer relevant to the request to block; or

(C) the consumer obtained possession of goods, services, or money as a result of the blocked transaction or transactions.

(2) Notification to consumer

If a block of information is declined or rescinded under this subsection, the affected consumer shall be notified promptly, in the same manner as consumers are notified of the reinsertion of information under section 1681i(a)(5)(B) of this title.

(3) Significance of block

For purposes of this subsection, if a consumer reporting agency rescinds a block, the presence of information in the file of a consumer prior to the blocking of such information is not evidence of whether the consumer knew or should have known that the consumer obtained possession of any goods, services, or money as a result of the block.

(d) Exception for resellers

(1) No reseller file

This section shall not apply to a consumer reporting agency, if the consumer reporting agency—

(A) is a reseller;

(B) is not, at the time of the request of the consumer under subsection (a), otherwise furnishing or reselling a consumer report concerning the information identified by the consumer; and

(C) informs the consumer, by any means, that the consumer may report the identity theft to the Bureau to obtain consumer information regarding identity theft.

(2) Reseller with file

The sole obligation of the consumer reporting agency under this section, with regard to any request of a consumer under this section, shall be to block the consumer report maintained by the consumer reporting agency from any subsequent use, if—

(A) the consumer, in accordance with the provisions of subsection (a), identifies, to a consumer reporting agency, information in the file of the consumer that resulted from identity theft; and

(B) the consumer reporting agency is a reseller of the identified information.

(3) Notice

In carrying out its obligation under paragraph (2), the reseller shall promptly provide a notice to the consumer of the decision to block the file. Such notice shall contain the name, address, and telephone number of each consumer reporting agency from which the consumer information was obtained for resale.

(e) Exception for verification companies

The provisions of this section do not apply to a check services company, acting as such, which issues authorizations for the purpose of approving or processing negotiable instruments, electronic fund transfers, or similar methods of payments, except that, beginning 4 business days after receipt of information described in paragraphs (1) through (3) of subsection (a), a check services company shall not report to a national consumer reporting agency described in section 1681a(p) of this title, any information identified in the subject identity theft report as resulting from identity theft.

(f) Access to blocked information by law enforcement agencies

No provision of this section shall be construed as requiring a consumer reporting agency to prevent a Federal, State, or local law enforcement agency from accessing blocked information in a consumer file to which the agency could otherwise obtain access under this subchapter.

(Pub. L. 90–321, title VI, § 605B, as added Pub. L. 108–159, title I, § 152(a), Dec. 4, 2003, 117 Stat. 1964; amended Pub. L. 111–203, title X, § 1088(a)(2)(C), July 21, 2010, 124 Stat. 2087.)

Editorial Notes

Amendments

2010—Subsec. (d)(1)(C). Pub. L. 111–203 substituted “the Bureau” for “the Commission”.

Statutory Notes and Related Subsidiaries

Effective Date of 2010 Amendment

Amendment by Pub. L. 111–203 effective on the designated transfer date, see section 1100H of Pub. L. 111–203, set out as a note under section 552a of Title 5, Government Organization and Employees.

Effective Date

Section subject to joint regulations establishing effective dates as prescribed by Federal Reserve Board and Federal Trade Commission, except as otherwise provided, see section 3 of Pub. L. 108–159, set out as an Effective Date of 2003 Amendment note under section 1681 of this title.

Section 1681c–3§Sections Adverse information in cases of trafficking

(a) Definitions

In this section:

(1) Trafficking documentation

The term “trafficking documentation” means—

(A) documentation of—

(i) a determination that a consumer is a victim of trafficking made by a Federal, State, or Tribal governmental entity; or

(ii) by a court of competent jurisdiction; and

(B) documentation that identifies items of adverse information that should not be furnished by a consumer reporting agency because the items resulted from a severe form of trafficking in persons or sex trafficking of which the consumer is a victim.

(2) Trafficking Victims Protection Act of 2000 definitions

The terms “severe forms of trafficking in persons” and “sex trafficking” have the meanings given, respectively, in section 103 of the Trafficking Victims Protection Act of 2000 (22 U.S.C. 7102).

(3) Victim of trafficking

The term “victim of trafficking” means a person who is a victim of a severe form of trafficking in persons or sex trafficking.

(b) Adverse information

A consumer reporting agency may not furnish a consumer report containing any adverse item of information about a consumer that resulted from a severe form of trafficking in persons or sex trafficking if the consumer has provided trafficking documentation to the consumer reporting agency.

(1) In general

Not later than 180 days after December 27, 2021, the Director shall issue rules to implement subsection (a).

(2) Contents

The rules issued pursuant to paragraph (1) shall establish a method by which consumers shall submit trafficking documentation to consumer reporting agencies.

(Pub. L. 90–321, title VI, § 605C, as added Pub. L. 117–81, div. F, title LXI, § 6102(a), Dec. 27, 2021, 135 Stat. 2383.)

Statutory Notes and Related Subsidiaries

Effective Date

Pub. L. 117–81, div. F, title LXI, § 6102(c), Dec. 27, 2021, 135 Stat. 2384, provided that: “The amendments made by this section [enacting this section] shall apply on the date that is 30 days after the date on which the Director of the Bureau of Consumer Financial Protection issues a rule pursuant to section 605C(c) of the Fair Credit Reporting Act [15 U.S.C. 1681c–3(c)], as added by subsection (a) of this section. Any rule issued by the Director to implement such section 605C [15 U.S.C. 1681c–3] shall be limited to preventing a consumer reporting agency from furnishing a consumer report containing any adverse item of information about a consumer (as such terms are defined, respectively, in section 603 the Fair Credit Reporting Act (15 U.S.C. 1681a)) that resulted from trafficking.”

Section 1681d§Sections Disclosure of investigative consumer reports

(a) Disclosure of fact of preparation

A person may not procure or cause to be prepared an investigative consumer report on any consumer unless—

(1) it is clearly and accurately disclosed to the consumer that an investigative consumer report including information as to his character, general reputation, personal characteristics, and mode of living, whichever are applicable, may be made, and such disclosure (A) is made in a writing mailed, or otherwise delivered, to the consumer, not later than three days after the date on which the report was first requested, and (B) includes a statement informing the consumer of his right to request the additional disclosures provided for under subsection (b) of this section and the written summary of the rights of the consumer prepared pursuant to section 1681g(c) of this title; and

(2) the person certifies or has certified to the consumer reporting agency that—

(A) the person has made the disclosures to the consumer required by paragraph (1); and

(B) the person will comply with subsection (b).

(b) Disclosure on request of nature and scope of investigation

Any person who procures or causes to be prepared an investigative consumer report on any consumer shall, upon written request made by the consumer within a reasonable period of time after the receipt by him of the disclosure required by subsection (a)(1), make a complete and accurate disclosure of the nature and scope of the investigation requested. This disclosure shall be made in a writing mailed, or otherwise delivered, to the consumer not later than five days after the date on which the request for such disclosure was received from the consumer or such report was first requested, whichever is the later.

No person may be held liable for any violation of subsection (a) or (b) of this section if he shows by a preponderance of the evidence that at the time of the violation he maintained reasonable procedures to assure compliance with subsection (a) or (b).

(d) Prohibitions

(1) Certification

A consumer reporting agency shall not prepare or furnish an investigative consumer report unless the agency has received a certification under subsection (a)(2) from the person who requested the report.

(2) Inquiries

A consumer reporting agency shall not make an inquiry for the purpose of preparing an investigative consumer report on a consumer for employment purposes if the making of the inquiry by an employer or prospective employer of the consumer would violate any applicable Federal or State equal employment opportunity law or regulation.

(3) Certain public record information

Except as otherwise provided in section 1681k of this title, a consumer reporting agency shall not furnish an investigative consumer report that includes information that is a matter of public record and that relates to an arrest, indictment, conviction, civil judicial action, tax lien, or outstanding judgment, unless the agency has verified the accuracy of the information during the 30-day period ending on the date on which the report is furnished.

(4) Certain adverse information

A consumer reporting agency shall not prepare or furnish an investigative consumer report on a consumer that contains information that is adverse to the interest of the consumer and that is obtained through a personal interview with a neighbor, friend, or associate of the consumer or with another person with whom the consumer is acquainted or who has knowledge of such item of information, unless—

(A) the agency has followed reasonable procedures to obtain confirmation of the information, from an additional source that has independent and direct knowledge of the information; or

(B) the person interviewed is the best possible source of the information.

(Pub. L. 90–321, title VI, § 606, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1130; amended Pub. L. 104–208, div. A, title II, §§ 2408(d)(2), 2414, Sept. 30, 1996, 110 Stat. 3009–438, 3009–449.)

Editorial Notes

Amendments

1996—Subsec. (a)(1)(B). Pub. L. 104–208, §§ 2408(d)(2), 2414(1), inserted “and the written summary of the rights of the consumer prepared pursuant to section 1681g(c) of this title” before the semicolon and substituted “and” for “or” at end.

Subsec. (a)(2). Pub. L. 104–208, § 2414(2), added par. (2) and struck out former par. (2) which read as follows: “the report is to be used for employment purposes for which the consumer has not specifically applied.”

Subsec. (b). Pub. L. 104–208, § 2414(3), substituted “, make a complete” for “, shall make a complete”.

Subsec. (d). Pub. L. 104–208, § 2414(4), added subsec. (d).

Statutory Notes and Related Subsidiaries

Effective Date of 1996 Amendment

Amendment by Pub. L. 104–208 effective 365 days after Sept. 30, 1996, with special rule for early compliance, see section 2420 of Pub. L. 104–208, set out as a note under section 1681a of this title.

Effective Date

Section effective upon the expiration of one hundred and eighty days following Oct. 26, 1970, see section 504(d) of Pub. L. 90–321, as added by Pub. L. 91–508, set out as a note under section 1681 of this title.

Section 1681e§Sections Compliance procedures

(a) Identity and purposes of credit users

Every consumer reporting agency shall maintain reasonable procedures designed to avoid violations of section 1681c of this title and to limit the furnishing of consumer reports to the purposes listed under section 1681b of this title. These procedures shall require that prospective users of the information identify themselves, certify the purposes for which the information is sought, and certify that the information will be used for no other purpose. Every consumer reporting agency shall make a reasonable effort to verify the identity of a new prospective user and the uses certified by such prospective user prior to furnishing such user a consumer report. No consumer reporting agency may furnish a consumer report to any person if it has reasonable grounds for believing that the consumer report will not be used for a purpose listed in section 1681b of this title.

(b) Accuracy of report

Whenever a consumer reporting agency prepares a consumer report it shall follow reasonable procedures to assure maximum possible accuracy of the information concerning the individual about whom the report relates.

A consumer reporting agency may not prohibit a user of a consumer report furnished by the agency on a consumer from disclosing the contents of the report to the consumer, if adverse action against the consumer has been taken by the user based in whole or in part on the report.

(d) Notice to users and furnishers of information

(1) Notice requirement

A consumer reporting agency shall provide to any person—

(A) who regularly and in the ordinary course of business furnishes information to the agency with respect to any consumer; or

(B) to whom a consumer report is provided by the agency;

a notice of such person’s responsibilities under this subchapter.

(2) Content of notice

The Bureau shall prescribe the content of notices under paragraph (1), and a consumer reporting agency shall be in compliance with this subsection if it provides a notice under paragraph (1) that is substantially similar to the Bureau prescription under this paragraph.

(e) Procurement of consumer report for resale

(1) Disclosure

A person may not procure a consumer report for purposes of reselling the report (or any information in the report) unless the person discloses to the consumer reporting agency that originally furnishes the report—

(A) the identity of the end-user of the report (or information); and

(B) each permissible purpose under section 1681b of this title for which the report is furnished to the end-user of the report (or information).

