Consumer complaint received 2025-04-10 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Problem with a company's investigation into an existing problem — Difficulty submitting a dispute or getting information about a dispute over the phone
Company: BANK OF AMERICA, NATIONAL ASSOCIATION
State: MI

Complaint narrative:
To Whom It May Concern : I am writing to formally address a serious and unlawful breach of privacy and fiduciary responsibility concerning the unauthorized release, mishandling, and/or dissemination of my personal, private, and protected information by your organization. Whether by negligence or willful misconduct, your actionsor failure to act appropriatelyconstitute multiple violations of both federal and state consumer protection laws. 
Specifically, your conduct appears to be in direct violation of the following statutes, including but not limited to : The Fair Credit Reporting Act ( FCRA ) The Gramm-Leach-Bliley Act ( GLBA ) The Truth in Lending Act ( TILA ) The Uniform Commercial Code ( UCC ) The Michigan Identity Theft Protection Act Your agency is one of several currently under scrutiny for similar misconduct. Other named entities include XXXX, XXXX, XXXX, XXXX, and XXXX. Each of these organizationsand yours includedis held to strict legal and ethical standards regarding the handling of consumer data. Breaches of those standards not only infringe upon individual rights but also undermine public trust and expose your organization to substantial legal liability.

Applicable Federal Penalties and Remedies 1. FCRA Violations ( 15 U.S.C. 1681n & 1681o ) : Willful violations : Statutory damages of {$100.00} {$1000.00} per violation, actual damages, and punitive damages.

Negligent violations : Actual damages and attorneys fees.

2. Gramm-Leach-Bliley Act ( GLBA ) : Civil penalties : Up to {$100000.00} per violation ( for institutions ).

Personal liability : Up to {$10000.00} per violation ( for directors/officers ).

Criminal penalties : Up to 5 years imprisonment ( 10 years for patterns or conspiracies ).

3. FTC Act Violations ( Deceptive Practices ) : Civil penalties of up to {$50000.00} per violation, per day.

4. Consumer Financial Protection Bureau ( CFPB ) : Tier 1 : $ 5,000/day ( basic violations ) Tier 2 : $ 25,000/day ( reckless violations ) Tier 3 : $ 1,000,000/day ( knowing violations ) 5. Breach of Contract and Privacy Policies : Remedies include compensatory, consequential, and punitive damages, as well as injunctive relief to prevent ongoing or future harm.

Immediate Demands and Expectations Cease and Desist : Immediately halt any further use, sharing, or processing of my personal information.

Internal Investigation : Initiate a full audit to identify all individuals or entities who accessed, viewed, or distributed my data unlawfully.

Remediation Plan : Provide written confirmation of corrective actions taken, including steps to ensure future compliance with applicable laws.

Response Timeline : A complete and formal response to this notice is required within 10 business days from the date of this letter.

Failure to respond within the allotted time will leave me no choice but to pursue legal action and submit formal complaints to the appropriate regulatory bodies, including but not limited to the Consumer Financial Protection Bureau ( CFPB ), the Federal Trade Commission ( FTC ), the Michigan Attorney Generals Office, and any additional state or federal oversight agencies.

I reserve all rights, remedies, and legal claims available to me under the law. 
Sincerely, XXXX XXXX XXXX XXXX XXXX XXXX XXXX, XXXX, XXXX XXXX XXXX XX/XX/year>

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation