|
|
|
1
|
A bill to be entitled |
2
|
An act relating to consumer credit reports; providing |
3
|
definitions; authorizing consumers to place security |
4
|
alerts on credit reports; providing requirements and |
5
|
procedures; providing duties of consumer credit reporting |
6
|
agencies; authorizing consumers to place security freezes |
7
|
on credit reports; providing criteria, requirements, and |
8
|
procedures; providing duties of consumer credit reporting |
9
|
agencies; providing exceptions; authorizing consumer |
10
|
credit reporting agencies to charge a reasonable fee; |
11
|
providing an effective date. |
12
|
|
13
|
Be It Enacted by the Legislature of the State of Florida: |
14
|
|
15
|
Section 1. (1) DEFINITIONS.--For purposes of this |
16
|
section, the term:
|
17
|
(a) "Consumer credit reporting agency" means a credit |
18
|
reporting agency regulated under 15 U.S.C. ss. 1681 et seq. |
19
|
(b) "Security alert" means a notice placed in a consumer's |
20
|
credit report, at the request of the consumer, that notifies a |
21
|
recipient of the credit report that the consumer's identity may |
22
|
have been used without the consumer's consent to fraudulently |
23
|
obtain goods or services in the consumer's name.
|
24
|
(c) "Security freeze" means a notice placed in a |
25
|
consumer's credit report, at the request of the consumer and |
26
|
subject to certain exceptions, that prohibits the consumer |
27
|
credit reporting agency from releasing the consumer's credit |
28
|
report or any information from it without the express |
29
|
authorization of the consumer.
|
30
|
(2) SECURITY ALERT PLACEMENT BY CONSUMER; ACCEPTANCE OF |
31
|
SECURITY ALERT BY CONSUMER CREDIT REPORTING AGENCY; TIME IN |
32
|
EFFECT.--
|
33
|
(a) A consumer may elect to place a security alert in his |
34
|
or her credit report by making a request in writing or by |
35
|
telephone to a consumer credit reporting agency.
|
36
|
(b) A consumer credit reporting agency shall notify each |
37
|
person requesting consumer credit information with respect to a |
38
|
consumer of the existence of a security alert in the credit |
39
|
report of that consumer, regardless of whether a full credit |
40
|
report, credit score, or summary report is requested.
|
41
|
(c) Each consumer credit reporting agency in this state |
42
|
shall maintain a toll-free telephone number to accept security |
43
|
alert requests from consumers 24 hours a day, 7 days a week.
|
44
|
(d) A consumer credit reporting agency shall place a |
45
|
security alert on a consumer's credit report no later than 5 |
46
|
business days after receiving a request from the consumer.
|
47
|
(e) The security alert shall remain in place for at least |
48
|
90 days, and a consumer shall have the right to request a |
49
|
renewal of the security alert.
|
50
|
(3) SECURITY FREEZE BY CONSUMER CREDIT REPORTING AGENCY; |
51
|
TIME IN EFFECT; REASONABLE FEE; AGENCY DUTIES.--
|
52
|
(a)1. A consumer may elect to place a security freeze on |
53
|
his or her credit report by making a request in writing by |
54
|
certified mail to a consumer credit reporting agency. If a |
55
|
security freeze is in place, information from a consumer's |
56
|
credit report may not be released to a third party without prior |
57
|
express authorization from the consumer. This subparagraph does |
58
|
not prevent a consumer credit reporting agency from advising a |
59
|
third party that a security freeze is in effect with respect to |
60
|
the consumer's credit report.
|
61
|
2. A consumer credit reporting agency shall place a |
62
|
security freeze on a consumer's credit report no later than 5 |
63
|
business days after receiving a written request from the |
64
|
consumer.
|
65
|
3. The consumer credit reporting agency shall send a |
66
|
written confirmation of the security freeze to the consumer |
67
|
within 10 business days and shall provide the consumer with a |
68
|
unique personal identification number or password to be used by |
69
|
the consumer when providing authorization for the release of his |
70
|
or her credit report for a specific party or period of time.
|
71
|
4. If the consumer wishes to allow his or her credit |
72
|
report to be accessed for a specific party or period of time |
73
|
while a freeze is in place, the consumer shall contact the |
74
|
consumer credit reporting agency, request that the freeze be |
75
|
temporarily lifted, and provide the following:
|
76
|
a. Proper identification sufficient to identify the |
77
|
consumer.
|
78
|
b. The unique personal identification number or password |
79
|
provided by the consumer credit reporting agency pursuant to |
80
|
subparagraph 3.
|
81
|
c. Proper identification regarding the third party who is |
82
|
to receive the credit report or the time period for which the |
83
|
report shall be available to users of the credit report.
|
84
|
5. A consumer credit reporting agency that receives a |
85
|
request from a consumer to temporarily lift a freeze on a credit |
86
|
report pursuant to subparagraph 4. shall comply with the request |
87
|
no later than 3 business days after receiving the request.
|
88
|
6. A consumer credit reporting agency may develop |
89
|
procedures involving the use of telephone, fax, the Internet, or |
90
|
other electronic media to receive and process a request from a |
91
|
consumer to temporarily lift a freeze on a credit report |
92
|
pursuant to subparagraph 4. in an expedited manner.
|
93
|
7. A consumer credit reporting agency shall remove or |
94
|
temporarily lift a freeze placed on a consumer's credit report |
95
|
only:
|
96
|
a. Upon a consumer’s request, pursuant to subparagraph 4. |
97
|
or subparagraph 10.; or
|
98
|
b. If the consumer's credit report was frozen due to a |
99
|
material misrepresentation of fact by the consumer.