(2) Responsibilities of procurers for resale

A person who procures a consumer report for purposes of reselling the report (or any information in the report) shall—

(A) establish and comply with reasonable procedures designed to ensure that the report (or information) is resold by the person only for a purpose for which the report may be furnished under section 1681b of this title, including by requiring that each person to which the report (or information) is resold and that resells or provides the report (or information) to any other person—

(i) identifies each end user of the resold report (or information);

(ii) certifies each purpose for which the report (or information) will be used; and

(iii) certifies that the report (or information) will be used for no other purpose; and

(B) before reselling the report, make reasonable efforts to verify the identifications and certifications made under subparagraph (A).

(3) Resale of consumer report to a Federal agency or department

Notwithstanding paragraph (1) or (2), a person who procures a consumer report for purposes of reselling the report (or any information in the report) shall not disclose the identity of the end-user of the report under paragraph (1) or (2) if—

(A)

the end user is an agency or department of the United States Government which procures the report from the person for purposes of determining the eligibility of the consumer concerned to receive access or continued access to classified information (as defined in section 1681b(b)(4)(E)(i) 1 1 See References in Text note below. of this title); and

(B) the agency or department certifies in writing to the person reselling the report that nondisclosure is necessary to protect classified information or the safety of persons employed by or contracting with, or undergoing investigation for work or contracting with the agency or department.

(Pub. L. 90–321, title VI, § 607, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1130; amended Pub. L. 104–208, div. A, title II, § 2407, Sept. 30, 1996, 110 Stat. 3009–435; Pub. L. 105–107, title III, § 311(b), Nov. 20, 1997, 111 Stat. 2256; Pub. L. 111–203, title X, § 1088(a)(2)(A), July 21, 2010, 124 Stat. 2087.)

Editorial Notes

References in Text

Section 1681b(b)(4) of this title, referred to in subsec. (e)(3)(A), was subsequently amended, and section 1681b(b)(4)(E) no longer defines the term “classified information”. However, such term is defined elsewhere in that section.

Amendments

2010—Subsec. (d)(2). Pub. L. 111–203 substituted “Bureau” for “Federal Trade Commission” in two places.

1997—Subsec. (e)(3). Pub. L. 105–107 added par. (3).

1996—Subsecs. (c) to (e). Pub. L. 104–208 added subsecs. (c) to (e).

Statutory Notes and Related Subsidiaries

Effective Date of 2010 Amendment

Effective Date of 1997 Amendment

Amendment by Pub. L. 105–107 effective as if included in chapter 1 of subtitle D of the Economic Growth and Regulatory Paperwork Reduction Act of 1996, Pub. L. 104–208, as of Sept. 30, 1996, see section 311(c) of Pub. L. 105–107, set out as a note under section 1681b of this title.

Effective Date of 1996 Amendment

Effective Date

Section 1681f§Sections Disclosures to governmental agencies

Notwithstanding the provisions of section 1681b of this title, a consumer reporting agency may furnish identifying information respecting any consumer, limited to his name, address, former addresses, places of employment, or former places of employment, to a governmental agency.

(Pub. L. 90–321, title VI, § 608, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1131.)

Statutory Notes and Related Subsidiaries

Effective Date

Section 1681g§Sections Disclosures to consumers

(a) Information on file; sources; report recipients Every consumer reporting agency shall, upon request, and subject to section 1681h(a)(1) of this title, clearly and accurately disclose to the consumer: (1) All information in the consumer’s file at the time of the request, except that— (A) if the consumer to whom the file relates requests that the first 5 digits of the social security number (or similar identification number) of the consumer not be included in the disclosure and the consumer reporting agency has received appropriate proof of the identity of the requester, the consumer reporting agency shall so truncate such number in such disclosure; and (B) nothing in this paragraph shall be construed to require a consumer reporting agency to disclose to a consumer any information concerning credit scores or any other risk scores or predictors relating to the consumer. (2) The sources of the information; except that the sources of information acquired solely for use in preparing an investigative consumer report and actually used for no other purpose need not be disclosed: Provided, That in the event an action is brought under this subchapter, such sources shall be available to the plaintiff under appropriate discovery procedures in the court in which the action is brought. (3)(A) Identification of each person (including each end-user identified under section 1681e(e)(1) of this title) that procured a consumer report— (i) for employment purposes, during the 2-year period preceding the date on which the request is made; or (ii) for any other purpose, during the 1-year period preceding the date on which the request is made. (B) An identification of a person under subparagraph (A) shall include— (i) the name of the person or, if applicable, the trade name (written in full) under which such person conducts business; and (ii) upon request of the consumer, the address and telephone number of the person. (C) Subparagraph (A) does not apply if— (i) the end user is an agency or department of the United States Government that procures the report from the person for purposes of determining the eligibility of the consumer to whom the report relates to receive access or continued access to classified information (as defined in section 1681b(b)(4)(E)(i) 1 1 See References in Text note below. of this title); and (ii) the head of the agency or department makes a written finding as prescribed under section 1681b(b)(4)(A) of this title. (4) The dates, original payees, and amounts of any checks upon which is based any adverse characterization of the consumer, included in the file at the time of the disclosure. (5) A record of all inquiries received by the agency during the 1-year period preceding the request that identified the consumer in connection with a credit or insurance transaction that was not initiated by the consumer. (6) If the consumer requests the credit file and not the credit score, a statement that the consumer may request and obtain a credit score. (b) Exempt information The requirements of subsection (a) respecting the disclosure of sources of information and the recipients of consumer reports do not apply to information received or consumer reports furnished prior to the effective date of this subchapter except to the extent that the matter involved is contained in the files of the consumer reporting agency on that date. (c) Summary of rights to obtain and dispute information in consumer reports and to obtain credit scores (1) Commission 2 2 So in original. Probably should be “Bureau”. summary of rights required (A) In general The Commission 2 shall prepare a model summary of the rights of consumers under this subchapter. (B) Content of summary The summary of rights prepared under subparagraph (A) shall include a description of— (i) the right of a consumer to obtain a copy of a consumer report under subsection (a) from each consumer reporting agency; (ii) the frequency and circumstances under which a consumer is entitled to receive a consumer report without charge under section 1681j of this title; (iii) the right of a consumer to dispute information in the file of the consumer under section 1681i of this title; (iv) the right of a consumer to obtain a credit score from a consumer reporting agency, and a description of how to obtain a credit score; (v) the method by which a consumer can contact, and obtain a consumer report from, a consumer reporting agency without charge, as provided in the regulations of the Bureau prescribed under section 211(c) 1 of the Fair and Accurate Credit Transactions Act of 2003; and (vi) the method by which a consumer can contact, and obtain a consumer report from, a consumer reporting agency described in section 1681a(w) 1 of this title, as provided in the regulations of the Bureau prescribed under section 1681j(a)(1)(C) of this title. (C) Availability of summary of rights The Commission 2 shall— (i) actively publicize the availability of the summary of rights prepared under this paragraph; (ii) conspicuously post on its Internet website the availability of such summary of rights; and (iii) promptly make such summary of rights available to consumers, on request. (2) Summary of rights required to be included with agency disclosures A consumer reporting agency shall provide to a consumer, with each written disclosure by the agency to the consumer under this section— (A) the summary of rights prepared by the Bureau under paragraph (1); (B) in the case of a consumer reporting agency described in section 1681a(p) of this title, a toll-free telephone number established by the agency, at which personnel are accessible to consumers during normal business hours; (C) a list of all Federal agencies responsible for enforcing any provision of this subchapter, and the address and any appropriate phone number of each such agency, in a form that will assist the consumer in selecting the appropriate agency; (D) a statement that the consumer may have additional rights under State law, and that the consumer may wish to contact a State or local consumer protection agency or a State attorney general (or the equivalent thereof) to learn of those rights; and (E) a statement that a consumer reporting agency is not required to remove accurate derogatory information from the file of a consumer, unless the information is outdated under section 1681c of this title or cannot be verified. (d) Summary of rights of identity theft victims (1) In general The Commission,2 in consultation with the Federal banking agencies and the National Credit Union Administration, shall prepare a model summary of the rights of consumers under this subchapter with respect to the procedures for remedying the effects of fraud or identity theft involving credit, an electronic fund transfer, or an account or transaction at or with a financial institution or other creditor. (2) Summary of rights and contact information Beginning 60 days after the date on which the model summary of rights is prescribed in final form by the Bureau pursuant to paragraph (1), if any consumer contacts a consumer reporting agency and expresses a belief that the consumer is a victim of fraud or identity theft involving credit, an electronic fund transfer, or an account or transaction at or with a financial institution or other creditor, the consumer reporting agency shall, in addition to any other action that the agency may take, provide the consumer with a summary of rights that contains all of the information required by the Bureau under paragraph (1), and information on how to contact the Bureau to obtain more detailed information. (e) Information available to victims (1) In general For the purpose of documenting fraudulent transactions resulting from identity theft, not later than 30 days after the date of receipt of a request from a victim in accordance with paragraph (3), and subject to verification of the identity of the victim and the claim of identity theft in accordance with paragraph (2), a business entity that has provided credit to, provided for consideration products, goods, or services to, accepted payment from, or otherwise entered into a commercial transaction for consideration with, a person who has allegedly made unauthorized use of the means of identification of the victim, shall provide a copy of application and business transaction records in the control of the business entity, whether maintained by the business entity or by another person on behalf of the business entity, evidencing any transaction alleged to be a result of identity theft to— (A) the victim; (B) any Federal, State, or local government law enforcement agency or officer specified by the victim in such a request; or (C) any law enforcement agency investigating the identity theft and authorized by the victim to take receipt of records provided under this subsection. (2) Verification of identity and claim Before a business entity provides any information under paragraph (1), unless the business entity, at its discretion, otherwise has a high degree of confidence that it knows the identity of the victim making a request under paragraph (1), the victim shall provide to the business entity— (A) as proof of positive identification of the victim, at the election of the business entity— (i) the presentation of a government-issued identification card; (ii) personally identifying information of the same type as was provided to the business entity by the unauthorized person; or (iii) personally identifying information that the business entity typically requests from new applicants or for new transactions, at the time of the victim’s request for information, including any documentation described in clauses (i) and (ii); and (B) as proof of a claim of identity theft, at the election of the business entity— (i) a copy of a police report evidencing the claim of the victim of identity theft; and (ii) a properly completed— (I) copy of a standardized affidavit of identity theft developed and made available by the Bureau; or (II) an 3 3 So in original. The word “an” probably should not appear. affidavit of fact that is acceptable to the business entity for that purpose. (3) Procedures The request of a victim under paragraph (1) shall— (A) be in writing; (B) be mailed to an address specified by the business entity, if any; and (C) if asked by the business entity, include relevant information about any transaction alleged to be a result of identity theft to facilitate compliance with this section including— (i) if known by the victim (or if readily obtainable by the victim), the date of the application or transaction; and (ii) if known by the victim (or if readily obtainable by the victim), any other identifying information such as an account or transaction number. (4) No charge to victim Information required to be provided under paragraph (1) shall be so provided without charge. (5) Authority to decline to provide information A business entity may decline to provide information under paragraph (1) if, in the exercise of good faith, the business entity determines that— (A) this subsection does not require disclosure of the information; (B) after reviewing the information provided pursuant to paragraph (2), the business entity does not have a high degree of confidence in knowing the true identity of the individual requesting the information; (C) the request for the information is based on a misrepresentation of fact by the individual requesting the information relevant to the request for information; or (D) the information requested is Internet navigational data or similar information about a person’s visit to a website or online service. (6) Limitation on liability Except as provided in section 1681s of this title, sections 1681n and 1681o of this title do not apply to any violation of this subsection. (7) Limitation on civil liability No business entity may be held civilly liable under any provision of Federal, State, or other law for disclosure, made in good faith pursuant to this subsection. (8) No new recordkeeping obligation Nothing in this subsection creates an obligation on the part of a business entity to obtain, retain, or maintain information or records that are not otherwise required to be obtained, retained, or maintained in the ordinary course of its business or under other applicable law. (9) Rule of construction (A) In general No provision of subtitle A of title V of Public Law 106–102 [15 U.S.C. 6801 et seq.], prohibiting the disclosure of financial information by a business entity to third parties shall be used to deny disclosure of information to the victim under this subsection. (B) Limitation Except as provided in subparagraph (A), nothing in this subsection permits a business entity to disclose information, including information to law enforcement under subparagraphs (B) and (C) of paragraph (1), that the business entity is otherwise prohibited from disclosing under any other applicable provision of Federal or State law. (10) Affirmative defense In any civil action brought to enforce this subsection, it is an affirmative defense (which the defendant must establish by a preponderance of the evidence) for a business entity to file an affidavit or answer stating that— (A) the business entity has made a reasonably diligent search of its available business records; and (B) the records requested under this subsection do not exist or are not reasonably available. (11) Definition of victim For purposes of this subsection, the term “victim” means a consumer whose means of identification or financial information has been used or transferred (or has been alleged to have been used or transferred) without the authority of that consumer, with the intent to commit, or to aid or abet, an identity theft or a similar crime. (12) Effective date This subsection shall become effective 180 days after December 4, 2003. (13) Effectiveness study Not later than 18 months after December 4, 2003, the Comptroller General of the United States shall submit a report to Congress assessing the effectiveness of this provision. (f) Disclosure of credit scores (1) In general Upon the request of a consumer for a credit score, a consumer reporting agency shall supply to the consumer a statement indicating that the information and credit scoring model may be different than the credit score that may be used by the lender, and a notice which shall include— (A) the current credit score of the consumer or the most recent credit score of the consumer that was previously calculated by the credit reporting agency for a purpose related to the extension of credit; (B) the range of possible credit scores under the model used; (C) all of the key factors that adversely affected the credit score of the consumer in the model used, the total number of which shall not exceed 4, subject to paragraph (9); (D) the date on which the credit score was created; and (E) the name of the person or entity that provided the credit score or credit file upon which the credit score was created. (2) Definitions For purposes of this subsection, the following definitions shall apply: (A) Credit score The term “credit score”— (i) means a numerical value or a categorization derived from a statistical tool or modeling system used by a person who makes or arranges a loan to predict the likelihood of certain credit behaviors, including default (and the numerical value or the categorization derived from such analysis may also be referred to as a “risk predictor” or “risk score”); and (ii) does not include— (I) any mortgage score or rating of an automated underwriting system that considers one or more factors in addition to credit information, including the loan to value ratio, the amount of down payment, or the financial assets of a consumer; or (II) any other elements of the underwriting process or underwriting decision. (B) Key factors The term “key factors” means all relevant elements or reasons adversely affecting the credit score for the particular individual, listed in the order of their importance based on their effect on the credit score. (3) Timeframe and manner of disclosure The information required by this subsection shall be provided in the same timeframe and manner as the information described in subsection (a). (4) Applicability to certain uses This subsection shall not be construed so as to compel a consumer reporting agency to develop or disclose a score if the agency does not— (A) distribute scores that are used in connection with residential real property loans; or (B) develop scores that assist credit providers in understanding the general credit behavior of a consumer and predicting the future credit behavior of the consumer. (5) Applicability to credit scores developed by another person (A) In general This subsection shall not be construed to require a consumer reporting agency that distributes credit scores developed by another person or entity to provide a further explanation of them, or to process a dispute arising pursuant to section 1681i of this title, except that the consumer reporting agency shall provide the consumer with the name and address and website for contacting the person or entity who developed the score or developed the methodology of the score. (B) Exception This paragraph shall not apply to a consumer reporting agency that develops or modifies scores that are developed by another person or entity. (6) Maintenance of credit scores not required This subsection shall not be construed to require a consumer reporting agency to maintain credit scores in its files. (7) Compliance in certain cases In complying with this subsection, a consumer reporting agency shall— (A) supply the consumer with a credit score that is derived from a credit scoring model that is widely distributed to users by that consumer reporting agency in connection with residential real property loans or with a credit score that assists the consumer in understanding the credit scoring assessment of the credit behavior of the consumer and predictions about the future credit behavior of the consumer; and (B) a statement indicating that the information and credit scoring model may be different than that used by the lender. (8) Fair and reasonable fee A consumer reporting agency may charge a fair and reasonable fee, as determined by the Bureau, for providing the information required under this subsection. (9) Use of enquiries as a key factor If a key factor that adversely affects the credit score of a consumer consists of the number of enquiries made with respect to a consumer report, that factor shall be included in the disclosure pursuant to paragraph (1)(C) without regard to the numerical limitation in such paragraph. (g) Disclosure of credit scores by certain mortgage lenders (1) In general Any person who makes or arranges loans and who uses a consumer credit score, as defined in subsection (f), in connection with an application initiated or sought by a consumer for a closed end loan or the establishment of an open end loan for a consumer purpose that is secured by 1 to 4 units of residential real property (hereafter in this subsection referred to as the “lender”) shall provide the following to the consumer as soon as reasonably practicable: (A) Information required under subsection (f) (i) In general A copy of the information identified in subsection (f) that was obtained from a consumer reporting agency or was developed and used by the user of the information. (ii) Notice under subparagraph (D) In addition to the information provided to it by a third party that provided the credit score or scores, a lender is only required to provide the notice contained in subparagraph (D). (B) Disclosures in case of automated underwriting system (i) In general If a person that is subject to this subsection uses an automated underwriting system to underwrite a loan, that person may satisfy the obligation to provide a credit score by disclosing a credit score and associated key factors supplied by a consumer reporting agency. (ii) Numerical credit score However, if a numerical credit score is generated by an automated underwriting system used by an enterprise, and that score is disclosed to the person, the score shall be disclosed to the consumer consistent with subparagraph (C). (iii) Enterprise defined For purposes of this subparagraph, the term “enterprise” has the same meaning as in paragraph (6) of section 4502 of title 12. (C) Disclosures of credit scores not obtained from a consumer reporting agency A person that is subject to the provisions of this subsection and that uses a credit score, other than a credit score provided by a consumer reporting agency, may satisfy the obligation to provide a credit score by disclosing a credit score and associated key factors supplied by a consumer reporting agency. (D) Notice to home loan applicants A copy of the following notice, which shall include the name, address, and telephone number of each consumer reporting agency providing a credit score that was used: “notice to the home loan applicant “In connection with your application for a home loan, the lender must disclose to you the score that a consumer reporting agency distributed to users and the lender used in connection with your home loan, and the key factors affecting your credit scores. “The credit score is a computer generated summary calculated at the time of the request and based on information that a consumer reporting agency or lender has on file. The scores are based on data about your credit history and payment patterns. Credit scores are important because they are used to assist the lender in determining whether you will obtain a loan. They may also be used to determine what interest rate you may be offered on the mortgage. Credit scores can change over time, depending on your conduct, how your credit history and payment patterns change, and how credit scoring technologies change. “Because the score is based on information in your credit history, it is very important that you review the credit-related information that is being furnished to make sure it is accurate. Credit records may vary from one company to another. “If you have questions about your credit score or the credit information that is furnished to you, contact the consumer reporting agency at the address and telephone number provided with this notice, or contact the lender, if the lender developed or generated the credit score. The consumer reporting agency plays no part in the decision to take any action on the loan application and is unable to provide you with specific reasons for the decision on a loan application. “If you have questions concerning the terms of the loan, contact the lender.”. (E) Actions not required under this subsection This subsection shall not require any person to— (i) explain the information provided pursuant to subsection (f); (ii) disclose any information other than a credit score or key factors, as defined in subsection (f); (iii) disclose any credit score or related information obtained by the user after a loan has closed; (iv) provide more than 1 disclosure per loan transaction; or (v) provide the disclosure required by this subsection when another person has made the disclosure to the consumer for that loan transaction. (F) No obligation for content (i) In general The obligation of any person pursuant to this subsection shall be limited solely to providing a copy of the information that was received from the consumer reporting agency. (ii) Limit on liability No person has liability under this subsection for the content of that information or for the omission of any information within the report provided by the consumer reporting agency. (G) Person defined as excluding enterprise As used in this subsection, the term “person” does not include an enterprise (as defined in paragraph (6) of section 4502 of title 12). (2) Prohibition on disclosure clauses null and void (A) In general Any provision in a contract that prohibits the disclosure of a credit score by a person who makes or arranges loans or a consumer reporting agency is void. (B) No liability for disclosure under this subsection A lender shall not have liability under any contractual provision for disclosure of a credit score pursuant to this subsection.

