Consumer complaint received 2024-08-29
Product: Credit card — Store credit card
Issue: Improper use of your report — Reporting company used your report improperly
Company: Bread Financial Holdings, Inc. (NJ)

Comenity Capital Bank XXXX XXXX XXXX XXXX, OH XXXX Account ending : XXXX Subject : Dispute Regarding Unauthorized Disclosure of Nonpublic Personal Information Dear Comenity Capital Bank and whom it may concern, I am writing to express my serious concern regarding the unauthorized disclosure of my nonpublic personal information by your institution. As a previous customer, I believe that financial institution Comenity Capital Bank have an affirmative and continuing obligation to respect my privacy and protect the security and confidentiality of my

personal data, as outlined in the Gramm-Leach-Bliley Act ( GLBA ), specifically sections 6801 through 6805. The specific violations I wish to address are a
s follows : 1. Failure to Provide Notice : - Under the GLBA, financial institutions are required to provide clear and timely notice to customers regarding their privacy policies and practices. I have not received any such notice from Comenity Capital Bank regarding the sharing or sale of my personal information to third parties.
- This omission directly contravenes the provisions of section 6802 ( a ) ( 1 ), which mandates that consumers be informed of their rights and the institution 's privacy policies.

- Furthermore, I was not provided with the required opt-out notice, as specified in section 6802 ( e ). I did not have the opportunity to exercise my right to pre
vent the sharing of my information with third parties. 2. Unauthorized Disclosure to Third-Party Debt Collectors : - Comenity Capital Bank disclosed my nonpublic personal information to third-party debt collectors without my consent. This action violates the privacy obligations set forth in section 6801 ( a ) of the GLBA.
- Section 6802 ( b ) further emphasizes the need for appropriate safeguards to protect customer records and information. Unauthorized access to or use of such records can result in substantial harm or inconvenience to the customer, which is precisely what has occurred in my case.

3. Lack of Safeguards : - Comenity Capital Bank failed to establish adequate administrative, technical, and physical safeguards to prevent unauthorized access to my nonpublic personal information, as required by section 6802 ( b ) ( 3 ).

- The unauthorized disclosure of my personal information to third-party debt collectors demonstrates a lack of diligence in safeguarding customer data.

4. Breach of Trust : - As a customer, I trusted Comenity Capital Bank to handle my personal information with the utmost care. The unauthorized sale of this information undermines that trust and violates the spirit of the GLBA.

Considering the above, I kindly request the following actions : 1. Immediate Investigation : - Conduct a thorough investigation into the unauthorized disclosure of my personal information to third-party debt collectors.

2. Cease and Desist : - Cease any further sharing or sale of my personal information to third parties without my explicit consent that includes the conveying of communication through any medium.

- Ensure that my information is promptly removed from any databases accessible to debt collectors.

3. Corrective Measures : - Implement robust safeguards to prevent future breaches of customer privacy.

- Provide written confirmation of the steps taken to rectify this situation.

4. Compensation : - Given the inconvenience and potential harm caused by this violation, I request appropriate compensation for any damage suffered. 
I seek XXXX in compensation for actual damage, emotional distress, pain and suffering and deformation of character. Also, remove my information from your database. You can make the check payable to name and address above. 


Thank you for your cooperation in resolving this serious breach of privacy. I look forward to a swift and satisfactory. Please respond within 30 days with your findings and proposed corrective actions. If necessary, I am prepared to escalate this issue to regulatory authorities.