Product: Credit reporting or other personal consumer reports

This organization is in violation of the following laws : 15 Usc 1681 which states- ( a ) Accuracy and fairness of credit reporting The Congress makes the following findings : ( 1 ) The banking system is dependent upon fair and accurate credit reporting. Inaccurate credit reports directly impair the efficiency of the banking system, and unfair credit reporting methods undermine the public confidence which is essential to the continued functioning of the banking system. 
( 2 ) An elaborate mechanism has been developed for investigating and evaluating the credit worthiness, credit standing, credit capacity, character, and general reputation of consumers. 
( 3 ) Consumer reporting agencies have assumed a vital role in assembling and evaluating consumer credit and other information on consumers. 
( 4 ) There is a need to insure that consumer reporting agencies exercise their grave responsibilities with fairness, impartiality, and a respect for the consumers right to privacy. 
( b ) Reasonable procedures It is the purpose of this subchapter to require that consumer reporting agencies adopt reasonable procedures for meeting the needs of commerce for consumer credit, personnel, insurance, and other information in a manner which is fair and equitable to the consumer, with regard to the confidentiality, accuracy, relevancy, and proper utilization of such information in accordance with the requirements of this subchapter. 
12 CFR 1016.7 which states- ( 1 ) Form of opt out notice. If you are required to provide an opt out notice under 1016.10 ( a ), you must provide a clear and conspicuous notice to each of your consumers that accurately explains the right to opt out under that section. The notice must state : ( i ) That you disclose or reserve the right to disclose nonpublic personal information about your consumer to a nonaffiliated third party ; ( ii ) That the consumer has the right to opt out of that disclosure; and ( iii ) A reasonable means by which the consumer may exercise the opt out right.

( 2 ) Examples ( i ) Adequate opt out notice. You provide adequate notice that the consumer can opt out of the disclosure of nonpublic personal information to a nonaffiliated third party if you : ( A ) Identify all of the categories of nonpublic personal information that you disclose or reserve the right to disclose, and all of the categories of nonaffiliated third parties to which you disclose the information, as described in 1016.6 ( a ) ( 2 ) and ( 3 ) of this part, and state that the consumer can opt out of the disclosure of that information; and ( B ) Identify the financial products or services that the consumer obtains from you, either singly or jointly, to which the opt out direction would apply. 

( ii ) Reasonable opt out means. You provide a reasonable means to exercise an opt out right if you : ( A ) Designate check-off boxes in a prominent position on the relevant forms with the opt out notice ; ( B ) Include a reply form together with the opt out notice that, in the case of financial institutions described in 1016.3 ( l ) ( 3 ) of this part, includes the address to which the form should be mailed ; ( C ) Provide an electronic means to opt out, such as a form that can be sent via electronic mail or a process at your Web site, if the consumer agrees to the electronic delivery of information ; or ( D ) Provide a toll-free telephone number that consumers may call to opt out. 

( iii ) Unreasonable opt out means. You do not provide a reasonable means of opting out if : ( A ) The only means of opting out is for the consumer to write his or her own letter to exercise that opt out right; or ( B ) The only means of opting out as described in any notice subsequent to the initial notice is to use a check-off box that you provided with the initial notice but did not include with the subsequent notice. 

( iv ) Specific opt out means. You may require each consumer to opt out through a specific means, as long as that means is reasonable for that consumer.

( b ) Same form as initial notice permitted. You may provide the opt out notice together with or on the same written or electronic form as the initial notice you provide in accordance with 1016.4.

( c ) Initial notice required when opt out notice delivered subsequent to initial notice. If you provide the opt out notice later than required for the initial notice in accordance with 1016.4 of this part, you must also include a copy of the initial notice with the opt out notice in writing or, if the consumer agrees, electronically.

( d ) Joint relationships in the case of financial institutions other than credit unions and covered entities subject to FTC enforcement jurisdiction. For purposes of this paragraph ( d ), you is limited to financial institutions other than credit unions and financial institutions described in 1016.3 ( l ) ( 3 ) of this part.

( 1 ) If two or more consumers jointly obtain a financial product or service from you, you may provide a single opt out notice. Your opt out notice must explain how you will treat an opt out direction by a joint consumer ( as explained in paragraph ( d ) ( 5 ) of this section ).

( 2 ) Any of the joint consumers may exercise the right to opt out. You may either : ( i ) Treat an opt out direction by a joint consumer as applying to all of the associated joint consumers; or ( ii ) Permit each joint consumer to opt out separately.