(Pub. L. 90–321, title VI, § 609, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1131; amended Pub. L. 103–325, title III, § 339, Sept. 23, 1994, 108 Stat. 2237; Pub. L. 104–208, div. A, title II, § 2408(a)–(d)(1), (e)(5)(A), Sept. 30, 1996, 110 Stat. 3009–436, 3009–437, 3009–439; Pub. L. 105–347, § 4(a), Nov. 2, 1998, 112 Stat. 3210; Pub. L. 108–159, title I, §§ 115, 151(a)(1), title II, §§ 211(c), 212(a)–(c), title VIII, § 811(d), Dec. 4, 2003, 117 Stat. 1961, 1970, 1973–1975, 2011; Pub. L. 111–203, title X, § 1088(a)(2)(C), July 21, 2010, 124 Stat. 2087.)

Editorial Notes

References in Text

Section 1681b(b)(4) of this title, referred to in subsec. (a)(3)(C)(i), was subsequently amended, and section 1681b(b)(4)(E) no longer defines the term “classified information”. However, such term is defined elsewhere in that section.

For the effective date of this subchapter, referred to in subsec. (b), see section 504(d) of Pub. L. 90–321, set out as an Effective Date note under section 1681 of this title.

Section 211(c) of the Fair and Accurate Credit Transactions Act of 2003, referred to in subsec. (c)(1)(B)(v), probably means section 211(d) of Pub. L. 108–159, which is set out as a note under section 1681j of this title and relates to the promulgation of regulations. Section 211(c) of Pub. L. 108–159 amended this section.

Section 1681a(w) of this title, referred to in subsec. (c)(1)(B)(vi), was redesignated section 1681a(x) of this title by Pub. L. 111–203, title X, § 1088(a)(1), July 21, 2010, 124 Stat. 2086.

Public Law 106–102, referred to in subsec. (e)(9)(A), is Pub. L. 106–102, Nov. 12, 1999, 113 Stat. 1338, known as the Gramm-Leach-Bliley Act. Subtitle A of title V of the Act is classified principally to subchapter I (§ 6801 et seq.) of chapter 94 of this title. For complete classification of this Act to the Code, see Short Title of 1999 Amendment note set out under section 1811 of Title 12, Banks and Banking, and Tables.

Amendments

2010—Pub. L. 111–203 substituted “the Bureau” for “the Commission” wherever appearing.

2003—Subsec. (a)(1). Pub. L. 108–159, § 115, substituted “except that—

“(A) if the consumer to whom the file relates requests that the first 5 digits of the social security number (or similar identification number) of the consumer not be included in the disclosure and the consumer reporting agency has received appropriate proof of the identity of the requester, the consumer reporting agency shall so truncate such number in such disclosure; and

“(B) nothing”

for “except that nothing”.

Subsec. (a)(2), (3)(C). Pub. L. 108–159, § 811(d), realigned margins.

Subsec. (a)(6). Pub. L. 108–159, § 212(a), added par. (6).

Subsec. (c). Pub. L. 108–159, § 211(c), amended subsec. (c) generally. Prior to amendment, subsec. (c) related to the summary of rights required to be included with disclosure to consumers by consumer reporting agencies.

Subsecs. (d), (e). Pub. L. 108–159, § 151(a)(1), added subsecs. (d) and (e).

