The Fair Credit Reporting Act
Table of Contents
§ 601 - 608 (Page 1)
§ 609 - 618 (Page 2)
§ 619 Obtaining information under false pretenses
§ 620 Unauthorized disclosures by officers or employees
§ 621 Administrative enforcement
§ 622 Information on overdue child support obligations
§ 623 Responsibilities of furnishers of information to consumer reporting agencies
§ 624 Affiliate sharing
§ 625 Relation to state laws
§ 626 Disclosures to FBI for counterintelligence purposes
§ 627 Disclosures to governmental agencies for counterterrorism purposes
§ 628 Disposal of records
§ 629 Corporate and technological circumvention prohibited
Any person who knowingly and willfully obtains information on a consumer from a consumer reporting agency under false pretenses shall be fined under title 18, United States Code, imprisoned for not more than 2 years, or both.
Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency's files to a person not authorized to receive that information shall be fined under title 18, United States Code, imprisoned for not more than 2 years, or both.
(a) (1) Enforcement by Federal Trade Commission. Compliance with the requirements imposed under this title shall be enforced under the Federal Trade Commission Act [15 U.S.C. §§ 41 et seq.] by the Federal Trade Commission with respect to consumer reporting agencies and all other persons subject thereto, except to the extent that enforcement of the requirements imposed under this title is specifically committed to some other government agency under subsection (b) hereof. For the purpose of the exercise by the Federal Trade Commission of its functions and powers under the Federal Trade Commission Act, a violation of any requirement or prohibition imposed under this title shall constitute an unfair or deceptive act or practice in commerce in violation of section 5(a) of the Federal Trade Commission Act [15 U.S.C. § 45(a)] and shall be subject to enforcement by the Federal Trade Commission under section 5(b) thereof [15 U.S.C. § 45(b)] with respect to any consumer reporting agency or person subject to
enforcement by the Federal Trade Commission pursuant to this subsection, irrespective of whether that person is engaged in commerce or meets any other jurisdictional tests in the Federal Trade Commission Act. The Federal Trade Commission shall have such procedural, investigative, and enforcement powers, including the power to issue procedural rules in enforcing compliance with the requirements imposed under this title and to require the filing of reports, the production of documents, and the appearance of witnesses as though the applicable terms and conditions of the Federal Trade Commission Act were part of this title. Any person violating any of the provisions of this title shall be subject to the penalties and entitled to the privileges and immunities provided in the Federal Trade Commission Act as though the applicable terms and provisions thereof were part of this title.
(2) (A) In the event of a knowing violation, which constitutes a pattern or practice of violations of this title, the Commission may commence a civil action to recover a civil penalty in a district court of the United States against any person that violates this title. In such action, such person shall be liable for a civil penalty of not more than $2,500 per violation.
(B) In determining the amount of a civil penalty under subparagraph (A), the court shall take into account the degree of culpability, any history of prior such conduct, ability to pay, effect on ability to continue to do business, and such other matters as justice may require.
(3) Notwithstanding paragraph (2), a court may not impose any civil penalty on a person for a violation of section 623(a)(1) [§ 1681s-2] unless the person has been enjoined from committing the violation, or ordered not to commit the violation, in an action or proceeding brought by or on behalf of the Federal Trade Commission, and has violated the injunction or order, and the court may not impose any civil penalty for any violation occurring before the date of the violation of the injunction or order.
(b) Enforcement by other agencies. Compliance with the requirements imposed under this title with respect to consumer reporting agencies, persons who use consumer reports from such agencies, persons who furnish information to such agencies, and users of information that are subject to subsection (d) of section 615 [§ 1681m] shall be enforced under
(1) section 8 of the Federal Deposit Insurance Act [12 U.S.C. § 1818], in the case of
(A) national banks, and Federal branches and Federal agencies of foreign banks, by the Office of the Comptroller of the Currency;
(B) member banks of the Federal Reserve System (other than national banks), branches and agencies of foreign banks (other than Federal branches, Federal agencies, and insured State branches of foreign banks), commercial lending companies owned or controlled by foreign banks, and organizations operating under section 25 or 25A of the Federal Reserve Act [12 U.S.C. §§ 601 et seq., §§ 611 et seq], by the Board of Governors of the Federal Reserve System; and
(C) banks insured by the Federal Deposit Insurance Corporation (other than members of the Federal Reserve System) and insured State branches of foreign banks, by the Board of Directors of the Federal Deposit Insurance Corporation;
(2) section 8 of the Federal Deposit Insurance Act [12 U.S.C. § 1818], by the Director of the Office of Thrift Supervision, in the case of a savings association the deposits of which are insured by the Federal Deposit Insurance Corporation;
(3) the Federal Credit Union Act [12 U.S.C. §§ 1751 et seq.], by the Administrator of the National Credit Union Administration [National Credit Union Administration Board] with respect to any Federal credit union;
(4) subtitle IV of title 49 [49 U.S.C. §§ 10101 et seq.], by the Secretary of Transportation, with respect to all carriers subject to the jurisdiction of the Surface Transportation Board;
(5) the Federal Aviation Act of 1958 [49 U.S.C. Appx §§ 1301 et seq.], by the Secretary of Transportation with respect to any air carrier or foreign air carrier subject to that Act [49 U.S.C. Appx §§ 1301 et seq.]; and
(6) the Packers and Stockyards Act, 1921 [7 U.S.C. §§ 181 et seq.] (except as provided in section 406 of that Act [7 U.S.C. §§ 226 and 227]), by the Secretary of Agriculture with respect to any activities subject to that Act. The terms used in paragraph (1) that are not defined in this title or otherwise defined in section 3(s) of the Federal Deposit Insurance Act (12 U.S.C. §1813(s)) shall have the meaning given to them in section 1(b) of the International Banking Act of 1978 (12 U.S.C. § 3101).