( 3 ) If you permit each joint consumer to opt out separately, you must permit one of the joint consumers to opt out on behalf of all of the joint consumers. 

( 4 ) You may not require all joint consumers to opt out before you implement any opt out direction.

( 5 ) Example. If XXXX and XXXX have a joint checking account with you and arrange for you to send statements to XXXX 's address, you may do any of the following, but you must explain in your opt out notice which opt out policy you will follow : ( i ) Send a single opt out notice to XXXX 's address, but you must accept an opt out direction from either XXXX or XXXX. 

( ii ) Treat an opt out direction by either XXXX or XXXX as applying to the entire account. If you do so, and XXXX opts out, you may not require XXXX to opt out as well before implementing XXXX 's opt out direction. 

( iii ) Permit XXXX and XXXX to make different opt out directions. If you do so : ( A ) You must permit XXXX and XXXX to opt out for each other; ( B ) If both opt out, you must permit both to notify you in a single response ( such as on a form or through a telephone call ) ; and ( C ) If XXXX opts out and XXXX does not, you may only disclose nonpublic personal information about XXXX, but not about XXXX and not about XXXX and XXXX jointly. 

( e ) Joint relationships in the case of credit unions. 

( 1 ) If two or more consumers jointly obtain a financial product or service, other than a loan, from a credit union, the credit union may provide only a single opt out notice. The opt out notice must explain how the credit union will treat an opt out direction by a joint consumer ( as explained in the examples in paragraph ( e ) ( 5 ) of this section ). 

( XXXX ) Any of the joint consumers may exercise the right to opt out. A credit union may either : ( i ) Treat an opt out direction by a joint consumer to apply to all of the associated joint consumers; or ( ii ) Permit each joint consumer to opt out separately.

( 3 ) If a credit union permits each joint consumer to opt out separately, the credit union must permit one of the joint consumers to opt out on behalf of all of the joint consumers.

( 4 ) A credit union may not require all joint consumers to opt out before the credit union implements any opt out direction. 

( 5 ) Example. If XXXX and XXXX have a joint share account with a credit union and arrange for the credit union to send statements to XXXX 's address, the credit union may do any of the following, but it must explain in its opt out notice which opt out policy it will follow : ( i ) Send a single opt out notice to XXXX 's address, but it must accept an opt out direction from either XXXX or XXXX. 

( ii ) Treat an opt out direction by either XXXX or XXXX as applying to the entire account. If it does so, and XXXX opts out, it XXXX not require XXXX to opt out as well before implementing XXXX 's opt out direction. 

( iii ) Permit XXXX and XXXX to make different opt out directions. If it does so, and if XXXX and XXXX both opt out, it must permit XXXX or both of them to notify it in a single response ( such as on a form or through a telephone call ). 

( 6 ) Special rule for loans.

( i ) A credit union is required to provide an initial opt out notice to a borrower or guarantor on a loan if it shares his or her nonpublic personal information with nonaffiliated third parties other than for purposes under 1016.13, 1016.14, and 1016.15.

( ii ) A credit union may satisfy its annual opt out notice requirement by providing one notice to those borrowers and guarantors jointly.

( f ) Joint relationships in the case of covered entities subject to FTC enforcement jurisdiction. For purposes of this paragraph ( f ), you is limited to the financial institutions described in 1016.3 ( l ) ( 3 ).

( 1 ) If two or more consumers jointly obtain a financial product or service from you, you may provide a single opt out notice, unless one or more of those consumers requests a separate opt out notice. Your opt out notice must explain how you will treat an opt out direction by a joint consumer ( as explained in paragraph ( f ) ( 5 ) of this section ).

( 2 ) Any of the joint consumers may exercise the right to opt out. You may either : ( i ) Treat an opt out direction by a joint consumer as applying to all of the associated joint consumers; or ( ii ) Permit each joint consumer to opt out separately.

( 3 ) If you permit each joint consumer to opt out separately, you must permit one of the joint consumers to opt out on behalf of all of the joint consumers. 

( 4 ) You may not require all joint consumers to opt out before you implement any opt out direction. 

( 5 ) Example. If XXXX and XXXX have a joint credit card account with you and arrange for you to send statements to XXXX 's address, you XXXX do any of the following, but you must explain in your opt out notice which opt out policy you will follow : ( i ) Send a single opt out notice to XXXX 's address, but you must accept an opt out direction from either XXXX or XXXX. 

( ii ) Treat an opt out direction by either XXXX or XXXX as applying to the entire account. If you do so, and XXXX opts out, you may not require XXXX to opt out as well before implementing XXXX 's opt out direction. 