Subsec. (f). Pub. L. 108–159, § 212(b), added subsec. (f).

Subsec. (g). Pub. L. 108–159, § 212(c), added subsec. (g).

1998—Subsec. (a)(3)(C). Pub. L. 105–347 added subpar. (C).

1996—Subsec. (a). Pub. L. 104–208, § 2408(e)(5)(A), in introductory provisions substituted “, and subject to section 1681h(a)(1) of this title” for “and proper identification of any consumer”.

Subsec. (a)(1). Pub. L. 104–208, § 2408(a), amended par. (1) generally. Prior to amendment, par. (1) read as follows: “The nature and substance of all information (except medical information) in its files on the consumer at the time of the request.”

Subsec. (a)(3). Pub. L. 104–208, § 2408(b), amended par. (3) generally. Prior to amendment, par. (3) read as follows: “The recipients of any consumer report on the consumer which it has furnished—

“(A) for employment purposes within the two-year period preceding the request, and

“(B) for any other purpose within the six-month period preceding the request.”

Subsec. (a)(5). Pub. L. 104–208, § 2408(c), added par. (5).

Subsec. (c). Pub. L. 104–208, § 2408(d)(1), added subsec. (c).

1994—Subsec. (a)(4). Pub. L. 103–325 added par. (4).

Statutory Notes and Related Subsidiaries

Effective Date of 2010 Amendment

Effective Date of 2003 Amendment

Amendment by Pub. L. 108–159 subject to joint regulations establishing effective dates as prescribed by Federal Reserve Board and Federal Trade Commission, except as otherwise provided, see section 3 of Pub. L. 108–159, set out as a note under section 1681 of this title.

Effective Date of 1998 Amendment

Amendment by Pub. L. 105–347 deemed to have same effective date as amendments made by section 2403 of Pub. L. 104–208, see section 7 of Pub. L. 105–347, set out as a note under section 1681a of this title.

Effective Date of 1996 Amendment

Effective Date

Simplified Disclosure To Maximize Comprehensibility and Standardization

Pub. L. 104–208, div. A, title II, § 2408(e)(2), (3), Sept. 30, 1996, 110 Stat. 3009–438, 3009–439, provided that: “(2) Simplified disclosure.— Not later than 90 days after the date of enactment of this Act [Sept. 30, 1996], each consumer reporting agency shall develop a form on which such consumer reporting agency shall make the disclosures required under section 609(a) of the Fair Credit Reporting Act [15 U.S.C. 1681g(a)], for the purpose of maximizing the comprehensibility and standardization of such disclosures. “(3) Goals.— The Federal Trade Commission shall take appropriate action to assure that the goals of comprehensibility and standardization are achieved in accordance with paragraph (2).”

Section 1681h§Sections Conditions and form of disclosure to consumers

(a) In general

(1) Proper identification

A consumer reporting agency shall require, as a condition of making the disclosures required under section 1681g of this title, that the consumer furnish proper identification.

(2) Disclosure in writing

Except as provided in subsection (b), the disclosures required to be made under section 1681g of this title shall be provided under that section in writing.

(b) Other forms of disclosure

(1) In general

If authorized by a consumer, a consumer reporting agency may make the disclosures required under 1 1 So in original. Probably should be followed by “section”. 1681g of this title—

(A) other than in writing; and

(B) in such form as may be—

(i) specified by the consumer in accordance with paragraph (2); and

(ii) available from the agency.

(2) Form

A consumer may specify pursuant to paragraph (1) that disclosures under section 1681g of this title shall be made—

(A) in person, upon the appearance of the consumer at the place of business of the consumer reporting agency where disclosures are regularly provided, during normal business hours, and on reasonable notice;

(B) by telephone, if the consumer has made a written request for disclosure by telephone;

(D) by any other reasonable means that is available from the agency.

Any consumer reporting agency shall provide trained personnel to explain to the consumer any information furnished to him pursuant to section 1681g of this title.

(d) Persons accompanying consumer

The consumer shall be permitted to be accompanied by one other person of his choosing, who shall furnish reasonable identification. A consumer reporting agency may require the consumer to furnish a written statement granting permission to the consumer reporting agency to discuss the consumer’s file in such person’s presence.

(e) Limitation of liability

Except as provided in sections 1681n and 1681o of this title, no consumer may bring any action or proceeding in the nature of defamation, invasion of privacy, or negligence with respect to the reporting of information against any consumer reporting agency, any user of information, or any person who furnishes information to a consumer reporting agency, based on information disclosed pursuant to section 1681g, 1681h, or 1681m of this title, or based on information disclosed by a user of a consumer report to or for a consumer against whom the user has taken adverse action, based in whole or in part on the report 2 2 So in original. Probably should be followed by a comma. except as to false information furnished with malice or willful intent to injure such consumer.

(Pub. L. 90–321, title VI, § 610, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1131; amended Pub. L. 104–208, div. A, title II, § 2408(e)(1), (4), (5)(B), Sept. 30, 1996, 110 Stat. 3009–438, 3009–439.)

Editorial Notes

Amendments

1996—Pub. L. 104–208, § 2408(e)(5)(B), inserted “and form” after “Conditions” in section catchline.

Subsec. (a). Pub. L. 104–208, § 2408(e)(1), inserted heading and amended text of subsec. (a) generally. Prior to amendment, text read as follows: “A consumer reporting agency shall make the disclosures required under section 1681g of this title during normal business hours and on reasonable notice.”

Subsec. (b). Pub. L. 104–208, § 2408(e)(1), inserted heading and amended text of subsec. (b) generally. Prior to amendment, text read as follows: “The disclosures required under section 1681g of this title shall be made to the consumer—

“(1) in person if he appears in person and furnishes proper identification; or

“(2) by telephone if he has made a written request, with proper identification, for telephone disclosure and the toll charge, if any, for the telephone call is prepaid by or charged directly to the consumer.”

Subsec. (e). Pub. L. 104–208, § 2408(e)(4), inserted “or based on information disclosed by a user of a consumer report to or for a consumer against whom the user has taken adverse action, based in whole or in part on the report” before “except”.

Statutory Notes and Related Subsidiaries

Effective Date of 1996 Amendment

Effective Date

Section 1681i§Sections Procedure in case of disputed accuracy

(a) Reinvestigations of disputed information

(1) Reinvestigation required

(A) In general

Subject to subsection (f) and except as provided in subsection (g), if the completeness or accuracy of any item of information contained in a consumer’s file at a consumer reporting agency is disputed by the consumer and the consumer notifies the agency directly, or indirectly through a reseller, of such dispute, the agency shall, free of charge, conduct a reasonable reinvestigation to determine whether the disputed information is inaccurate and record the current status of the disputed information, or delete the item from the file in accordance with paragraph (5), before the end of the 30-day period beginning on the date on which the agency receives the notice of the dispute from the consumer or reseller.

(B) Extension of period to reinvestigate

Except as provided in subparagraph (C), the 30-day period described in subparagraph (A) may be extended for not more than 15 additional days if the consumer reporting agency receives information from the consumer during that 30-day period that is relevant to the reinvestigation.

Subparagraph (B) shall not apply to any reinvestigation in which, during the 30-day period described in subparagraph (A), the information that is the subject of the reinvestigation is found to be inaccurate or incomplete or the consumer reporting agency determines that the information cannot be verified.

(2) Prompt notice of dispute to furnisher of information

(A) In general

Before the expiration of the 5-business-day period beginning on the date on which a consumer reporting agency receives notice of a dispute from any consumer or a reseller in accordance with paragraph (1), the agency shall provide notification of the dispute to any person who provided any item of information in dispute, at the address and in the manner established with the person. The notice shall include all relevant information regarding the dispute that the agency has received from the consumer or reseller.

(B) Provision of other information

The consumer reporting agency shall promptly provide to the person who provided the information in dispute all relevant information regarding the dispute that is received by the agency from the consumer or the reseller after the period referred to in subparagraph (A) and before the end of the period referred to in paragraph (1)(A).

(3) Determination that dispute is frivolous or irrelevant

(A) In general

Notwithstanding paragraph (1), a consumer reporting agency may terminate a reinvestigation of information disputed by a consumer under that paragraph if the agency reasonably determines that the dispute by the consumer is frivolous or irrelevant, including by reason of a failure by a consumer to provide sufficient information to investigate the disputed information.

(B) Notice of determination

Upon making any determination in accordance with subparagraph (A) that a dispute is frivolous or irrelevant, a consumer reporting agency shall notify the consumer of such determination not later than 5 business days after making such determination, by mail or, if authorized by the consumer for that purpose, by any other means available to the agency.

A notice under subparagraph (B) shall include—

(i) the reasons for the determination under subparagraph (A); and

(ii) identification of any information required to investigate the disputed information, which may consist of a standardized form describing the general nature of such information.

(4) Consideration of consumer information

In conducting any reinvestigation under paragraph (1) with respect to disputed information in the file of any consumer, the consumer reporting agency shall review and consider all relevant information submitted by the consumer in the period described in paragraph (1)(A) with respect to such disputed information.

(5) Treatment of inaccurate or unverifiable information

(A) In general

If, after any reinvestigation under paragraph (1) of any information disputed by a consumer, an item of the information is found to be inaccurate or incomplete or cannot be verified, the consumer reporting agency shall—

(i) promptly delete that item of information from the file of the consumer, or modify that item of information, as appropriate, based on the results of the reinvestigation; and

(ii) promptly notify the furnisher of that information that the information has been modified or deleted from the file of the consumer.

(B) Requirements relating to reinsertion of previously deleted material

(i) Certification of accuracy of information

If any information is deleted from a consumer’s file pursuant to subparagraph (A), the information may not be reinserted in the file by the consumer reporting agency unless the person who furnishes the information certifies that the information is complete and accurate.

(ii) Notice to consumer

If any information that has been deleted from a consumer’s file pursuant to subparagraph (A) is reinserted in the file, the consumer reporting agency shall notify the consumer of the reinsertion in writing not later than 5 business days after the reinsertion or, if authorized by the consumer for that purpose, by any other means available to the agency.

(iii) Additional information

As part of, or in addition to, the notice under clause (ii), a consumer reporting agency shall provide to a consumer in writing not later than 5 business days after the date of the reinsertion—

(I) a statement that the disputed information has been reinserted;

(II) the business name and address of any furnisher of information contacted and the telephone number of such furnisher, if reasonably available, or of any furnisher of information that contacted the consumer reporting agency, in connection with the reinsertion of such information; and

(III) a notice that the consumer has the right to add a statement to the consumer’s file disputing the accuracy or completeness of the disputed information.

A consumer reporting agency shall maintain reasonable procedures designed to prevent the reappearance in a consumer’s file, and in consumer reports on the consumer, of information that is deleted pursuant to this paragraph (other than information that is reinserted in accordance with subparagraph (B)(i)).

(D) Automated reinvestigation system

Any consumer reporting agency that compiles and maintains files on consumers on a nationwide basis shall implement an automated system through which furnishers of information to that consumer reporting agency may report the results of a reinvestigation that finds incomplete or inaccurate information in a consumer’s file to other such consumer reporting agencies.

(6) Notice of results of reinvestigation

(A) In general

A consumer reporting agency shall provide written notice to a consumer of the results of a reinvestigation under this subsection not later than 5 business days after the completion of the reinvestigation, by mail or, if authorized by the consumer for that purpose, by other means available to the agency.

(B) Contents

As part of, or in addition to, the notice under subparagraph (A), a consumer reporting agency shall provide to a consumer in writing before the expiration of the 5-day period referred to in subparagraph (A)—

(i) a statement that the reinvestigation is completed;

(ii) a consumer report that is based upon the consumer’s file as that file is revised as a result of the reinvestigation;

(iii) a notice that, if requested by the consumer, a description of the procedure used to determine the accuracy and completeness of the information shall be provided to the consumer by the agency, including the business name and address of any furnisher of information contacted in connection with such information and the telephone number of such furnisher, if reasonably available;

(iv) a notice that the consumer has the right to add a statement to the consumer’s file disputing the accuracy or completeness of the information; and

(v) a notice that the consumer has the right to request under subsection (d) that the consumer reporting agency furnish notifications under that subsection.

(7) Description of reinvestigation procedure

A consumer reporting agency shall provide to a consumer a description referred to in paragraph (6)(B)(iii) by not later than 15 days after receiving a request from the consumer for that description.

(8) Expedited dispute resolution

If a dispute regarding an item of information in a consumer’s file at a consumer reporting agency is resolved in accordance with paragraph (5)(A) by the deletion of the disputed information by not later than 3 business days after the date on which the agency receives notice of the dispute from the consumer in accordance with paragraph (1)(A), then the agency shall not be required to comply with paragraphs (2), (6), and (7) with respect to that dispute if the agency—

(A) provides prompt notice of the deletion to the consumer by telephone;

(B) includes in that notice, or in a written notice that accompanies a confirmation and consumer report provided in accordance with subparagraph (C), a statement of the consumer’s right to request under subsection (d) that the agency furnish notifications under that subsection; and

(C) provides written confirmation of the deletion and a copy of a consumer report on the consumer that is based on the consumer’s file after the deletion, not later than 5 business days after making the deletion.

(b) Statement of dispute

If the reinvestigation does not resolve the dispute, the consumer may file a brief statement setting forth the nature of the dispute. The consumer reporting agency may limit such statements to not more than one hundred words if it provides the consumer with assistance in writing a clear summary of the dispute.

Whenever a statement of a dispute is filed, unless there is reasonable grounds to believe that it is frivolous or irrelevant, the consumer reporting agency shall, in any subsequent consumer report containing the information in question, clearly note that it is disputed by the consumer and provide either the consumer’s statement or a clear and accurate codification or summary thereof.

(d) Notification of deletion of disputed information

Following any deletion of information which is found to be inaccurate or whose accuracy can no longer be verified or any notation as to disputed information, the consumer reporting agency shall, at the request of the consumer, furnish notification that the item has been deleted or the statement, codification or summary pursuant to subsection (b) or (c) to any person specifically designated by the consumer who has within two years prior thereto received a consumer report for employment purposes, or within six months prior thereto received a consumer report for any other purpose, which contained the deleted or disputed information.

(e) Treatment of complaints and report to Congress

(1) In general

The Commission 1 1 So in original. Probably should be “Bureau”. shall—

(A) compile all complaints that it receives that a file of a consumer that is maintained by a consumer reporting agency described in section 1681a(p) of this title contains incomplete or inaccurate information, with respect to which, the consumer appears to have disputed the completeness or accuracy with the consumer reporting agency or otherwise utilized the procedures provided by subsection (a); and

(B) transmit each such complaint to each consumer reporting agency involved.

(2) Exclusion

Complaints received or obtained by the Bureau pursuant to its investigative authority under the Consumer Financial Protection Act of 2010 shall not be subject to paragraph (1).

(3) Agency responsibilities

Each consumer reporting agency described in section 1681a(p) of this title that receives a complaint transmitted by the Bureau pursuant to paragraph (1) shall—

(A) review each such complaint to determine whether all legal obligations imposed on the consumer reporting agency under this subchapter (including any obligation imposed by an applicable court or administrative order) have been met with respect to the subject matter of the complaint;

(B) provide reports on a regular basis to the Bureau regarding the determinations of and actions taken by the consumer reporting agency, if any, in connection with its review of such complaints; and

(C) maintain, for a reasonable time period, records regarding the disposition of each such complaint that is sufficient to demonstrate compliance with this subsection.

(4) Rulemaking authority

The Commission 1 may prescribe regulations, as appropriate to implement this subsection.

(5) Annual report

The Commission 1 shall submit to the Committee on Banking, Housing, and Urban Affairs of the Senate and the Committee on Financial Services of the House of Representatives an annual report regarding information gathered by the Bureau under this subsection.

(f) Reinvestigation requirement applicable to resellers

(1) Exemption from general reinvestigation requirement

Except as provided in paragraph (2), a reseller shall be exempt from the requirements of this section.

(2) Action required upon receiving notice of a dispute

If a reseller receives a notice from a consumer of a dispute concerning the completeness or accuracy of any item of information contained in a consumer report on such consumer produced by the reseller, the reseller shall, within 5 business days of receiving the notice, and free of charge—

(A) determine whether the item of information is incomplete or inaccurate as a result of an act or omission of the reseller; and

(B) if—

(i) the reseller determines that the item of information is incomplete or inaccurate as a result of an act or omission of the reseller, not later than 20 days after receiving the notice, correct the information in the consumer report or delete it; or

(ii) if the reseller determines that the item of information is not incomplete or inaccurate as a result of an act or omission of the reseller, convey the notice of the dispute, together with all relevant information provided by the consumer, to each consumer reporting agency that provided the reseller with the information that is the subject of the dispute, using an address or a notification mechanism specified by the consumer reporting agency for such notices.

(3) Responsibility of consumer reporting agency to notify consumer through reseller

Upon the completion of a reinvestigation under this section of a dispute concerning the completeness or accuracy of any information in the file of a consumer by a consumer reporting agency that received notice of the dispute from a reseller under paragraph (2)—

(A) the notice by the consumer reporting agency under paragraph (6), (7), or (8) of subsection (a) shall be provided to the reseller in lieu of the consumer; and

(B) the reseller shall immediately reconvey such notice to the consumer, including any notice of a deletion by telephone in the manner required under paragraph (8)(A).

(4) Reseller reinvestigations

No provision of this subsection shall be construed as prohibiting a reseller from conducting a reinvestigation of a consumer dispute directly.

(g) Dispute process for veteran’s medical debt

(1) In general

With respect to a veteran’s medical debt, the veteran may submit a notice described in paragraph (2), proof of liability of the Department of Veterans Affairs for payment of that debt, or documentation that the Department of Veterans Affairs is in the process of making payment for authorized hospital care, medical services, or extended care services rendered to a consumer reporting agency or a reseller to dispute the inclusion of that debt on a consumer report of the veteran.

(2) Notification to veteran

The Department of Veterans Affairs shall submit to a veteran a notice that the Department of Veterans Affairs has assumed liability for part or all of a veteran’s medical debt.

(3) Deletion of information from file

If a consumer reporting agency receives notice, proof of liability, or documentation under paragraph (1), the consumer reporting agency shall delete all information relating to the veteran’s medical debt from the file of the veteran and notify the furnisher and the veteran of that deletion.

(Pub. L. 90–321, title VI, § 611, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1132; amended Pub. L. 104–208, div. A, title II, § 2409, Sept. 30, 1996, 110 Stat. 3009–439; Pub. L. 105–347, § 6(5), Nov. 2, 1998, 112 Stat. 3211; Pub. L. 108–159, title III, §§ 313(a), 314(a), 316, 317, Dec. 4, 2003, 117 Stat. 1994–1996, 1998; Pub. L. 111–203, title X, § 1088(a)(2)(C), (6), July 21, 2010, 124 Stat. 2087; Pub. L. 115–174, title III, § 302(b)(3), May 24, 2018, 132 Stat. 1333.)

Editorial Notes

References in Text

The Consumer Financial Protection Act of 2010, referred to in subsec. (e)(2), is title X of Pub. L. 111–203, July 21, 2010, 124 Stat. 1955, which enacted subchapter V (§ 5481 et seq.) of chapter 53 of Title 12, Banks and Banking, and enacted and amended numerous other sections and notes in the Code. For complete classification of this Act to the Code, see Short Title note set out under section 5301 of Title 12 and Tables.

Amendments

2018—Subsec. (a)(1)(A). Pub. L. 115–174, § 302(b)(3)(A), inserted “and except as provided in subsection (g)” after “subsection (f)”.

Subsec. (g). Pub. L. 115–174, § 302(b)(3)(B), added subsec. (g).

2010—Subsec. (e)(2). Pub. L. 111–203, § 1088(a)(6), added par. (2) and struck out former par. (2) which read as follows: “Complaints received or obtained by the Commission pursuant to its investigative authority under the Federal Trade Commission Act shall not be subject to paragraph (1).”

Subsec. (e)(3), (5). Pub. L. 111–203, § 1088(a)(2)(C), substituted “the Bureau” for “the Commission” wherever appearing.

2003—Subsec. (a)(1)(A). Pub. L. 108–159, § 317, substituted “shall, free of charge, conduct a reasonable reinvestigation to determine whether the disputed information is inaccurate” for “shall reinvestigate free of charge”.

Pub. L. 108–159, § 316(a)(1), substituted “Subject to subsection (f), if the completeness” for “If the completeness” and inserted “, or indirectly through a reseller,” after “notifies the agency directly” and “or reseller” before period at end.

Subsec. (a)(2)(A). Pub. L. 108–159, § 316(a)(2), inserted “or a reseller” after “dispute from any consumer” and “or reseller” before period at end.

Subsec. (a)(2)(B). Pub. L. 108–159, § 316(c), struck out “from consumer” after “information” in heading.

Pub. L. 108–159, § 316(a)(3), inserted “or the reseller” after “from the consumer”.

Subsec. (a)(5)(A). Pub. L. 108–159, § 314(a), substituted “shall—” and cls. (i) and (ii) for “shall promptly delete that item of information from the consumer’s file or modify that item of information, as appropriate, based on the results of the reinvestigation.”

Subsec. (e). Pub. L. 108–159, § 313(a), added subsec. (e).

Subsec. (f). Pub. L. 108–159, § 316(b), added subsec. (f).

1998—Subsec. (a)(7). Pub. L. 105–347 substituted “(6)(B)(iii)” for “(6)(B)(iv)”.

1996—Subsec. (a). Pub. L. 104–208, § 2409(a), inserted heading and amended text of subsec. (a) generally. Prior to amendment, text read as follows: “If the completeness or accuracy of any item of information contained in his file is disputed by a consumer, and such dispute is directly conveyed to the consumer reporting agency by the consumer, the consumer reporting agency shall within a reasonable period of time reinvestigate and record the current status of that information unless it has reasonable grounds to believe that the dispute by the consumer is frivolous or irrelevant. If after such reinvestigation such information is found to be inaccurate or can no longer be verified, the consumer reporting agency shall promptly delete such information. The presence of contradictory information in the consumer’s file does not in and of itself constitute reasonable grounds for believing the dispute is frivolous or irrelevant.”

Subsec. (d). Pub. L. 104–208, § 2409(b), struck out at end “The consumer reporting agency shall clearly and conspicuously disclose to the consumer his rights to make such a request. Such disclosure shall be made at or prior to the time the information is deleted or the consumer’s statement regarding the disputed information is received.”

Statutory Notes and Related Subsidiaries

Effective Date of 2018 Amendment

Amendment by Pub. L. 115–174 effective 1 year after May 24, 2018, see section 302(e) of Pub. L. 115–174, set out as a note under section 1681a of this title.