(c) State Action for Violations
(1) Authority of states. In addition to such other remedies as are provided under State law, if the chief law enforcement officer of a State, or an official or agency designated by a State, has reason to believe that any person has violated or is violating this title, the State
(A) may bring an action to enjoin such violation in any appropriate United States district court or in any other court of competent jurisdiction;
(B) subject to paragraph (5), may bring an action on behalf of the residents of the State to recover
(i) damages for which the person is liable to such residents under sections 616 and 617 [§§ 1681n and 1681o] as a result of the violation;
(ii) in the case of a violation described in any of paragraphs (1) through (3) of section 623(c), damages for which the person would, but for section 623(c) [§ 1681s-2], be liable to such residents as a result of the violation; or
(iii) damages of not more than $1,000 for each willful or negligent violation; and
(C) in the case of any successful action under subparagraph (A) or (B), shall be awarded the costs of the action and reasonable attorney fees as determined by the court.
(2) Rights of federal regulators. The State shall serve prior written notice of any action under paragraph (1) upon the Federal Trade Commission or the appropriate Federal regulator determined under subsection (b) and provide the Commission or appropriate Federal regulator with a copy of its complaint, except in any case in which such prior notice is not feasible, in which case the State shall serve such notice immediately upon instituting such action. The Federal Trade Commission or appropriate Federal regulator shall have the right
(A) to intervene in the action;
(B) upon so intervening, to be heard on all matters arising therein;
(C) to remove the action to the appropriate United States district court; and
(D) to file petitions for appeal.
(3) Investigatory powers. For purposes of bringing any action under this subsection, nothing in this subsection shall prevent the chief law enforcement officer, or an official or agency designated by a State, from exercising the powers conferred on the chief law enforcement officer or such official by the laws of such State to conduct investigations or to administer oaths or affirmations or to compel the attendance of witnesses or the production of documentary and other evidence.
(4) Limitation on state action while federal action pending. If the Federal Trade Commission or the appropriate Federal regulator has instituted a civil action or an administrative action under section 8 of the Federal Deposit Insurance Act for a violation of this title, no State may, during the pendency of such action, bring an action under this section against any defendant named in the complaint of the Commission or the appropriate Federal regulator for any violation of this title that is alleged in that complaint.
(5) Limitations on State Actions for Certain Violations
(A) Violation of injunction required. A State may not bring an action against a person under paragraph (1)(B) for a violation described in any of paragraphs (1) through (3) of section 623(c), unless
(i) the person has been enjoined from committing the violation, in an action brought by the State under paragraph (1)(A); and
(ii) the person has violated the injunction.
(B) Limitation on damages recoverable. In an action against a person under paragraph (1)(B) for a violation described in any of paragraphs (1) through (3) of section 623(c), a State may not recover any damages incurred before the date of the violation of an injunction on which the action is based.
(d) Enforcement under other authority. For the purpose of the exercise by any agency referred to in subsection (b) of this section of its powers under any Act referred to in that subsection, a violation of any requirement imposed under this title shall be deemed to be a violation of a requirement imposed under that Act. In addition to its powers under any provision of law specifically referred to in subsection (b) of this section, each of the agencies referred to in that subsection may exercise, for the purpose of enforcing compliance with any requirement imposed under this title any other authority conferred on it by law.
(e) Regulatory authority
(1) The Federal banking agencies referred to in paragraphs (1) and (2) of subsection (b) shall jointly prescribe such regulations as necessary to carry out the purposes of this Act with respect to any persons identified under paragraphs (1) and (2) of subsection (b), and the Board of Governors of the Federal Reserve System shall have authority to prescribe regulations consistent with such joint regulations with respect to bank holding companies and affiliates (other than depository institutions and consumer reporting agencies) of such holding companies.
(2) The Board of the National Credit Union Administration shall prescribe such regulations as necessary to carry out the purposes of this Act with respect to any persons identified under paragraph (3) of subsection (b).
(f) Coordination of Consumer Complaint Investigations
(1) In general. Each consumer reporting agency described in section 603(p) shall develop and maintain procedures for the referral to each other such agency of any consumer complaint received by the agency alleging identity theft, or requesting a fraud alert under section 605A or a block under section 605B.
(2) Model form and procedure for reporting identity theft. The Commission, in consultation with the Federal banking agencies and the National Credit Union Administration, shall develop a model form and model procedures to be used by consumers who are victims of identity theft for contacting and informing creditors and consumer reporting agencies of the fraud.
(3) Annual summary reports. Each consumer reporting agency described in section 603(p) shall submit an annual summary report to the Commission on consumer complaints received by the agency on identity theft or fraud alerts.
(g) FTC regulation of coding of trade names. If the Commission determines that a person described in paragraph (9) of section 623(a) has not met the requirements of such paragraph, the Commission shall take action to ensure the person's compliance with such paragraph, which may include issuing model guidance or prescribing reasonable policies and procedures, as necessary to ensure that such person complies with such paragraph.
Notwithstanding any other provision of this title, a consumer reporting agency shall include in any consumer report furnished by the agency in accordance with section 604 [§ 1681b] of this title, any information on the failure of the consumer to pay overdue support which
(1) is provided
(A) to the consumer reporting agency by a State or local child support enforcement agency; or
(B) to the consumer reporting agency and verified by any local, State, or Federal government agency; and
(2) antedates the report by 7 years or less.
(a) Duty of Furnishers of Information to Provide Accurate Information
(1) Prohibition
(A) Reporting information with actual knowledge of errors. A person shall not furnish any information relating to a consumer to any consumer reporting agency if the person knows or has reasonable cause to believe that the information is inaccurate.