( iii ) Permit XXXX and XXXX to make different opt out directions. If you do so : ( A ) You must permit XXXX and XXXX to opt out for each other; ( B ) If both opt out, you must permit both to notify you in a single response ( such as on a form or through a telephone call ) ; and ( C ) If XXXX opts out and XXXX does not, you may only disclose nonpublic personal information about XXXX, but not about XXXX and not about XXXX and XXXX jointly. 

( g ) Time to comply with opt out. You must comply with a consumer 's opt out direction as soon as reasonably practicable after you receive it. 

( h ) Continuing right to opt out. A consumer may exercise the right to opt out at any time. 

( i ) Duration of consumer 's opt out direction. 

( 1 ) A consumer 's direction to opt out under this section is effective until the consumer revokes it in writing or, if the consumer agrees, electronically. 

( 2 ) When a customer relationship terminates, the customer 's opt out direction continues to apply to the nonpublic personal information that you collected during or related to that relationship. If the individual subsequently establishes a new customer relationship with you, the opt out direction that applied to the former relationship does not apply to the new relationship. 

( j ) Delivery. When you are required to deliver an opt out notice by this section, you must deliver it according to 1016.9 of this part. 

( k ) Model privacy form. Pursuant to 1016.2 ( a ) of this part, a model privacy form that meets the notice content requirements of this section is included in the appendix to this part.

15 USC 1681e which states ( a ) Identity and purposes of credit users Every consumer reporting agency shall maintain reasonable procedures designed to avoid violations of section 1681c of this title and to limit the furnishing of consumer reports to the purposes listed under section 1681b of this title. These procedures shall require that prospective users of the information identify themselves, certify the purposes for which the information is sought, and certify that the information will be used for no other purpose. Every consumer reporting agency shall make a reasonable effort to verify the identity of a new prospective user and the uses certified by such prospective user prior to furnishing such user a consumer report. No consumer reporting agency may furnish a consumer report to any person if it has reasonable grounds for believing that the consumer report will not be used for a purpose listed in section 1681b of this title. 

( b ) Accuracy of report Whenever a consumer reporting agency prepares a consumer report it shall follow reasonable procedures to assure maximum possible accuracy of the information concerning the individual about whom the report relates. 

( c ) Disclosure of consumer reports by users allowed A consumer reporting agency may not prohibit a user of a consumer report furnished by the agency on a consumer from disclosing the contents of the report to the consumer, if adverse action against the consumer has been taken by the user based in whole or in part on the report. 

( d ) Notice to users and furnishers of information ( 1 ) Notice requirement A consumer reporting agency shall provide to any person ( A ) who regularly and in the ordinary course of business furnishes information to the agency with respect to any consumer ; or ( B ) to whom a consumer report is provided by the agency ; a notice of such persons responsibilities under this subchapter. 
( 2 ) Content of notice The Bureau shall prescribe the content of notices under paragraph ( 1 ), and a consumer reporting agency shall be in compliance with this subsection if it provides a notice under paragraph ( 1 ) that is substantially similar to the Bureau prescription under this paragraph.

( e ) Procurement of consumer report for resale ( 1 ) Disclosure A person may not procure a consumer report for purposes of reselling the report ( or any information in the report ) unless the person discloses to the consumer reporting agency that originally furnishes the report ( A ) the identity of the end-user of the report ( or information ) ; and ( B ) each permissible purpose under section 1681b of this title for which the report is furnished to the end-user of the report ( or information ). 
( 2 ) Responsibilities of procurers for resale A person who procures a consumer report for purposes of reselling the report ( or any information in the report ) shall ( A ) establish and comply with reasonable procedures designed to ensure that the report ( or information ) is resold by the person only for a purpose for which the report may be furnished under section 1681b of this title, including by requiring that each person to which the report ( or information ) is resold and that resells or provides the report ( or information ) to any other person ( i ) identifies each end user of the resold report ( or information ) ; ( ii ) certifies each purpose for which the report ( or information ) will be used ; and ( iii ) certifies that the report ( or information ) will be used for no other purpose ; and ( B ) before reselling the report, make reasonable efforts to verify the identifications and certifications made under subparagraph ( A ).