Effective Date of 2010 Amendment

Effective Date of 2003 Amendment

Effective Date of 1998 Amendment

Effective Date of 1996 Amendment

Effective Date

Prompt Investigation of Disputed Consumer Information

Pub. L. 108–159, title III, § 313(b), Dec. 4, 2003, 117 Stat. 1994, provided that: “(1) Study required.— The Board and the Commission shall jointly study the extent to which, and the manner in which, consumer reporting agencies and furnishers of consumer information to consumer reporting agencies are complying with the procedures, time lines, and requirements under the Fair Credit Reporting Act [this subchapter] for the prompt investigation of the disputed accuracy of any consumer information, the completeness of the information provided to consumer reporting agencies, and the prompt correction or deletion, in accordance with such Act, of any inaccurate or incomplete information or information that cannot be verified. “(2) Report required.— Before the end of the 12-month period beginning on the date of enactment of this Act [Dec. 4, 2003], the Board and the Commission shall jointly submit a progress report to the Congress on the results of the study required under paragraph (1). “(3) Considerations.— In preparing the report required under paragraph (2), the Board and the Commission shall consider information relating to complaints compiled by the Commission under section 611(e) of the Fair Credit Reporting Act [15 U.S.C. 1681i(e)], as added by this section. “(4) Recommendations.— The report required under paragraph (2) shall include such recommendations as the Board and the Commission jointly determine to be appropriate for legislative or administrative action, to ensure that— “(A) consumer disputes with consumer reporting agencies over the accuracy or completeness of information in a consumer’s file are promptly and fully investigated and any incorrect, incomplete, or unverifiable information is corrected or deleted immediately thereafter; “(B) furnishers of information to consumer reporting agencies maintain full and prompt compliance with the duties and responsibilities established under section 623 of the Fair Credit Reporting Act [15 U.S.C. 1681s–2]; and “(C) consumer reporting agencies establish and maintain appropriate internal controls and management review procedures for maintaining full and continuous compliance with the procedures, time lines, and requirements under the Fair Credit Reporting Act [this subchapter] for the prompt investigation of the disputed accuracy of any consumer information and the prompt correction or deletion, in accordance with such Act, of any inaccurate or incomplete information or information that cannot be verified.”

[For definitions of terms used in section 313(b) of Pub. L. 108–159, set out above, see section 2 of Pub. L. 108–159, set out as a Definitions note under section 1681 of this title.]

Section 1681j§Sections Charges for certain disclosures

(a) Free annual disclosure

(1) Nationwide consumer reporting agencies

(A) In general

All consumer reporting agencies described in subsections (p) and (w) 1 1 See References in Text note below. of section 1681a of this title shall make all disclosures pursuant to section 1681g of this title once during any 12-month period upon request of the consumer and without charge to the consumer.

(B) Centralized source

Subparagraph (A) shall apply with respect to a consumer reporting agency described in section 1681a(p) of this title only if the request from the consumer is made using the centralized source established for such purpose in accordance with section 211(c) 1 of the Fair and Accurate Credit Transactions Act of 2003.

(i) In general

The Commission 2 2 So in original. Probably should be “Bureau”. shall prescribe regulations applicable to each consumer reporting agency described in section 1681a(w) 1 of this title to require the establishment of a streamlined process for consumers to request consumer reports under subparagraph (A), which shall include, at a minimum, the establishment by each such agency of a toll-free telephone number for such requests.

(ii) Considerations

In prescribing regulations under clause (i), the Bureau shall consider—

(I) the significant demands that may be placed on consumer reporting agencies in providing such consumer reports;

(II) appropriate means to ensure that consumer reporting agencies can satisfactorily meet those demands, including the efficacy of a system of staggering the availability to consumers of such consumer reports; and

(III) the ease by which consumers should be able to contact consumer reporting agencies with respect to access to such consumer reports.

(iii) Date of issuance

The Commission 2 shall issue the regulations required by this subparagraph in final form not later than 6 months after December 4, 2003.

(iv) Consideration of ability to comply

The regulations of the Bureau under this subparagraph shall establish an effective date by which each nationwide specialty consumer reporting agency (as defined in section 1681a(w) 1 of this title) shall be required to comply with subsection (a), which effective date—

(I) shall be established after consideration of the ability of each nationwide specialty consumer reporting agency to comply with subsection (a); and

(II) shall be not later than 6 months after the date on which such regulations are issued in final form (or such additional period not to exceed 3 months, as the Bureau determines appropriate).

(2) Timing

A consumer reporting agency shall provide a consumer report under paragraph (1) not later than 15 days after the date on which the request is received under paragraph (1).

(3) Reinvestigations

Notwithstanding the time periods specified in section 1681i(a)(1) of this title, a reinvestigation under that section by a consumer reporting agency upon a request of a consumer that is made after receiving a consumer report under this subsection shall be completed not later than 45 days after the date on which the request is received.

(4) Exception for first 12 months of operation

This subsection shall not apply to a consumer reporting agency that has not been furnishing consumer reports to third parties on a continuing basis during the 12-month period preceding a request under paragraph (1), with respect to consumers residing nationwide.

(b) Free disclosure after adverse notice to consumer

Each consumer reporting agency that maintains a file on a consumer shall make all disclosures pursuant to section 1681g of this title without charge to the consumer if, not later than 60 days after receipt by such consumer of a notification pursuant to section 1681m of this title, or of a notification from a debt collection agency affiliated with that consumer reporting agency stating that the consumer’s credit rating may be or has been adversely affected, the consumer makes a request under section 1681g of this title.

Upon the request of the consumer, a consumer reporting agency shall make all disclosures pursuant to section 1681g of this title once during any 12-month period without charge to that consumer if the consumer certifies in writing that the consumer—

(1) is unemployed and intends to apply for employment in the 60-day period beginning on the date on which the certification is made;

(2) is a recipient of public welfare assistance; or

(3) has reason to believe that the file on the consumer at the agency contains inaccurate information due to fraud.

(d) Free disclosures in connection with fraud alerts

Upon the request of a consumer, a consumer reporting agency described in section 1681a(p) of this title shall make all disclosures pursuant to section 1681g of this title without charge to the consumer, as provided in subsections (a)(2) and (b)(2) of section 1681c–1 of this title, as applicable.

(e) Other charges prohibited

A consumer reporting agency shall not impose any charge on a consumer for providing any notification required by this subchapter or making any disclosure required by this subchapter, except as authorized by subsection (f).

(f) Reasonable charges allowed for certain disclosures

(1) In general

In the case of a request from a consumer other than a request that is covered by any of subsections (a) through (d), a consumer reporting agency may impose a reasonable charge on a consumer—

(A) for making a disclosure to the consumer pursuant to section 1681g of this title, which charge—

(i) shall not exceed $8; and

(ii) shall be indicated to the consumer before making the disclosure; and

(B) for furnishing, pursuant to section 1681i(d) of this title, following a reinvestigation under section 1681i(a) of this title, a statement, codification, or summary to a person designated by the consumer under that section after the 30-day period beginning on the date of notification of the consumer under paragraph (6) or (8) of section 1681i(a) of this title with respect to the reinvestigation, which charge—

(i) shall not exceed the charge that the agency would impose on each designated recipient for a consumer report; and

(ii) shall be indicated to the consumer before furnishing such information.

(2) Modification of amount

The Bureau shall increase the amount referred to in paragraph (1)(A)(i) on January 1 of each year, based proportionally on changes in the Consumer Price Index, with fractional changes rounded to the nearest fifty cents.

(g) Prevention of deceptive marketing of credit reports

(1) In general

Subject to rulemaking pursuant to section 205(b) of the Credit CARD Act of 2009, any advertisement for a free credit report in any medium shall prominently disclose in such advertisement that free credit reports are available under Federal law at: “AnnualCreditReport.com” (or such other source as may be authorized under Federal law).

(2) Television and radio advertisement

In the case of an advertisement broadcast by television, the disclosures required under paragraph (1) shall be included in the audio and visual part of such advertisement. In the case of an advertisement broadcast by televison 3 3 So in original. Probably should be “television”. or radio, the disclosure required under paragraph (1) shall consist only of the following: “This is not the free credit report provided for by Federal law”.

(Pub. L. 90–321, title VI, § 612, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1132; amended Pub. L. 104–208, div. A, title II, § 2410, Sept. 30, 1996, 110 Stat. 3009–442; Pub. L. 108–159, title II, § 211(a), Dec. 4, 2003, 117 Stat. 1968; Pub. L. 111–24, title II, § 205(a), May 22, 2009, 123 Stat. 1747; Pub. L. 111–203, title X, § 1088(a)(2)(A), (C), July 21, 2010, 124 Stat. 2087.)

Editorial Notes

References in Text

Section 1681a(w) of this title, referred to in subsec. (a)(1)(A), (C)(i), (iv), was redesignated section 1681a(x) of this title by Pub. L. 111–203, title X, § 1088(a)(1), July 21, 2010, 124 Stat. 2086.

Section 211(c) of the Fair and Accurate Credit Transactions Act of 2003, referred to in subsec. (a)(1)(B), probably means section 211(d) of Pub. L. 108–159, which is set out as a note below and relates to the establishment of a centralized source. Section 211(c) of Pub. L. 108–159 amended section 1681g of this title.

Section 205(b) of the Credit CARD Act of 2009, referred to in subsec. (g), is section 205(b) of Pub. L. 111–24, which is set out as a note below.

Amendments

2010—Subsec. (a)(1)(C). Pub. L. 111–203, § 1088(a)(2)(C), substituted “the Bureau” for “the Commission” wherever appearing.

Subsec. (f)(2). Pub. L. 111–203, § 1088(a)(2)(A), substituted “Bureau” for “Federal Trade Commission”.

2009—Subsec. (g). Pub. L. 111–24 added subsec. (g).

2003—Subsec. (a). Pub. L. 108–159, § 211(a)(2), added subsec. (a). Former subsec. (a) redesignated (f).

Subsec. (d). Pub. L. 108–159, § 211(a)(4), added subsec. (d). Former subsec. (d) redesignated (e).

Subsec. (e). Pub. L. 108–159, § 211(a)(3), (5), redesignated subsec. (d) as (e) and substituted “subsection (f)” for “subsection (a)”.

Subsec. (f). Pub. L. 108–159, § 211(a)(1), (6), redesignated subsec. (a) as (f) and substituted “In the case of a request from a consumer other than a request that is covered by any of subsections (a) through (d), a” for “Except as provided in subsections (b), (c), and (d), a” in par. (1).

1996—Pub. L. 104–208 amended section generally. Prior to amendment, section read as follows: “A consumer reporting agency shall make all disclosures pursuant to section 1681g of this title and furnish all consumer reports pursuant to section 1681i(d) of this title without charge to the consumer if, within thirty days after receipt by such consumer of a notification pursuant to section 1681m of this title or notification from a debt collection agency affiliated with such consumer reporting agency stating that the consumer’s credit rating may be or has been adversely affected, the consumer makes a request under section 1681g or 1681i(d) of this title. Otherwise, the consumer reporting agency may impose a reasonable charge on the consumer for making disclosure to such consumer pursuant to section 1681g of this title, the charge for which shall be indicated to the consumer prior to making disclosure; and for furnishing notifications, statements, summaries, or codifications to person designated by the consumer pursuant to section 1681i(d) of this title, the charge for which shall be indicated to the consumer prior to furnishing such information and shall not exceed the charge that the consumer reporting agency would impose on each designated recipient for a consumer report except that no charge may be made for notifying such persons of the deletion of information which is found to be inaccurate or which can no longer be verified.”

Statutory Notes and Related Subsidiaries

Effective Date of 2010 Amendment

Effective Date of 2009 Amendment

Amendment by Pub. L. 111–24 effective 9 months after May 22, 2009, except as otherwise specifically provided, see section 3 of Pub. L. 111–24, set out as a note under section 1602 of this title.

