Consumer complaint received 2025-10-21 00:00:00
Product: Credit card — General-purpose credit card or charge card
Issue: Getting a credit card — Application denied
Company: JPMORGAN CHASE & CO.
State: NJ

Complaint narrative:
Attn : Compliance Department reference Number : XXXX : I reviewed the response to my Chase credit card denial. Your statements are not accurate and do not comply with federal law. This letter is my rebuttal and demand for correction. 
When I applied for a credit card, I gave you my Social Security number, signature, and permission to access my credit report. That information has value. You accepted it and used it for your own business purposes. I received nothing in return. That is not fair. It creates a one-sided transaction that violates federal law. 
Under the Gramm-Leach-Bliley Act ( 15 U.S.C. 68016809 ) and Fair Credit Reporting Act ( 15 U.S.C. 1681b ( f ) ), you had permission to use my information only to review my credit application. Once you denied my application, that purpose ended. Keeping or using my information after that violates those laws. When you denied my application, the permissible purpose that allowed you to access and use my personal and credit information ended under federal law. The Gramm-Leach-Bliley Act limits how a bank may collect, use, or retain nonpublic personal information once a transaction is complete. The Fair Credit Reporting Act restricts use of a consumer report to the purpose for which it was obtained. By keeping, storing, or reusing my data after denying credit, Chase breached both laws. These statutes require that consumer data be used only for the stated transaction and then either destroyed or protected from further use. The Privacy Rule ( 12 C.F.R. 1016.10 ) under the Gramm-Leach-Bliley Act requires financial institutions to stop using or sharing consumer information when there is no ongoing customer relationship. After your denial, no continuing relationship existed, yet you kept my personal data. 
The Fair Credit Reporting Act ( 15 U.S.C. 1681m ) also prohibits further use of a consumer report after an adverse action has been taken. Once you denied credit, you were required to end all use of my report and protect it from reuse or disclosure. 


You also have a duty to protect and limit how you use personal data. That duty makes you a data fiduciary. By keeping my personal information after denying credit, you are violating that duty and unjustly benefiting from my data. If you want to keep using my application data, you must provide equal value either approve credit or compensate me for its use. Otherwise, delete all my information and remove the inquiry from all credit reports. 
Now I will address your statements one by one. 
You said the application is not related to a secured loan, securities instrument, or trust. That is misleading. Banks use consumer credit data in asset-backed and trust-related processes under Regulation AB II. Whether approved or denied, the data itself becomes part of your financial asset system and is protected by the Gramm-Leach-Bliley Act. 
You said you did not violate any laws. Once you denied credit, your permissible purpose under FCRA 1681b ended. Keeping or using my report after that violates federal law. 
You said I agreed to the terms and conditions before applying. I did not. I applied in person, not online. No one gave me written terms or disclosures before I signed. Regulation B ( 12 C.F.R. 1002.4 ( b ) ) requires you to provide that in writing at or before application. You failed to do so. 
You said the online pricing and terms were shown before submission. That is false. I was in a branch, not online. Including that statement in your federal response is misleading. 
You said the inquiry will stay because it is accurate. Accuracy under the law means the data must show the maximum possible accuracy. Reporting a hard inquiry after the credit review ended is not accurate or necessary. 
You said the application can not be stopped or altered. That is wrong. Under GLBA 6802 ( a ), I can revoke consent for you to keep or use my information at any time. You are required to honor that.

You said you can not destroy my data. The FTC Safeguards Rule ( 16 C.F.R. Part 314 ) says you must securely dispose of consumer information once it is no longer needed. Refusing to delete it violates that rule. 
You quoted the Equal Credit Opportunity Act. You left out the part that bans practices that have an unequal effect. Keeping and using my personal information after denying credit gives you value and leaves me with none. That is unequal treatment. 
Your response ignored my rights under the FCRA, GLBA, and XXXX. I gave you consideration. You took value and gave nothing in return. That is unjust enrichment and a breach of duty. 
I am demanding that Chase either approve credit or compensate me for your use of my information. If not, delete all data tied to my application, destroy the application records, and remove the inquiry from all credit bureaus. Send written confirmation of these actions to my address within 15 days.

Company response to consumer: Closed with explanation