( 3 ) Resale of consumer report to a Federal agency or department Notwithstanding paragraph ( 1 ) or ( 2 ), a person who procures a consumer report for purposes of reselling the report ( or any information in the report ) shall not disclose the identity of the end-user of the report under paragraph ( 1 ) or ( 2 ) if ( A ) the end user is an agency or department of the United States Government which procures the report from the person for purposes of determining the eligibility of the consumer concerned to receive access or continued access to classified information ( as defined in section 1681b ( b ) ( 4 ) ( E ) ( i ) [ 1 ] of this title ) ; and ( B ) the agency or department certifies in writing to the person reselling the report that nondisclosure is necessary to protect classified information or the safety of persons employed by or contracting with, or undergoing investigation for work or contracting with the agency or department.

15 USC 1681c which states ( a ) Information excluded from consumer reports Except as authorized under subsection ( b ), no consumer reporting agency may make any consumer report containing any of the following items of information : ( 1 ) Cases under title 11 or under the Bankruptcy Act that, from the date of entry of the order for relief or the date of adjudication, as the case may be, antedate the report by more than 10 years.

( 2 ) Civil suits, civil judgments, and records of arrest that, from date of entry, antedate the report by more than seven years or until the governing statute of limitations has expired, whichever is the longer period.

( 3 ) Paid tax liens which, from date of payment, antedate the report by more than seven years.

( 4 ) Accounts placed for collection or charged to profit and loss which antedate the report by more than seven years.

( 5 ) Any other adverse item of information, other than records of convictions of crimes which antedates the report by more than seven years.

( 6 ) The name, address, and telephone number of any medical information furnisher that has notified the agency of its status, unless ( A ) such name, address, and telephone number are restricted or reported using codes that do not identify, or provide information sufficient to infer, the specific provider or the nature of such services, products, or devices to a person other than the consumer; or ( B ) the report is being provided to an insurance company for a purpose relating to engaging in the business of insurance other than property and casualty insurance.

( 7 ) With respect to a consumer reporting agency described in section 1681a ( p ) of this title, any information related to a veterans medical debt if the date on which the hospital care, medical services, or extended care services was rendered relating to the debt antedates the report by less than 1 year if the consumer reporting agency has actual knowledge that the information is related to a veterans medical debt and the consumer reporting agency is in compliance with its obligation under section 302 ( c ) ( 5 ) of the Economic Growth, Regulatory Relief, and Consumer Protection Act.

( 8 ) With respect to a consumer reporting agency described in section 1681a ( p ) of this title, any information related to a fully paid or settled veterans medical debt that had been characterized as delinquent, charged off, or in collection if the consumer reporting agency has actual knowledge that the information is related to a veterans medical debt and the consumer reporting agency is in compliance with its obligation under section 302 ( c ) ( 5 ) of the Economic Growth, Regulatory Relief, and Consumer Protection Act.

( b ) Exempted cases The provisions of paragraphs ( 1 ) through ( 5 ) of subsection ( a ) are not applicable in the case of any consumer credit report to be used in connection with ( 1 ) a credit transaction involving, or which may reasonably be expected to involve, a principal amount of {$150000.00} or more ; ( 2 ) the underwriting of life insurance involving, or which may reasonably be expected to involve, a face amount of {$150000.00} or more; or ( 3 ) the employment of any individual at an annual salary which equals, or which may reasonably be expected to equal {$75000.00}, or more.

( c ) Running of reporting period ( 1 ) In general The 7-year period referred to in paragraphs ( 4 ) and ( 6 ) of subsection ( a ) shall begin, with respect to any delinquent account that is placed for collection ( internally or by referral to a third party, whichever is earlier ), charged to profit and loss, or subjected to any similar action, upon the expiration of the 180-day period beginning on the date of the commencement of the delinquency which immediately preceded the collection activity, charge to profit and loss, or similar action. 

( 2 ) Effective date Paragraph ( 1 ) shall apply only to items of information added to the file of a consumer on or after the date that is 455 days after XX/XX/XXXX. 

( d ) Information required to be disclosed ( 1 ) Title 11 information Any consumer reporting agency that furnishes a consumer report that contains information regarding any case involving the consumer that arises under title 11 shall include in the report an identification of the chapter of such title 11 under which such case arises if provided by the source of the information. If any case arising or filed under title 11 is withdrawn by the consumer before a final judgment, the consumer reporting agency shall include in the report that such case or filing was withdrawn upon receipt of documentation certifying such withdrawal. 

( 2 ) Key factor in credit score information Any consumer reporting agency that furnishes a consumer report that contains any credit score or any other risk score or predictor on any consumer shall include in the report a clear and conspicuous statement that a key factor ( as defined in section 1681g ( f ) ( 2 ) ( B ) of this title ) that adversely affected such score or predictor was the number of enquiries, if such a predictor was in fact a key factor that adversely affected such score. This paragraph shall not apply to a check services company, acting as such, which issues authorizations for the purpose of approving or processing negotiable instruments, electronic fund transfers, or similar methods of payments, but only to the extent that such company is engaged in such activities.