Effective Date of 2003 Amendment

Effective Date of 1996 Amendment

Effective Date

Regulations

Pub. L. 111–24, title II, § 205(b), May 22, 2009, 123 Stat. 1747, provided that: “(1) In general.— Not later than 9 months after the date of enactment of this Act [May 22, 2009], the Federal Trade Commission shall issue a final rule to carry out this section. “(2) Content.— The rule required by this subsection— “(A) shall include specific wording to be used in advertisements in accordance with this section; and “(B) for advertisements on the Internet, shall include whether the disclosure required under section 612(g)(1) of the Fair Credit Reporting Act [15 U.S.C. 1681j(g)(1)] (as added by this section) shall appear on the advertisement or the website on which the free credit report is made available. “(3) Interim disclosures.— If an advertisement subject to section 612(g) of the Fair Credit Reporting Act [15 U.S.C. 1681j(g)], as added by this section, is made public after the 9-month deadline specified in paragraph (1), but before the rule required by paragraph (1) is finalized, such advertisement shall include the disclosure: ‘Free credit reports are available under Federal law at: “AnnualCreditReport.com”.’ ”

Pub. L. 108–159, title II, § 211(d), Dec. 4, 2003, 117 Stat. 1972, as amended by Pub. L. 111–203, § 1088(b)(2), July 21, 2010, 124 Stat. 2092, provided that: “(1) In general.— The Bureau [probably means the Bureau of Consumer Financial Protection] shall prescribe regulations applicable to consumer reporting agencies described in section 603(p) of the Fair Credit Reporting Act [15 U.S.C. 1681a(p)], to require the establishment of— “(A) a centralized source through which consumers may obtain a consumer report from each such consumer reporting agency, using a single request, and without charge to the consumer, as provided in section 612(a) of the Fair Credit Reporting Act [15 U.S.C. 1681j(a)] (as amended by this section); and “(B) a standardized form for a consumer to make such a request for a consumer report by mail or through an Internet website. “(2) Considerations.— In prescribing regulations under paragraph (1), the Bureau shall consider— “(A) the significant demands that may be placed on consumer reporting agencies in providing such consumer reports; “(B) appropriate means to ensure that consumer reporting agencies can satisfactorily meet those demands, including the efficacy of a system of staggering the availability to consumers of such consumer reports; and “(C) the ease by which consumers should be able to contact consumer reporting agencies with respect to access to such consumer reports. “(3) Centralized source.— The centralized source for a request for a consumer report from a consumer required by this subsection shall provide for— “(A) a toll-free telephone number for such purpose; “(B) use of an Internet website for such purpose; and “(C) a process for requests by mail for such purpose. “(4) Transition.— The regulations of the Bureau under paragraph (1) shall provide for an orderly transition by consumer reporting agencies described in section 603(p) of the Fair Credit Reporting Act [15 U.S.C. 1681a(p)] to the centralized source for consumer report distribution required by section 612(a)(1)(B) [15 U.S.C. 1681j(a)(1)(B)], as amended by this section, in a manner that— “(A) does not temporarily overwhelm such consumer reporting agencies with requests for disclosures of consumer reports beyond their capacity to deliver; and “(B) does not deny creditors, other users, and consumers access to consumer reports on a time-sensitive basis for specific purposes, such as home purchases or suspicions of identity theft, during the transition period. “(5) Timing.— Regulations required by this subsection shall— “(A) be issued in final form not later than 6 months after the date of enactment of this Act [Dec. 4, 2003]; and “(B) become effective not later than 6 months after the date on which they are issued in final form. “(6) Scope of regulations.— “(A) In general.— The Bureau shall, by rule, determine whether to require a consumer reporting agency that compiles and maintains files on consumers on substantially a nationwide basis, other than one described in section 603(p) of the Fair Credit Reporting Act [15 U.S.C. 1681a(p)], to make free consumer reports available upon consumer request, and if so, whether such consumer reporting agencies should make such free reports available through the centralized source described in paragraph (1)(A). “(B) Considerations.— Before making any determination under subparagraph (A), the Bureau shall consider— “(i) the number of requests for consumer reports to, and the number of consumer reports generated by, the consumer reporting agency, in comparison with consumer reporting agencies described in subsections (p) and (w) [now (x)] of section 603 of the Fair Credit Reporting Act [15 U.S.C. 1681a(p), (w) [x]]; “(ii) the overall scope of the operations of the consumer reporting agency; “(iii) the needs of consumers for access to consumer reports provided by consumer reporting agencies free of charge; “(iv) the costs of providing access to consumer reports by consumer reporting agencies free of charge; and “(v) the effects on the ongoing competitive viability of such consumer reporting agencies if such free access is required.”

[For definitions of terms used in section 211(d) of Pub. L. 108–159, set out above, see section 2 of Pub. L. 108–159, set out as a Definitions note under section 1681 of this title.]

Section 1681k§Sections Public record information for employment purposes

(a) In general

A consumer reporting agency which furnishes a consumer report for employment purposes and which for that purpose compiles and reports items of information on consumers which are matters of public record and are likely to have an adverse effect upon a consumer’s ability to obtain employment shall—

(1) at the time such public record information is reported to the user of such consumer report, notify the consumer of the fact that public record information is being reported by the consumer reporting agency, together with the name and address of the person to whom such information is being reported; or

(2) maintain strict procedures designed to insure that whenever public record information which is likely to have an adverse effect on a consumer’s ability to obtain employment is reported it is complete and up to date. For purposes of this paragraph, items of public record relating to arrests, indictments, convictions, suits, tax liens, and outstanding judgments shall be considered up to date if the current public record status of the item at the time of the report is reported.

(b) Exemption for national security investigations

Subsection (a) does not apply in the case of an agency or department of the United States Government that seeks to obtain and use a consumer report for employment purposes, if the head of the agency or department makes a written finding as prescribed under section 1681b(b)(4)(A) of this title.

(Pub. L. 90–321, title VI, § 613, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1133; amended Pub. L. 105–347, § 4(b), Nov. 2, 1998, 112 Stat. 3210.)

Editorial Notes

Amendments

1998—Pub. L. 105–347 designated existing provisions as subsec. (a), inserted heading, and added subsec. (b).

Statutory Notes and Related Subsidiaries

Effective Date of 1998 Amendment

Effective Date

Section 1681l§Sections Restrictions on investigative consumer reports

Whenever a consumer reporting agency prepares an investigative consumer report, no adverse information in the consumer report (other than information which is a matter of public record) may be included in a subsequent consumer report unless such adverse information has been verified in the process of making such subsequent consumer report, or the adverse information was received within the three-month period preceding the date the subsequent report is furnished.

(Pub. L. 90–321, title VI, § 614, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1133.)

Statutory Notes and Related Subsidiaries

Effective Date

Section 1681m§Sections Requirements on users of consumer reports

(a) Duties of users taking adverse actions on basis of information contained in consumer reports

If any person takes any adverse action with respect to any consumer that is based in whole or in part on any information contained in a consumer report, the person shall—

(1) provide oral, written, or electronic notice of the adverse action to the consumer;

(2) provide to the consumer written or electronic disclosure—

(A) of a numerical credit score as defined in section 1681g(f)(2)(A) of this title used by such person in taking any adverse action based in whole or in part on any information in a consumer report; and

(B) of the information set forth in subparagraphs (B) through (E) of section 1681g(f)(1) of this title;

(3) provide to the consumer orally, in writing, or electronically—

(A) the name, address, and telephone number of the consumer reporting agency (including a toll-free telephone number established by the agency if the agency compiles and maintains files on consumers on a nationwide basis) that furnished the report to the person; and

(B) a statement that the consumer reporting agency did not make the decision to take the adverse action and is unable to provide the consumer the specific reasons why the adverse action was taken; and

(4) provide to the consumer an oral, written, or electronic notice of the consumer’s right—

(A) to obtain, under section 1681j of this title, a free copy of a consumer report on the consumer from the consumer reporting agency referred to in paragraph (3), which notice shall include an indication of the 60-day period under that section for obtaining such a copy; and

(B) to dispute, under section 1681i of this title, with a consumer reporting agency the accuracy or completeness of any information in a consumer report furnished by the agency.

(b) Adverse action based on information obtained from third parties other than consumer reporting agencies

(1) In general

Whenever credit for personal, family, or household purposes involving a consumer is denied or the charge for such credit is increased either wholly or partly because of information obtained from a person other than a consumer reporting agency bearing upon the consumer’s credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living, the user of such information shall, within a reasonable period of time, upon the consumer’s written request for the reasons for such adverse action received within sixty days after learning of such adverse action, disclose the nature of the information to the consumer. The user of such information shall clearly and accurately disclose to the consumer his right to make such written request at the time such adverse action is communicated to the consumer.

(2) Duties of person taking certain actions based on information provided by affiliate

(A) Duties, generally

If a person takes an action described in subparagraph (B) with respect to a consumer, based in whole or in part on information described in subparagraph (C), the person shall—

(i) notify the consumer of the action, including a statement that the consumer may obtain the information in accordance with clause (ii); and

(ii) upon a written request from the consumer received within 60 days after transmittal of the notice required by clause (i), disclose to the consumer the nature of the information upon which the action is based by not later than 30 days after receipt of the request.

(B) Action described

An action referred to in subparagraph (A) is an adverse action described in section 1681a(k)(1)(A) of this title, taken in connection with a transaction initiated by the consumer, or any adverse action described in clause (i) or (ii) of section 1681a(k)(1)(B) of this title.

Information referred to in subparagraph (A)—

(i) except as provided in clause (ii), is information that—

(I) is furnished to the person taking the action by a person related by common ownership or affiliated by common corporate control to the person taking the action; and

(II) bears on the credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living of the consumer; and

(ii) does not include—

(I) information solely as to transactions or experiences between the consumer and the person furnishing the information; or

(II) information in a consumer report.

No person shall be held liable for any violation of this section if he shows by a preponderance of the evidence that at the time of the alleged violation he maintained reasonable procedures to assure compliance with the provisions of this section.

(d) Duties of users making written credit or insurance solicitations on basis of information contained in consumer files

(1) In general

Any person who uses a consumer report on any consumer in connection with any credit or insurance transaction that is not initiated by the consumer, that is provided to that person under section 1681b(c)(1)(B) of this title, shall provide with each written solicitation made to the consumer regarding the transaction a clear and conspicuous statement that—

(A) information contained in the consumer’s consumer report was used in connection with the transaction;

(B) the consumer received the offer of credit or insurance because the consumer satisfied the criteria for credit worthiness or insurability under which the consumer was selected for the offer;

(C) if applicable, the credit or insurance may not be extended if, after the consumer responds to the offer, the consumer does not meet the criteria used to select the consumer for the offer or any applicable criteria bearing on credit worthiness or insurability or does not furnish any required collateral;

(D) the consumer has a right to prohibit information contained in the consumer’s file with any consumer reporting agency from being used in connection with any credit or insurance transaction that is not initiated by the consumer; and

(E) the consumer may exercise the right referred to in subparagraph (D) by notifying a notification system established under section 1681b(e) of this title.

(2) Disclosure of address and telephone number; format

A statement under paragraph (1) shall—

(A) include the address and toll-free telephone number of the appropriate notification system established under section 1681b(e) of this title; and

(B) be presented in such format and in such type size and manner as to be simple and easy to understand, as established by the Bureau, by rule, in consultation with the Federal Trade Commission, the Federal banking agencies, and the National Credit Union Administration.

(3) Maintaining criteria on file

A person who makes an offer of credit or insurance to a consumer under a credit or insurance transaction described in paragraph (1) shall maintain on file the criteria used to select the consumer to receive the offer, all criteria bearing on credit worthiness or insurability, as applicable, that are the basis for determining whether or not to extend credit or insurance pursuant to the offer, and any requirement for the furnishing of collateral as a condition of the extension of credit or insurance, until the expiration of the 3-year period beginning on the date on which the offer is made to the consumer.

(4) Authority of Federal agencies regarding unfair or deceptive acts or practices not affected

This section is not intended to affect the authority of any Federal or State agency to enforce a prohibition against unfair or deceptive acts or practices, including the making of false or misleading statements in connection with a credit or insurance transaction that is not initiated by the consumer.

