Consumer complaint received 2024-12-15 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Reporting company used your report improperly
Company: CrossCountry Mortgage LLC
State: FL

Complaint narrative:
Consumer Financial Protection Bureau ( CFPB ) NO WRITTEN CONSCENT This complaint addresses serious and ongoing violations of federal consumer protection laws due to the unauthorized sharing and furnishing of my personal, private, and financial information to non-affiliated third parties without my explicit written consent and in the absence of required disclosures. The recently discovered that my personal and financial information was shared with third parties, including entities that I did not authorize or consent to carries significant ramifications. This disclosure occurred without my prior knowledge or written consent, and I was not provided with any opportunity to opt-out or control how my data was shared. Despite my right to privacy under state and federal law, these actions were taken without my permission, and I have suffered from the unauthorized exposure of my financial information. 

The violations of law include, but are not limited to : The Fair Credit Reporting Act ( FCRA ), The Fair Debt Collection Practices Act ( FDCPA ), The Gramm-Leach-Bliley Act ( GLBA ), The XXXX XXXX XXXX Reform and Consumer Protection Act, The Federal Trade Commission Act ( FTCA ), The Fair and Accurate Credit Transactions Act ( FACTA ), The Right to Financial Privacy Act ( RFPA ), The Consumer Credit Protection Act ( CCPA ), The Privacy Act of 1974, and State consumer protection laws.

Details of Violations : 1. Violations of the Fair Credit Reporting Act ( FCRA ) 15 U.S.C. 1681b : My consumer report was furnished to unauthorized, non-affiliated third parties without a permissible purpose or my explicit written consent.

15 U.S.C. 1681e ( a ) : The respondent failed to implement reasonable procedures to ensure my data was only shared with authorized parties, I have given no authorizatioins.

15 U.S.C. 1681g : I was not provided a complete disclosure of the entities with whom my report was shared.

15 U.S.C. 1681w ( FACTA Disposal Rule ) : Sensitive consumer data was mishandled and not adequately protected.

The reporting of late payments on my credit report violates 15 U.S.C. 1681s-2 of the FCRA. I have not provided express written consent to furnishers or credit reporting agencies ( CRAs ) to share my private information with third parties or non-affiliated entities. Additionally, pursuant to Section 623 ( a ) ( 7 ) of the FCRA, financial institutions are required to notify consumers in writing before furnishing negative information to a nationwide consumer reporting agency.

Account in Question
: CROSSCOUNTRY, Account # XXXX I have never received the statutorily required notice of negative reporting from this furnisher. As such, this accounts reporting is non-compliant and inaccurate. I request its immediate deletion under Section 623 ( b ) ( 1 ) ( E ) of the FCRA.

2. Violations of the Fair Debt Collection Practices Act ( FDCPA ) : 15 U.S.C. 1692c ( b ) : Unauthorized communication of my financial information occurred with non-affiliated third parties, violating the FDCPAs prohibition on third-party disclosures.

3. Violations of the Gramm-Leach-Bliley Act ( GLBA ) : 15 U.S.C. 6802 ( a ) : My nonpublic personal information ( NPI ) was shared without my written consent.

15 U.S.C. 6802 ( b ) : I was not given an opportunity to opt-out of data sharing.

15 U.S.C. 6803 : Required privacy notices were not provided, denying me transparency regarding how my data would be used.

4. Violations of the Dodd-Frank Act ( 12 U.S.C. 5531 and 5536 ) : The unauthorized sharing of my data constitutes unfair, deceptive, or abusive acts or practices ( UDAAPs ), including : Unfair practices : Exposing me to identity theft, fraud, and other substantial risks without my consent.

Violations of federal consumer financial laws ( FCRA, FDCPA, GLBA ).

5. Violations of the Federal Trade Commission Act ( FTCA ) : Under 15 U.S.C. 45, the unauthorized sharing of my private data constitutes an unfair and deceptive act in commerce.

6. Violations of the Fair and Accurate Credit Transactions Act ( FACTA ) : 15 U.S.C. 1681w : Sensitive consumer information was not properly safeguarded or disposed of, risking unauthorized access.

15 U.S.C. 1681c-1 : Adequate safeguards were not implemented to ensure the confidentiality of my data.

7. Violations of the Right to Financial Privacy Act ( RFPA ) The respondent failed to comply with principles requiring explicit consumer consent prior to sharing financial information with unauthorized parties.

8. Violations of the Consumer Credit Protection Act ( CCPA ) : The unauthorized handling and sharing of my financial data undermine the principles of fairness and transparency required by the CCPA.

9. Violations of the Privacy Act of 1974 : The failure to safeguard or obtain consent prior to sharing private data violates foundational privacy principles codified in the Privacy Act.

10. State Consumer Protection Laws : Californias California Consumer Privacy Act ( CCPA ) requires explicit consumer consent for sharing private information.

New Yorks SHIELD Act mandates safeguards to prevent unauthorized access to sensitive data.

Florida Deceptive and Unfair Trade Practices Act ( FDUTPA ) : Section 501.204 of the Florida Statutes prohibits unfair or deceptive trade practices, including the unauthorized disclosure of personal or financial information. The credit reporting agencies involved have shared my personal information without my consent, constituting a deceptive or unfair practice under this law.

Floridas Financial Privacy Protection Act : This law restricts financial institutions and businesses from disclosing
nonpublic personal information to third parties without prior written consent. The sharing of my private financial data by these credit agencies without my authorization directly violates this statute.

Floridas Information Protection Act ( FIPA ) : Under FIPA, businesses are required to protect personal and financial information from unauthorized access or disclosure. The credit reporting agencies ' actions in disclosing my sensitive data to third parties without my consent violate this law, and they have failed to notify me in the event of any breach or unauthorized use. 



Supporting Legal Precedent : The following Supreme Court decisions further affirm my constitutional right to privacy and data protection : XXXX XXXX XXXX XXXXXXXX XXXX XXXX ( XXXX ) : Establishes privacy as a fundamental right. 

XXXX XXXX XXXX, XXXX XXXX XXXX ( XXXX ) : Individuals have a right to control the disclosure of personal and financial information. 

XXXX XXXX XXXXXXXX XXXX XXXX XXXX XXXX XXXX ( XXXX ) : Limits unauthorized sharing of consumer credit data under the FCRA. 



Requested Resolution To resolve this complaint, I demand the immediate removal of the disputed account and any associated records from my consumer file. Additionally : A complete disclosure of all third parties to whom my information was furnished ( under 15 U.S.C. 1681g ). 

Confirmation that all unauthorized disclosures have ceased, and procedures have been implemented to prevent future violations. 

Produce the letter with my Bonafide wet ink signature giving explicit written consent to the communication and furnishing of my personal, private, non-public, financial information with non-affiliated third parties.

If a letter with my Bonafide wet ink signature giving explicit written consent to the communication and furnishing of my personal, private, non-public information and financial information with non-affiliated third parties can not be produced then the credit reporting agency must remove the account in question immediately.

Conclusion The respondents conduct violates multiple federal and state statutes, exposes me to significant harm, and infringes on my right to privacy. I urge the Consumer Financial Protection Bureau to take immediate action to address these violations and enforce the removal of this account. 

I appreciate your prompt attention to this matter. 

Sincerely, XXXX XXXX XXXX

Company response to consumer: Closed with explanation