( e ) Indication of closure of account by consumer If a consumer reporting agency is notified pursuant to section 1681s2 ( a ) ( 4 ) of this title that a credit account of a consumer was voluntarily closed by the consumer, the agency shall indicate that fact in any consumer report that includes information related to the account.

( f ) Indication of dispute by consumer If a consumer reporting agency is notified pursuant to section 1681s2 ( a ) ( 3 ) of this title that information regarding a consumer who [ 1 ] was furnished to the agency is disputed by the consumer, the agency shall indicate that fact in each consumer report that includes the disputed information.

( g ) Truncation of credit card and debit card numbers ( 1 ) In general Except as otherwise provided in this subsection, no person that accepts credit cards or debit cards for the transaction of business shall print more than the last 5 digits of the card number or the expiration date upon any receipt provided to the cardholder at the point of the sale or transaction.

( 2 ) Limitation This subsection shall apply only to receipts that are electronically printed, and shall not apply to transactions in which the sole means of recording a credit card or debit card account number is by handwriting or by an imprint or copy of the card. 

( 3 ) Effective date This subsection shall become effective ( A ) 3 years after XX/XX/XXXX, with respect to any cash register or other machine or device that electronically prints receipts for credit card or debit card transactions that is in use before XX/XX/XXXX ; and ( B ) 1 year after XX/XX/XXXX, with respect to any cash register or other machine or device that electronically prints receipts for credit card or debit card transactions that is first put into use on or after XX/XX/XXXX. 
( h ) Notice of discrepancy in address ( 1 ) In general If a person has requested a consumer report relating to a consumer from a consumer reporting agency described in section 1681a ( p ) of this title, the request includes an address for the consumer that substantially differs from the addresses in the file of the consumer, and the agency provides a consumer report in response to the request, the consumer reporting agency shall notify the requester of the existence of the discrepancy.

( 2 ) Regulations ( A ) Regulations required The Bureau shall,, [ 2 ] in consultation with the Federal banking agencies, the XXXX XXXX XXXX XXXX, and the Federal Trade Commission,, [ 2 ] prescribe regulations providing guidance regarding reasonable policies and procedures that a user of a consumer report should employ when such user has received a notice of discrepancy under paragraph ( 1 ). 

( B ) Policies and procedures to be included The regulations prescribed under subparagraph ( A ) shall describe reasonable policies and procedures for use by a user of a consumer report ( i ) to form a reasonable belief that the user knows the identity of the person to whom the consumer report pertains; and ( ii ) if the user establishes a continuing relationship with the consumer, and the user regularly and in the ordinary course of business furnishes information to the consumer reporting agency from which the notice of discrepancy pertaining to the consumer was obtained, to reconcile the address of the consumer with the consumer reporting agency by furnishing such address to such consumer reporting agency as part of information regularly furnished by the user for the period in which the relationship is established. 
15 USC 1681s 2 ( A ) 1 Which states - ( a ) Duty of furnishers of information to provide accurate information ( 1 ) Prohibition ( A ) Reporting information with actual knowledge of errors A person shall not furnish any information relating to a consumer to any consumer reporting agency if the person knows or has reasonable cause to believe that the information is inaccurate.

15 USC 1681C ( a ) ( 5 ) - Any other adverse item of information, other than records of convictions of crimes which antedates the report by more than seven years.

15 USC 6802 ( b ) ( c ) - the consumer is given an explanation of how the consumer can exercise that nondisclosure option.

15 USC 1681 section 604 a section 2- allows CRAs to furnish consumer reports in accord with the written instructions of the consumer to whom it relates 15 USC 6801- ( a ) Privacy obligation policy It is the policy of the Congress that each financial institution has an affirmative and continuing obligation to respect the privacy of its customers and to protect the security and confidentiality of those customers nonpublic personal information.

( b ) Financial institutions safeguards In furtherance of the policy in subsection ( a ), each agency or authority described in section 6805 ( a ) of this title, other than the Bureau of Consumer Financial Protection, shall establish appropriate standards for the financial institutions subject to their jurisdiction relating to administrative, technical, and physical safeguards ( 1 ) to insure the security and confidentiality of customer records and information ; ( 2 ) to protect against any anticipated threats or hazards to the security or integrity of such records ; and ( 3 ) to protect against unauthorized access to or use of such records or information which could result in substantial harm or inconvenience to any customer.