(e) Red flag guidelines and regulations required

(1) Guidelines

The Federal banking agencies, the National Credit Union Administration, the Federal Trade Commission, the Commodity Futures Trading Commission, and the Securities and Exchange Commission shall jointly, with respect to the entities that are subject to their respective enforcement authority under section 1681s of this title—

(A) establish and maintain guidelines for use by each financial institution and each creditor regarding identity theft with respect to account holders at, or customers of, such entities, and update such guidelines as often as necessary;

(B) prescribe regulations requiring each financial institution and each creditor to establish reasonable policies and procedures for implementing the guidelines established pursuant to subparagraph (A), to identify possible risks to account holders or customers or to the safety and soundness of the institution or customers; and

(C) prescribe regulations applicable to card issuers to ensure that, if a card issuer receives notification of a change of address for an existing account, and within a short period of time (during at least the first 30 days after such notification is received) receives a request for an additional or replacement card for the same account, the card issuer may not issue the additional or replacement card, unless the card issuer, in accordance with reasonable policies and procedures—

(i) notifies the cardholder of the request at the former address of the cardholder and provides to the cardholder a means of promptly reporting incorrect address changes;

(ii) notifies the cardholder of the request by such other means of communication as the cardholder and the card issuer previously agreed to; or

(iii) uses other means of assessing the validity of the change of address, in accordance with reasonable policies and procedures established by the card issuer in accordance with the regulations prescribed under subparagraph (B).

(2) Criteria

(A) In general

In developing the guidelines required by paragraph (1)(A), the agencies described in paragraph (1) shall identify patterns, practices, and specific forms of activity that indicate the possible existence of identity theft.

(B) Inactive accounts

In developing the guidelines required by paragraph (1)(A), the agencies described in paragraph (1) shall consider including reasonable guidelines providing that when a transaction occurs with respect to a credit or deposit account that has been inactive for more than 2 years, the creditor or financial institution shall follow reasonable policies and procedures that provide for notice to be given to a consumer in a manner reasonably designed to reduce the likelihood of identity theft with respect to such account.

(3) Consistency with verification requirements

Guidelines established pursuant to paragraph (1) shall not be inconsistent with the policies and procedures required under section 5318(l) of title 31.

(4) Definitions

As used in this subsection, the term “creditor”—

(A) means a creditor, as defined in section 1691a of this title, that regularly and in the ordinary course of business—

(i) obtains or uses consumer reports, directly or indirectly, in connection with a credit transaction;

(ii) furnishes information to consumer reporting agencies, as described in section 1681s–2 of this title, in connection with a credit transaction; or

(iii) advances funds to or on behalf of a person, based on an obligation of the person to repay the funds or repayable from specific property pledged by or on behalf of the person;

(B) does not include a creditor described in subparagraph (A)(iii) that advances funds on behalf of a person for expenses incidental to a service provided by the creditor to that person; and

(C) includes any other type of creditor, as defined in that section 1691a of this title, as the agency described in paragraph (1) having authority over that creditor may determine appropriate by rule promulgated by that agency, based on a determination that such creditor offers or maintains accounts that are subject to a reasonably foreseeable risk of identity theft.

(f) Prohibition on sale or transfer of debt caused by identity theft

(1) In general

No person shall sell, transfer for consideration, or place for collection a debt that such person has been notified under section 1681c–2 of this title has resulted from identity theft.

(2) Applicability

The prohibitions of this subsection shall apply to all persons collecting a debt described in paragraph (1) after the date of a notification under paragraph (1).

(3) Rule of construction

Nothing in this subsection shall be construed to prohibit—

(A) the repurchase of a debt in any case in which the assignee of the debt requires such repurchase because the debt has resulted from identity theft;

(B) the securitization of a debt or the pledging of a portfolio of debt as collateral in connection with a borrowing; or

(C) the transfer of debt as a result of a merger, acquisition, purchase and assumption transaction, or transfer of substantially all of the assets of an entity.

(g) Debt collector communications concerning identity theft

If a person acting as a debt collector (as that term is defined in subchapter V) on behalf of a third party that is a creditor or other user of a consumer report is notified that any information relating to a debt that the person is attempting to collect may be fraudulent or may be the result of identity theft, that person shall—

(1) notify the third party that the information may be fraudulent or may be the result of identity theft; and

(2) upon request of the consumer to whom the debt purportedly relates, provide to the consumer all information to which the consumer would otherwise be entitled if the consumer were not a victim of identity theft, but wished to dispute the debt under provisions of law applicable to that person.

(h) Duties of users in certain credit transactions

(1) In general

Subject to rules prescribed as provided in paragraph (6), if any person uses a consumer report in connection with an application for, or a grant, extension, or other provision of, credit on material terms that are materially less favorable than the most favorable terms available to a substantial proportion of consumers from or through that person, based in whole or in part on a consumer report, the person shall provide an oral, written, or electronic notice to the consumer in the form and manner required by regulations prescribed in accordance with this subsection.

(2) Timing

The notice required under paragraph (1) may be provided at the time of an application for, or a grant, extension, or other provision of, credit or the time of communication of an approval of an application for, or grant, extension, or other provision of, credit, except as provided in the regulations prescribed under paragraph (6).

(3) Exceptions

No notice shall be required from a person under this subsection if—

(A) the consumer applied for specific material terms and was granted those terms, unless those terms were initially specified by the person after the transaction was initiated by the consumer and after the person obtained a consumer report; or

(B) the person has provided or will provide a notice to the consumer under subsection (a) in connection with the transaction.

(4) Other notice not sufficient

A person that is required to provide a notice under subsection (a) cannot meet that requirement by providing a notice under this subsection.

(5) Content and delivery of notice

A notice under this subsection shall, at a minimum—

(A) include a statement informing the consumer that the terms offered to the consumer are set based on information from a consumer report;

(B) identify the consumer reporting agency furnishing the report;

(C) include a statement informing the consumer that the consumer may obtain a copy of a consumer report from that consumer reporting agency without charge;

(D) include the contact information specified by that consumer reporting agency for obtaining such consumer reports (including a toll-free telephone number established by the agency in the case of a consumer reporting agency described in section 1681a(p) of this title); and

(E) include a statement informing the consumer of—

(i) a numerical credit score as defined in section 1681g(f)(2)(A) of this title, used by such person in making the credit decision described in paragraph (1) based in whole or in part on any information in a consumer report; and

(ii) the information set forth in subparagraphs (B) through (E) of section 1681g(f)(1) of this title.

(6) Rulemaking

(A) Rules required

The Bureau shall prescribe rules to carry out this subsection.

(B) Content

Rules required by subparagraph (A) shall address, but are not limited to—

(i) the form, content, time, and manner of delivery of any notice under this subsection;

(ii) clarification of the meaning of terms used in this subsection, including what credit terms are material, and when credit terms are materially less favorable;

(iii) exceptions to the notice requirement under this subsection for classes of persons or transactions regarding which the agencies determine that notice would not significantly benefit consumers;

(iv) a model notice that may be used to comply with this subsection; and

(v) the timing of the notice required under paragraph (1), including the circumstances under which the notice must be provided after the terms offered to the consumer were set based on information from a consumer report.

(7) Compliance

A person shall not be liable for failure to perform the duties required by this section if, at the time of the failure, the person maintained reasonable policies and procedures to comply with this section.

(8) Enforcement

(A) No civil actions

Sections 1681n and 1681o of this title shall not apply to any failure by any person to comply with this section.

(B) Administrative enforcement

This section shall be enforced exclusively under section 1681s of this title by the Federal agencies and officials identified in that section.

(Pub. L. 90–321, title VI, § 615, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1133; amended Pub. L. 104–208, div. A, title II, § 2411, Sept. 30, 1996, 110 Stat. 3009–443; Pub. L. 108–159, title I, §§ 114, 154(b), 155, title II, § 213(a), title III, § 311(a), title VIII, § 811(h), Dec. 4, 2003, 117 Stat. 1960, 1967, 1978, 1988, 2012; Pub. L. 111–203, title X, §§ 1088(a)(2)(C), (7)–(9), 1100F, July 21, 2010, 124 Stat. 2087, 2088, 2112; Pub. L. 111–319, § 2(a), Dec. 18, 2010, 124 Stat. 3457.)

Editorial Notes

Amendments

2010—Subsec. (a)(2) to (4). Pub. L. 111–203, § 1100F(1), added par. (2), redesignated former pars. (2) and (3) as (3) and (4), respectively, and substituted “paragraph (3)” for “paragraph (2)” in par. (4).

Subsec. (d)(2)(B). Pub. L. 111–203, § 1088(a)(7), substituted “the Federal Trade Commission, the Federal banking agencies,” for “the Federal banking agencies”.

Pub. L. 111–203, § 1088(a)(2)(C), substituted “the Bureau” for “the Commission”.

Subsec. (e)(1). Pub. L. 111–203, § 1088(a)(8), substituted “the Federal Trade Commission, the Commodity Futures Trading Commission, and the Securities and Exchange Commission” for “and the Commission” in introductory provisions.

Subsec. (e)(4). Pub. L. 111–319 added par. (4).

Subsec. (h)(5)(E). Pub. L. 111–203, § 1100F(2), added subpar. (E).

Subsec. (h)(6)(A). Pub. L. 111–203, § 1088(a)(9), added subpar. (A) and struck out former subpar. (A). Prior to amendment, text read as follows: “The Commission and the Board shall jointly prescribe rules.”

2003—Subsec. (d)(2). Pub. L. 108–159, § 213(a), amended heading and text of par. (2) generally. Prior to amendment, text read as follows: “A statement under paragraph (1) shall include the address and toll-free telephone number of the appropriate notification system established under section 1681b(e) of this title.”

Subsec. (e). Pub. L. 108–159, § 811(h), repealed Pub. L. 104–208, § 2411(c). See 1996 Amendment note below.

Pub. L. 108–159, § 114, added subsec. (e) and struck out former subsec. (e) designation that had been added with no heading or text by Pub. L. 104–208, § 2411(c). See note above and 1996 Amendment note below.

Subsec. (f). Pub. L. 108–159, § 154(b), added subsec. (f).

Subsec. (g). Pub. L. 108–159, § 155, added subsec. (g).

Subsec. (h). Pub. L. 108–159, § 311(a), added subsec. (h).

1996—Subsec. (a). Pub. L. 104–208, § 2411(a), inserted heading and amended text of subsec. (a) generally. Prior to amendment, text read as follows: “Whenever credit or insurance for personal, family, or household purposes, or employment involving a consumer is denied or the charge for such credit or insurance is increased either wholly or partly because of information contained in a consumer report from a consumer reporting agency, the user of the consumer report shall so advise the consumer against whom such adverse action has been taken and supply the name and address of the consumer reporting agency making the report.”

Subsec. (b). Pub. L. 104–208, § 2411(e), inserted subsec. heading, designated existing provisions as par. (1) and inserted heading, and added par. (2).

Subsec. (c). Pub. L. 104–208, § 2411(d), substituted “this section” for “subsections (a) and (b) of this section”.

Subsec. (d). Pub. L. 104–208, § 2411(b), added subsec. (d).

Subsec. (e). Pub. L. 104–208, § 2411(c), which added subsec. (e) containing subsec. designation, but no heading or text, was repealed by Pub. L. 108–159, § 811(h).

Statutory Notes and Related Subsidiaries

Effective Date of 2010 Amendment

Pub. L. 111–319, § 2(b), Dec. 18, 2010, 124 Stat. 3458, provided that: “The amendment made by this section [amending this section] shall become effective on the date of enactment of this Act [Dec. 18, 2010].”

Effective Date of 2003 Amendment

Effective Date of 1996 Amendment

Effective Date

Regulations

Pub. L. 108–159, title II, § 213(b), Dec. 4, 2003, 117 Stat. 1979, provided that: “Regulations required by section 615(d)(2) of the Fair Credit Reporting Act [15 U.S.C. 1681m(d)(2)], as amended by this section, shall be issued in final form not later than 1 year after the date of enactment of this Act [Dec. 4, 2003].”