Consumer complaint received 2024-12-03 00:00:00
Product: Debt collection — Credit card debt
Issue: Written notification about debt — Didn't receive notice of right to dispute
Company: NAVY FEDERAL CREDIT UNION
State: NY

Complaint narrative:
In early XXXX, I received a letter from XXXX XXXX under the name of XXXX about a debt I owed them ; shortly after, I received a phone call. I was shocked because I had never done business with these people before. I was informed that they acquired the debt from Navy Federal Credit Union. I sent XXXX XXXX a debt verification letter ; they responded by providing a series of documents. In these papers, I discovered my entire social security number, a clear breach of my privacy. Also, I was frustrated as XXXX XXXX should have provided the original documents ( contract ) with my wet signature, but they were nowhere to be found. 

The Privacy Act of XXXX  ( 5 U.S.C. 552a ) : This act restricts the disclosure of personal information, including SSNs, by federal agencies and requires agencies to safeguard the privacy of individuals ' information. 

Fair Credit Reporting Act ( FCRA ) ( 15 U.S.C. 1681 et seq. ) : This act regulates the collection, dissemination, and use of consumer information, including credit information. Unauthorized disclosure of SSNs can be considered a violation of the FCRA.

Fair Debt Collection Practices Act ( FDCPA ) ( 15 U.S.C. 1692 et seq. ) : This act prohibits debt collectors from using unfair, deceptive, or abusive practices to collect from consumers, which can include the unauthorized use or sale of personal information. 

State Privacy Laws : Many states have their own privacy laws that provide additional protections for personal information, including SSNs. My SSN was sold without my consent or notification offering me an option to opt out. 
Florida Florida Digital Bill of Rights ( SB 262 ) : This law, effective from XX/XX/XXXX, grants Florida consumers certain rights relating to the processing of their personal data by businesses. It includes provisions for data minimization, consumer rights to access, correct, and delete data, and opt-out rights for targeted advertising and profiling. 

New York New York State Personal Privacy Protection Law ( PPPL ) : Enacted in XXXX, this law regulates the manner in which state agencies collect, maintain, and disseminate personal information. It grants individuals the right to access and correct their information, prohibits the collection of personal information unless relevant and necessary, and requires agencies to inform individuals about the use of their data. All of which must in accordance with all federal regulations. 

The Gramm-Leach-Bliley Act ( GLBA ) ( 15 U.S.C. 6801 et seq. ), also known as the Financial Services Modernization Act of XXXX, is a federal law that requires financial institutions to explain their information-sharing practices to customers and to safeguard sensitive data. 

Under the GLBA, financial institutions must : Disclose Information-Sharing Practices : Inform customers about their policies regarding the sharing of personal financial information. 

Provide an Opt-Out Option : Give customers the right to opt out of having their information shared with non-affiliated third parties. 

Safeguard Customer Information : Develop, implement, and maintain security measures to protect customer data from unauthorized access.

Company public response: Company believes it acted appropriately as authorized by contract or law
Company response to consumer: Closed with non-monetary relief