(B) Reporting information after notice and confirmation of errors. A person shall not furnish information relating to a consumer to any consumer reporting agency if
(i) the person has been notified by the consumer, at the address specified by the person for such notices, that specific information is inaccurate; and
(ii) the information is, in fact, inaccurate.
(C) No address requirement. A person who clearly and conspicuously specifies to the consumer an address for notices referred to in subparagraph (B) shall not be subject to subparagraph (A); however, nothing in subparagraph (B) shall require a person to specify such an address.
(D) Definition. For purposes of subparagraph (A), the term “reasonable cause to believe that the information is inaccurate” means having specific knowledge, other than solely allegations by the consumer, that would cause a reasonable person to have substantial doubts about the accuracy of the information.
(2) Duty to correct and update information. A person who
(A) regularly and in the ordinary course of business furnishes information to one or more consumer reporting agencies about the person's transactions or experiences with any consumer; and
(B) has furnished to a consumer reporting agency information that the person determines is not complete or accurate, shall promptly notify the consumer reporting agency of that determination and provide to the agency any corrections to that information, or any additional information, that is necessary to make the information provided by the person to the agency complete and accurate, and shall not thereafter furnish to the agency any of the information that remains not complete or accurate.
(3) Duty to provide notice of dispute. If the completeness or accuracy of any information furnished by any person to any consumer reporting agency is disputed to such person by a consumer, the person may not furnish the information to any consumer reporting agency without notice that such information is disputed by the consumer.
(4) Duty to provide notice of closed accounts. A person who regularly and in the ordinary course of business furnishes information to a consumer reporting agency regarding a consumer who has a credit account with that person shall notify the agency of the voluntary closure of the account by the consumer, in information regularly furnished for the period in which the account is closed.
(5) Duty to Provide Notice of Delinquency of Accounts
(A) In general. A person who furnishes information to a consumer reporting agency regarding a delinquent account being placed for collection, charged to profit or loss, or subjected to any similar action shall, not later than 90 days after furnishing the information, notify the agency of the date of delinquency on the account, which shall be the month and year of the commencement of the delinquency on the account that immediately preceded the action.
(B) Rule of construction. For purposes of this paragraph only, and provided that the consumer does not dispute the information, a person that furnishes information on a delinquent account that is placed for collection, charged for profit or loss, or subjected to any similar action, complies with this paragraph, if--
(i) the person reports the same date of delinquency as that provided by the creditor to which the account was owed at the time at which the commencement of the delinquency occurred, if the creditor previously reported that date of delinquency to a consumer reporting agency;
(ii) the creditor did not previously report the date of delinquency to a consumer reporting agency, and the person establishes and follows reasonable procedures to obtain the date of delinquency from the creditor or another reliable source and reports that date to a consumer reporting agency as the date of delinquency; or
(iii) the creditor did not previously report the date of delinquency to a consumer reporting agency and the date of delinquency cannot be reasonably obtained as provided in clause (ii), the person establishes and follows reasonable procedures to ensure the date reported as the date of delinquency precedes the date on which the account is placed for collection, charged to profit or loss, or subjected to any similar action, and reports such date to the credit reporting agency.
(6) Duties of Furnishers Upon Notice of Identity Theft-Related Information
(A) Reasonable procedures. A person that furnishes information to any consumer reporting agency shall have in place reasonable procedures to respond to any notification that it receives from a consumer reporting agency under section 605B relating to information resulting from identity theft, to prevent that person from refurnishing such blocked information.
(B) Information alleged to result from identity theft. If a consumer submits an identity theft report to a person who furnishes information to a consumer reporting agency at the address specified by that person for receiving such reports stating that information maintained by such person that purports to relate to the consumer resulted from identity theft, the person may not furnish such information that purports to relate to the consumer to any consumer reporting agency, unless the person subsequently knows or is informed by the consumer that the information is correct.
(7) Negative Information
(A) Notice to Consumer Required
(i) In general. If any financial institution that extends credit and regularly and in the ordinary course of business furnishes information to a consumer reporting agency described in section 603(p) furnishes negative information to such an agency regarding credit extended to a customer, the financial institution shall provide a notice of such furnishing of negative information, in writing, to the customer.
(ii) Notice effective for subsequent submissions. After providing such notice, the financial institution may submit additional negative information to a consumer reporting agency described in section 603(p) with respect to the same transaction, extension of credit, account, or customer without providing additional notice to the customer.
(B) Time of Notice
(i) In general. The notice required under subparagraph (A) shall be provided to the customer prior to, or no later than 30 days after, furnishing the negative information to a consumer reporting agency described in section 603(p).
(ii) Coordination with new account disclosures. If the notice is provided to the customer prior to furnishing the negative information to a consumer reporting agency, the notice may not be included in the initial disclosures provided under section 127(a) of the Truth in Lending Act.
(C) Coordination with other disclosures- The notice required under subparagraph (A)--
(i) may be included on or with any notice of default, any billing statement, or any other materials provided to the customer; and
(ii) must be clear and conspicuous.
(D) Model Disclosure
(i) Duty of board to prepare. The Board shall prescribe a brief model disclosure a financial institution may use to comply with subparagraph (A), which shall not exceed 30 words.
(ii) Use of model not required. No provision of this paragraph shall be construed as requiring a financial institution to use any such model form prescribed by the Board.
(iii) Compliance using model. A financial institution shall be deemed to be in compliance with subparagraph (A) if the financial institution uses any such model form prescribed by the Board, or the financial institution uses any such model form and rearranges its format.
(E) Use of notice without submitting negative information. No provision of this paragraph shall be construed as requiring a financial institution that has provided a customer with a notice described in subparagraph (A) to furnish negative information about the customer to a consumer reporting agency.
(F) Safe harbor. A financial institution shall not be liable for failure to perform the duties required by this paragraph if, at the time of the failure, the financial institution maintained reasonable policies and procedures to comply with this paragraph or the financial institution reasonably believed that the institution is prohibited, by law, from contacting the consumer.
(G) Definitions. For purposes of this paragraph, the following definitions shall apply:
(i) The term “negative information” means information concerning a customer's delinquencies, late payments, insolvency, or any form of default.
(ii) The terms “customer” and “financial institution” have the same meanings as in section 509 Public Law 106-102.
(8) Ability of Consumer to Dispute Information Directly with Furnisher
(A) In general. The Federal banking agencies, the National Credit Union Administration, and the Commission shall jointly prescribe regulations that shall identify the circumstances under which a furnisher shall be required to reinvestigate a dispute concerning the accuracy of information contained in a consumer report on the consumer, based on a direct request of a consumer.
(B) Considerations. In prescribing regulations under subparagraph (A), the agencies shall weigh--
(i) the benefits to consumers with the costs on furnishers and the credit reporting system;
(ii) the impact on the overall accuracy and integrity of consumer reports of any such requirements;
(iii) whether direct contact by the consumer with the furnisher would likely result in the most expeditious resolution of any such dispute; and
(iv) the potential impact on the credit reporting process if credit repair organizations, as defined in section 403(3) [15 U.S.C. §1679a(3)], including entities that would be a credit repair organization, but for section 403(3)(B)(i), are able to circumvent the prohibition in subparagraph (G).
(C) Applicability. Subparagraphs (D) through (G) shall apply in any circumstance identified under the regulations promulgated under subparagraph
(A).
(D) Submitting a notice of dispute- A consumer who seeks to dispute the accuracy of information shall provide a dispute notice directly to such person at the address specified by the person for such notices that--
(i) identifies the specific information that is being disputed;
(ii) explains the basis for the dispute; and
(iii) includes all supporting documentation required by the furnisher to substantiate the basis of the dispute.
(E) Duty of person after receiving notice of dispute. After receiving a notice of dispute from a consumer pursuant to subparagraph (D), the person that provided the information in dispute to a consumer reporting agency shall--
(i) conduct an investigation with respect to the disputed information;
(ii) review all relevant information provided by the consumer with the notice;
(iii) complete such person's investigation of the dispute and report the results of the investigation to the consumer before the expiration of the period under section 611(a)(1) within which a consumer reporting agency would be required to complete its action if the consumer had elected to dispute the information under that section; and
(iv) if the investigation finds that the information reported was inaccurate, promptly notify each consumer reporting agency to which the person furnished the inaccurate information of that determination and provide to the agency any correction to that information that is necessary to make the information provided by the person accurate.
(F) Frivolous or Irrelevant Dispute
(i) In general. This paragraph shall not apply if the person receiving a notice of a dispute from a consumer reasonably determines that the dispute is frivolous or irrelevant, including--
(I) by reason of the failure of a consumer to provide sufficient information to investigate the disputed information; or
(II) the submission by a consumer of a dispute that is substantially the same as a dispute previously submitted by or for the consumer, either directly to the person or through a consumer reporting agency under subsection (b), with respect to which the person has already performed the person's duties under this paragraph or subsection (b), as applicable.
(ii) Notice of determination. Upon making any determination under clause (i) that a dispute is frivolous or irrelevant, the person shall notify the consumer of such determination not later than 5 business days after making such determination, by mail or, if authorized by the consumer for that purpose, by any other means available to the person.
(iii) Contents of notice. A notice under clause (ii) shall include--
(I) the reasons for the determination under clause (i); and
(II) identification of any information required to investigate the disputed information, which may consist of a standardized form describing the general nature of such information.
(G) Exclusion of credit repair organizations. This paragraph shall not apply if the notice of the dispute is submitted by, is prepared on behalf of the consumer by, or is submitted on a form supplied to the consumer by, a credit repair organization, as defined in section 403(3), or an entity that would be a credit repair organization, but for section 403(3)(B)(i).
(9) Duty to provide notice of status as medical information furnisher. A person whose primary business is providing medical services, products, or devices, or the person's agent or assignee, who furnishes information to a consumer reporting agency on a consumer shall be considered a medical information furnisher for purposes of this title, and shall notify the agency of such status.
(b) Duties of Furnishers of Information upon Notice of Dispute
(1) In general. After receiving notice pursuant to section 611(a)(2) [§ 1681i] of a dispute with regard to the completeness or accuracy of any information provided by a person to a consumer reporting agency, the person shall
(A) conduct an investigation with respect to the disputed information;
(B) review all relevant information provided by the consumer reporting agency pursuant to section 611(a)(2) [§ 1681i];
(C) report the results of the investigation to the consumer reporting agency;
(D) if the investigation finds that the information is incomplete or inaccurate, report those results to all other consumer reporting agencies to which the person furnished the information and that compile and maintain files on consumers on a nationwide basis; and
(E) if an item of information disputed by a consumer is found to be inaccurate or incomplete or cannot be verified after any reinvestigation under paragraph (1), for purposes of reporting to a consumer reporting agency only, as appropriate, based on the results of the reinvestigation promptly–
(i) modify that item of information;
(ii) delete that item of information; or
(iii) permanently block the reporting of that item of information.
(2) Deadline. A person shall complete all investigations, reviews, and reports required under paragraph (1) regarding information provided by the person to a consumer reporting agency, before the expiration of the period under section 611(a)(1) [§ 1681i] within which the consumer reporting agency is required to complete actions required by that section regarding that information.