|
100
|
|
101
|
If a consumer credit reporting agency intends to remove a freeze |
102
|
upon a consumer's credit report pursuant to this subparagraph, |
103
|
the consumer credit reporting agency shall notify the consumer |
104
|
in writing prior to removing the freeze on the consumer's credit |
105
|
report.
|
106
|
8. If a third party requests access to a consumer credit |
107
|
report on which a security freeze is in effect, and this request |
108
|
is in connection with an application for credit or any other |
109
|
use, and the consumer does not allow his or her credit report to |
110
|
be accessed for that specific party or period of time, the third |
111
|
party may treat the application as incomplete.
|
112
|
9. If a consumer requests a security freeze, the consumer |
113
|
credit reporting agency shall disclose the process of placing |
114
|
and temporarily lifting a freeze and the process for allowing |
115
|
access to information from the consumer's credit report for a |
116
|
specific party or period of time while the freeze is in place.
|
117
|
10. A security freeze shall remain in place until the |
118
|
consumer requests that the security freeze be removed. A |
119
|
consumer credit reporting agency shall remove a security freeze |
120
|
within 3 business days after receiving a request for removal |
121
|
from the consumer, who provides:
|
122
|
a. Proper identification sufficient to identify the |
123
|
consumer.
|
124
|
b. The unique personal identification number or password |
125
|
provided by the consumer credit reporting agency pursuant to |
126
|
subparagraph 3.
|
127
|
11. A consumer credit reporting agency shall require |
128
|
proper identification sufficient to identify a person who makes |
129
|
a request to place or remove a security freeze.
|
130
|
12. The provisions of this paragraph do not apply to the |
131
|
use of a consumer credit report by:
|
132
|
a. A person or entity, or a subsidiary, affiliate, or |
133
|
agent of that person or entity, or an assignee of a financial |
134
|
obligation owing by the consumer to that person or entity, or a |
135
|
prospective assignee of a financial obligation owing by the |
136
|
consumer to that person or entity in conjunction with the |
137
|
proposed purchase of the financial obligation, with which the |
138
|
consumer has or had prior to assignment an account or contract, |
139
|
including a demand deposit account, or to whom the consumer |
140
|
issued a negotiable instrument, for the purposes of reviewing |
141
|
the account or collecting the financial obligation owing for the |
142
|
account, contract, or negotiable instrument. For purposes of |
143
|
this sub-subparagraph, the term "reviewing the account" includes |
144
|
activities related to account maintenance, monitoring, credit |
145
|
line increases, and account upgrades and enhancements.
|
146
|
b. A subsidiary, affiliate, agent, assignee, or |
147
|
prospective assignee of a person to whom access has been granted |
148
|
under subparagraph 4. for purposes of facilitating the extension |
149
|
of credit or other permissible use.
|
150
|
c. Any state or local agency, law enforcement agency, |
151
|
trial court, or private collection agency acting pursuant to a |
152
|
court order, warrant, or subpoena.
|
153
|
d. A child support agency acting pursuant to chapter 61, |
154
|
Florida Statutes, or Title IV-D of the Social Security Act, 42 |
155
|
U.S.C. ss 651 et seq.
|
156
|
e. The Department of Health or the Department of Children |
157
|
and Family Services or its agents or assigns acting to |
158
|
investigate fraud.
|
159
|
f. The Department of Revenue or its agents or assigns |
160
|
acting to investigate or collect delinquent taxes or unpaid |
161
|
court orders or to fulfill any of its other statutory |
162
|
responsibilities.
|
163
|
g. The use of credit information for the purposes of |
164
|
prescreening as provided for by the federal Fair Credit |
165
|
Reporting Act.
|
166
|
h. Any person or entity administering a credit file |
167
|
monitoring subscription service to which the consumer has |
168
|
subscribed.
|
169
|
i. Any person or entity for the purpose of providing a |
170
|
consumer with a copy of the consumer’s credit report upon the |
171
|
consumer's request.
|
172
|
13. This paragraph does not prevent a consumer credit |
173
|
reporting agency from charging a reasonable fee to a consumer |
174
|
who elects to freeze, remove the freeze, or temporarily lift the |
175
|
freeze regarding access to a consumer credit report, except that |
176
|
a consumer credit reporting agency may not charge a fee to a |
177
|
victim of identity theft who has submitted a valid police report |
178
|
or valid Department of Highway Safety and Motor Vehicles |
179
|
investigative report that alleges a violation of this paragraph.
|
180
|
(b)1. If a security freeze is in place, a consumer credit |
181
|
reporting agency shall not change the consumer’s name, date of |
182
|
birth, social security number, or address in a consumer credit |
183
|
report without sending a written confirmation of the change to |
184
|
the consumer within 30 days after the change is posted to the |
185
|
consumer's file. Written confirmation is not required for |
186
|
technical modifications of a consumer's official information, |
187
|
including, but not limited to, name and street abbreviations, |
188
|
complete spellings, or transposition of numbers or letters. In |
189
|
the case of an address change, the written confirmation shall be |
190
|
sent to the consumer’s new address and the consumer’s former |
191
|
address.
|
192
|
2. If a consumer has placed a security alert on his or her |
193
|
credit report, a consumer credit reporting agency shall provide |
194
|
the consumer, upon request, with a free copy of his or her |
195
|
credit report at the time the 90-day security alert period |
196
|
expires. |
197
|
Section 2. This act shall take effect upon becoming a law. |