(c) Limitation on liability. Except as provided in section 621(c)(1)(B), sections 616 and 617 do not apply to any violation of--
(1) subsection (a) of this section, including any regulations issued thereunder;
(2) subsection (e) of this section, except that nothing in this paragraph shall limit, expand, or otherwise affect liability under section 616 or 617, as applicable, for violations of subsection (b) of this section; or
(3) subsection (e) of section 615.
(d) Limitation on enforcement. The provisions of law described in paragraphs (1) through (3) of subsection (c) (other than with respect to the exception described in paragraph (2) of subsection (c)) shall be enforced exclusively as provided under section 621 by the Federal agencies and officials and the State officials identified in section 621.
(e) Accuracy Guidelines and Regulations Required
(1) Guidelines. The Federal banking agencies, the National Credit Union Administration, and the Commission shall, with respect to the entities that are subject to their respective enforcement authority under section 621, and in coordination as described in paragraph (2)--
(A) establish and maintain guidelines for use by each person that furnishes information to a consumer reporting agency regarding the accuracy and integrity of the information relating to consumers that such entities furnish to consumer reporting agencies, and update such guidelines as often as necessary; and
(B) prescribe regulations requiring each person that furnishes information to a consumer reporting agency to establish reasonable policies and procedures for implementing the guidelines established pursuant to subparagraph (A).
(2) Coordination. Each agency required to prescribe regulations under paragraph (1) shall consult and coordinate with each other such agency so that, to the extent possible, the regulations prescribed by each such entity are consistent and comparable with the regulations prescribed by each other such agency.
(3) Criteria. In developing the guidelines required by paragraph (1)(A), the agencies described in paragraph (1) shall--
(A) identify patterns, practices, and specific forms of activity that can compromise the accuracy and integrity of information furnished to consumer reporting agencies;
(B) review the methods (including technological means) used to furnish information relating to consumers to consumer reporting agencies;
(C) determine whether persons that furnish information to consumer reporting agencies maintain and enforce policies to assure the accuracy and integrity of information furnished to consumer reporting agencies; and
(D) examine the policies and processes that persons that furnish information to consumer reporting agencies employ to conduct reinvestigations and correct inaccurate information relating to consumers that has been furnished to consumer reporting agencies.
(a) Special Rule for Solicitation for Purposes of Marketing
(1) Notice. Any person that receives from another person related to it by common ownership or affiliated by corporate control a communication of information that would be a consumer report, but for clauses (i), (ii), and (iii) of section 603(d)(2)(A), may not use the information to make a solicitation for marketing purposes to a consumer about its products or services, unless--
(A) it is clearly and conspicuously disclosed to the consumer that the information may be communicated among such persons for purposes of making such solicitations to the consumer; and
(B) the consumer is provided an opportunity and a simple method to prohibit the making of such solicitations to the consumer by such person.
(2) Consumer Choice
(A) In general. The notice required under paragraph (1) shall allow the consumer the opportunity to prohibit all solicitations referred to in such paragraph, and may allow the consumer to choose from different options when electing to prohibit the sending of such solicitations, including options regarding the types of entities and information covered, and which methods of delivering solicitations the consumer elects to prohibit.
(B) Format. Notwithstanding subparagraph (A), the notice required under paragraph (1) shall be clear, conspicuous, and concise, and any method provided under paragraph (1)(B) shall be simple. The regulations prescribed to implement this section shall provide specific guidance regarding how to comply with such standards.
(3) Duration
(A) In general. The election of a consumer pursuant to paragraph (1)(B) to prohibit the making of solicitations shall be effective for at least 5 years, beginning on the date on which the person receives the election of the consumer, unless the consumer requests that such election be revoked.
(B) Notice upon expiration of effective period. At such time as the election of a consumer pursuant to paragraph (1)(B) is no longer effective, a person may not use information that the person receives in the manner described in paragraph (1) to make any solicitation for marketing purposes to the consumer, unless the consumer receives a notice and an opportunity, using a simple method, to extend the opt-out for another period of at least 5 years, pursuant to the procedures described in paragraph (1).
(4) Scope. This section shall not apply to a person–
(A) using information to make a solicitation for marketing purposes to a consumer with whom the person has a pre-existing business relationship;
(B) using information to facilitate communications to an individual for whose benefit the person provides employee benefit or other services pursuant to a contract with an employer related to and arising out of the current employment relationship or status of the individual as a participant or beneficiary of an employee benefit plan;
(C) using information to perform services on behalf of another person related by common ownership or affiliated by corporate control, except that this subparagraph shall not be construed as permitting a person to send solicitations on behalf of another person, if such other person would not be permitted to send the solicitation on its own behalf as a result of the election of the consumer to prohibit solicitations under paragraph (1)(B);
(D) using information in response to a communication initiated by the consumer;
(E) using information in response to solicitations authorized or requested by the consumer; or
(F) if compliance with this section by that person would prevent compliance by that person with any provision of State insurance laws pertaining to unfair discrimination in any State in which the person is lawfully doing business.
(5) No retroactivity. This subsection shall not prohibit the use of information to send a solicitation to a consumer if such information was received prior to the date on which persons are required to comply with regulations implementing this subsection.
(b) Notice for other purposes permissible. A notice or other disclosure under this section may be coordinated and consolidated with any other notice required to be issued under any other provision of law by a person that is subject to this section, and a notice or other disclosure that is equivalent to the notice required by subsection (a), and that is provided by a person described in subsection (a) to a consumer together with disclosures required by any other provision of law, shall satisfy the requirements of subsection (a).
(c) User requirements. Requirements with respect to the use by a person of information received from another person related to it by common ownership or affiliated by corporate control, such as the requirements of this section, constitute requirements with respect to the exchange of information among persons affiliated by common ownership or common corporate control, within the meaning of section 625(b)(2).
(d) Definitions. For purposes of this section, the following definitions shall apply:
(1) The term “pre-existing business relationship” means a relationship between a person, or a person's licensed agent, and a consumer, based on--
(A) a financial contract between a person and a consumer which is in force;
(B) the purchase, rental, or lease by the consumer of that person's goods or services, or a financial transaction (including holding an active account or a policy in force or having another continuing relationship) between the consumer and that person during the 18-month period immediately preceding the date on which the consumer is sent a solicitation covered by this section;
(C) an inquiry or application by the consumer regarding a product or service offered by that person, during the 3-month period immediately preceding the date on which the consumer is sent a solicitation covered by this section; or
(D) any other pre-existing customer relationship defined in the regulations implementing this section.
(2) The term “solicitation” means the marketing of a product or service initiated by a person to a particular consumer that is based on an exchange of information described in subsection (a), and is intended to encourage the consumer to purchase such product or service, but does not include communications that are directed at the general public or determined not to be a solicitation by the regulations prescribed under this section.
(a) In general. Except as provided in subsections (b) and (c), this title does not annul, alter, affect, or exempt any person subject to the provisions of this title from complying with the laws of any State with respect to the collection, distribution, or use of any information on consumers, or for the prevention or mitigation of identity theft, except to the extent that those laws are inconsistent with any provision of this title, and then only to the extent of the inconsistency.
(b) General exceptions. No requirement or prohibition may be imposed under the laws of any State
(1) with respect to any subject matter regulated under
(A) subsection (c) or (e) of section 604 [§ 1681b], relating to the prescreening of consumer reports;
(B) section 611 [§ 1681i], relating to the time by which a consumer reporting agency must take any action, including the provision of notification to a consumer or other person, in any procedure related to the disputed accuracy of information in a consumer's file, except that this subparagraph shall not apply to any State law in effect on the date of enactment of the Consumer Credit Reporting Reform Act of 1996;
(C) subsections (a) and (b) of section 615 [§ 1681m], relating to the duties of a person who takes any adverse action with respect to a consumer;
(D) section 615(d) [§ 1681m], relating to the duties of persons who use a consumer report of a consumer in connection with any credit or insurance transaction that is not initiated by the consumer and that consists of a firm offer of credit or insurance;
(E) section 605 [§ 1681c], relating to information contained in consumer reports, except that this subparagraph shall not apply to any State law in effect on the date of enactment of the Consumer Credit Reporting Reform Act of 1996;
(F) section 623 [§ 1681s-2], relating to the responsibilities of persons who furnish information to consumer reporting agencies, except that this paragraph shall not apply
(i) with respect to section 54A(a) of chapter 93 of the Massachusetts Annotated Laws (as in effect on the date of enactment of the Consumer Credit Reporting Reform Act of 1996); or
(ii) with respect to section 1785.25(a) of the California Civil Code (as in effect on the date of enactment of the Consumer Credit Reporting Reform Act of 1996);
(G) section 609(e), relating to information available to victims under section 609(e);
(H) section 624, relating to the exchange and use of information to make a solicitation for marketing purposes; or
(I) section 615(h), relating to the duties of users of consumer reports to provide notice with respect to terms in certain credit transactions;
(2) with respect to the exchange of information among persons affiliated by common ownership or common corporate control, except that this paragraph shall not apply with respect to subsection (a) or (c)(1) of section 2480e of title 9, Vermont Statutes Annotated (as in effect on the date of enactment of the Consumer Credit Reporting Reform Act of 1996);
(3) with respect to the disclosures required to be made under subsection (c), (d), (e), or (g) of section 609, or subsection (f) of section 609 relating to the disclosure of credit scores for credit granting purposes, except that this paragraph--
(A) shall not apply with respect to sections 1785.10, 1785.16, and 1785.20.2 of the California Civil Code (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003) and section 1785.15 through section 1785.15.2 of such Code (as in effect on such date);
(B) shall not apply with respect to sections 5-3-106(2) and 212-14.3-104.3 of the Colorado Revised Statutes (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003); and
(C) shall not be construed as limiting, annulling, affecting, or superseding any provision of the laws of any State regulating the use in an insurance activity, or regulating disclosures concerning such use, of a credit-based insurance score of a consumer by any person engaged in the business of insurance;
(4) with respect to the frequency of any disclosure under section 612(a), except that this paragraph shall not apply–
(A) with respect to section 12-14.3-105(1)(d) of the Colorado Revised Statutes (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003);
(B) with respect to section 10-1-393(29)(C) of the Georgia Code (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003);
(C) with respect to section 1316.2 of title 10 of the Maine Revised Statutes (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003);
(D) with respect to sections 14-1209(a)(1) and 14-1209(b)(1)(i) of the Commercial Law Article of the Code of Maryland (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003);
(E) with respect to section 59(d) and section 59(e) of chapter 93 of the General Laws of Massachusetts (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003);
(F) with respect to section 56:11-37.10(a)(1) of the New Jersey Revised Statutes (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003); or
(G) with respect to section 2480c(a)(1) of title 9 of the Vermont Statutes Annotated (as in effect on the date of enactment of the Fair and Accurate Credit Transactions Act of 2003); or
(5) with respect to the conduct required by the specific provisions of--
(A) section 605(g);
(B) section 605A;
(C) section 605B;
(D) section 609(a)(1)(A);
(E) section 612(a);
(F) subsections (e), (f), and (g) of section 615;
(G) section 621(f);
(H) section 623(a)(6); or
(I) section 628.
(c) Definition of firm offer of credit or insurance. Notwithstanding any definition of the term “firm offer of credit or insurance” (or any equivalent term) under the laws of any State, the definition of that term contained in section 603(l) [§ 1681a] shall be construed to apply in the enforcement and interpretation of the laws of any State governing consumer reports.
(d) Limitations. Subsections (b) and (c) do not affect any settlement, agreement, or consent judgment between any State Attorney General and any consumer reporting agency in effect on the date of enactment of the Consumer Credit Reporting Reform Act of 1996.
(a) Identity of financial institutions. Notwithstanding section 604 [§ 1681b] or any other provision of this title, a consumer reporting agency shall furnish to the Federal Bureau of Investigation the names and addresses of all financial institutions (as that term is defined in section 1101 of the Right to Financial Privacy Act of 1978 [12 U.S.C. § 3401]) at which a consumer maintains or has maintained an account, to the extent that information is in the files of the agency, when presented with a written request for that information, signed by the Director of the Federal Bureau of Investigation, or the Director's designee in a position not lower than Deputy Assistant Director at Bureau headquarters or a Special Agent in Charge of a Bureau field office designated by the Director, which certifies compliance with this section. The Director or the Director's designee may make such a certification only if the Director or the Director's designee has determined in writing, that such information is sought for the conduct of an authorized investigation to protect against international terrorism or clandestine intelligence activities, provided that such an investigation of a United States person is not conducted solely upon the basis of activities protected by the first amendment to the Constitution of the United States.
(b) Identifying information. Notwithstanding the provisions of section 604 [§ 1681b] or any other provision of this title, a consumer reporting agency shall furnish identifying information respecting a consumer, limited to name, address, former addresses, places of employment, or former places of employment, to the Federal Bureau of Investigation when presented with a written request, signed by the Director or the Director's designee, which certifies compliance with this subsection. The Director or the Director's designee in a position not lower than Deputy Assistant Director at Bureau headquarters or a Special Agent in Charge of a Bureau field office designated by the Director may make such a certification only if the Director or the Director's designee has determined in writing that such information is sought for the conduct of an authorized investigation to protect against international terrorism or clandestine intelligence activities, provided that such an investigation of a United States person is not conducted solely upon the basis of activities protected by the first amendment to the Constitution of the United States.
(c) Court order for disclosure of consumer reports. Notwithstanding section 604 [§ 1681b] or any other provision of this title, if requested in writing by the Director of the Federal Bureau of Investigation, or a designee of the Director in a position not lower than Deputy Assistant Director at Bureau headquarters or a Special Agent in Charge of a Bureau field office designated by the Director, a court may issue an order ex parte directing a consumer reporting agency to furnish a consumer report to the Federal Bureau of Investigation, upon a showing in camera that the consumer report is sought for the conduct of an authorized investigation to protect against international terrorism or clandestine intelligence activities, provided that such an investigation of a United States person is not conducted solely upon the basis of activities protected by the first amendment to the Constitution of the United States. The terms of an order issued under this subsection shall not disclose that the order is issued for purposes of a counterintelligence investigation.
(d) Confidentiality. No consumer reporting agency or officer, employee, or agent of a consumer reporting agency shall disclose to any person, other than those officers, employees, or agents of a consumer reporting agency necessary to fulfill the requirement to disclose information to the Federal Bureau of Investigation under this section, that the Federal Bureau of Investigation has sought or obtained the identity of financial institutions or a consumer report respecting any consumer under subsection (a), (b), or (c), and no consumer reporting agency or officer, employee, or agent of a consumer reporting agency shall include in any consumer report any information that would indicate that the Federal Bureau of Investigation has sought or obtained such information or a consumer report.
(e) Payment of fees. The Federal Bureau of Investigation shall, subject to the availability of appropriations, pay to the consumer reporting agency assembling or providing report or information in accordance with procedures established under this section a fee for reimbursement for such costs as are reasonably necessary and which have been directly incurred in searching, reproducing, or transporting books, papers, records, or other data required or requested to be produced under this section.
(f) Limit on dissemination. The Federal Bureau of Investigation may not disseminate information obtained pursuant to this section outside of the Federal Bureau of Investigation, except to other Federal agencies as may be necessary for the approval or conduct of a foreign counterintelligence investigation, or, where the information concerns a person subject to the Uniform Code of Military Justice, to appropriate investigative authorities within the military department concerned as may be necessary for the conduct of a joint foreign counterintelligence investigation.
(g) Rules of construction. Nothing in this section shall be construed to prohibit information from being furnished by the Federal Bureau of Investigation pursuant to a subpoena or court order, in connection with a judicial or administrative proceeding to enforce the provisions of this Act. Nothing in this section shall be construed to authorize or permit the withholding of information from the Congress.
(h) Reports to Congress. On a semiannual basis, the Attorney General shall fully inform the Permanent Select Committee on Intelligence and the Committee on Banking, Finance and Urban Affairs of the House of Representatives, and the Select Committee on Intelligence and the Committee on Banking, Housing, and Urban Affairs of the Senate concerning all requests made pursuant to subsections (a), (b), and (c).
(i) Damages. Any agency or department of the United States obtaining or disclosing any consumer reports, records, or information contained therein in violation of this section is liable to the consumer to whom such consumer reports, records, or information relate in an amount equal to the sum of
(1) $100, without regard to the volume of consumer reports, records, or information involved;
(2) any actual damages sustained by the consumer as a result of the disclosure;
(3) if the violation is found to have been willful or intentional, such punitive damages as a court may allow; and
(4) in the case of any successful action to enforce liability under this subsection, the costs of the action, together with reasonable attorney fees, as determined by the court.
(j) Disciplinary actions for violations. If a court determines that any agency or department of the United States has violated any provision of this section and the court finds that the circumstances surrounding the violation raise questions of whether or not an officer or employee of the agency or department acted willfully or intentionally with respect to the violation, the agency or department shall promptly initiate a proceeding to determine whether or not disciplinary action is warranted against the officer or employee who was responsible for the violation.
(k) Good-faith exception. Notwithstanding any other provision of this title, any consumer reporting agency or agent or employee thereof making disclosure of consumer reports or identifying information pursuant to this subsection in good-faith reliance upon a certification of the Federal Bureau of Investigation pursuant to provisions of this section shall not be liable to any person for such disclosure under this title, the constitution of any State, or any law or regulation of any State or any political subdivision of any State.
(l) Limitation of remedies. Notwithstanding any other provision of this title, the remedies and sanctions set forth in this section shall be the only judicial remedies and sanctions for violation of this section.
(m) Injunctive relief. In addition to any other remedy contained in this section, injunctive relief shall be available to require compliance with the procedures of this section. In the event of any successful action under this subsection, costs together with reasonable attorney fees, as determined by the court, may be recovered.
(a) Disclosure. Notwithstanding section 604 or any other provision of this title, a consumer reporting agency shall furnish a consumer report of a consumer and all other information in a consumer's file to a government agency authorized to conduct investigations of, or intelligence or counterintelligence activities or analysis related to, international terrorism when presented with a written certification by such government agency that such information is necessary for the agency's conduct or such investigation, activity or analysis.
(b) Form of certification. The certification described in subsection (a) shall be signed by a supervisory official designated by the head of a Federal agency or an officer of a Federal agency whose appointment to office is required to be made by the President, by and with the advice and consent of the Senate.
(c) Confidentiality. No consumer reporting agency, or officer, employee, or agent of such consumer reporting agency, shall disclose to any person, or specify in any consumer report, that a government agency has sought or obtained access to information under subsection (a).
(d) Rule of construction. Nothing in section 626 shall be construed to limit the authority of the Director of the Federal Bureau of Investigation under this section.
(e) Safe harbor. Notwithstanding any other provision of this title, any consumer reporting agency or agent or employee thereof making disclosure of consumer reports or other information pursuant to this section in good-faith reliance upon a certification of a governmental agency pursuant to the provisions of this section shall not be liable to any person for such disclosure under this subchapter, the constitution of any State, or any law or regulation of any State or any political subdivision of any State.
(a) Regulations
(1) In general. Not later than 1 year after the date of enactment of this section, the Federal banking agencies, the National Credit Union Administration, and the Commission with respect to the entities that are subject to their respective enforcement authority under section 621, and the Securities and Exchange Commission, and in coordination as described in paragraph (2), shall issue final regulations requiring any person that maintains or otherwise possesses consumer information, or any compilation of consumer information, derived from consumer reports for a business purpose to properly dispose of any such information or compilation.
(2) Coordination. Each agency required to prescribe regulations under paragraph (1) shall–
(A) consult and coordinate with each other such agency so that, to the extent possible, the regulations prescribed by each such agency are consistent and comparable with the regulations by each such other agency; and
(B) ensure that such regulations are consistent with the requirements and regulations issued pursuant to Public Law 106-102 and other provisions of Federal law.
(3) Exemption authority. In issuing regulations under this section, the Federal banking agencies, the National Credit Union Administration, the Commission, and the Securities and Exchange Commission may exempt any person or class of persons from application of those regulations, as such agency deems appropriate to carry out the purpose of this section.
(b) Rule of construction. Nothing in this section shall be construed--
(1) to require a person to maintain or destroy any record pertaining to a consumer that is not imposed under other law; or
(2) to alter or affect any requirement imposed under any other provision of law to maintain or destroy such a record.
The Commission shall prescribe regulations, to become effective not later than 90 days after the date of enactment of this section, to prevent a consumer reporting agency from circumventing or evading treatment as a consumer reporting agency described in section 603(p) for purposes of this title, including--
(1) by means of a corporate reorganization or restructuring, including a merger, acquisition, dissolution, divestiture, or asset sale of a consumer reporting agency; or
(2) by maintaining or merging public record and credit account information in a manner that is substantially equivalent to that described in paragraphs (1) and (2) of section 603(p), in the manner described in section 603(p).
See also 16 CFR Part 611
69 Fed. Reg. 8531 (02/24/04)
69 Fed. Reg. 29061 (05/20/04)
Legislative History
House Reports: No. 91-975 (Comm. on Banking and Currency) and
No. 91-1587 (Comm. of Conference)
Senate Reports: No. 91-1139 accompanying S. 3678 (Comm. on Banking and Currency)
Congressional Record, Vol. 116 (1970)
May 25, considered and passed House.
Sept. 18, considered and passed Senate, amended.
Oct. 9, Senate agreed to conference report.
Oct. 13, House agreed to conference report.
Enactment: Public Law No. 91-508 (October 26, 1970):
Amendments: Public Law Nos. 95-473 (October 17, 1978)
95-598 (November 6, 1978)
98-443 (October 4, 1984)
101-73 (August 9, 1989)
102-242 (December 19, 1991)
102-537 (October 27, 1992)
102-550 (October 28, 1992)
103-325 (September 23, 1994)
104-88 (December 29, 1995)
104-93 (January 6, 1996)
104-193 (August 22, 1996)
104-208 (September 30, 1996)
105-107 (November 20, 1997)
105-347 (November 2, 1998)
106-102 (November 12, 1999)
107-56 (October 26, 2001)
108-159 (December 4, 2003)
|
