§ 1681g. Disclosures to consumers
(a)
Information on file; sources; report recipients
Every consumer reporting agency shall, upon request, and subject to section
1681h
(a)(1) of this title, clearly and accurately disclose to the consumer:
(1)
All information in the consumer’s file at the time of the request, except that—
(A)
if the consumer to whom the file relates requests that the first 5 digits of the social security number (or similar identification number) of the consumer not be included in the disclosure and the consumer reporting agency has received appropriate proof of the identity of the requester, the consumer reporting agency shall so truncate such number in such disclosure; and
(2)
The sources of the information; except that the sources of information acquired solely for use in preparing an investigative consumer report and actually used for no other purpose need not be disclosed: Provided, That in the event an action is brought under this subchapter, such sources shall be available to the plaintiff under appropriate discovery procedures in the court in which the action is brought.
(3)
(A)
Identification of each person (including each end-user identified under section
1681e
(e)(1) of this title) that procured a consumer report—
(B)
An identification of a person under subparagraph (A) shall include—
(C)
Subparagraph (A) does not apply if—
(i)
the end user is an agency or department of the United States Government that procures the report from the person for purposes of determining the eligibility of the consumer to whom the report relates to receive access or continued access to classified information (as defined in section
1681b
(b)(4)(E)(i) [1] of this title); and
(4)
The dates, original payees, and amounts of any checks upon which is based any adverse characterization of the consumer, included in the file at the time of the disclosure.
(b)
Exempt information
The requirements of subsection (a) of this section respecting the disclosure of sources of information and the recipients of consumer reports do not apply to information received or consumer reports furnished prior to the effective date of this subchapter except to the extent that the matter involved is contained in the files of the consumer reporting agency on that date.
(c)
Summary of rights to obtain and dispute information in consumer reports and to obtain credit scores
(1)
Commission summary of rights required
(A)
In general
The Commission shall prepare a model summary of the rights of consumers under this subchapter.
(B)
Content of summary
The summary of rights prepared under subparagraph (A) shall include a description of—
(i)
the right of a consumer to obtain a copy of a consumer report under subsection (a) of this section from each consumer reporting agency;
(ii)
the frequency and circumstances under which a consumer is entitled to receive a consumer report without charge under section
1681j of this title;
(iii)
the right of a consumer to dispute information in the file of the consumer under section
1681i of this title;
(iv)
the right of a consumer to obtain a credit score from a consumer reporting agency, and a description of how to obtain a credit score;
(v)
the method by which a consumer can contact, and obtain a consumer report from, a consumer reporting agency without charge, as provided in the regulations of the Commission prescribed under section 211(c) [1] of the Fair and Accurate Credit Transactions Act of 2003; and
(2)
Summary of rights required to be included with agency disclosures
A consumer reporting agency shall provide to a consumer, with each written disclosure by the agency to the consumer under this section—
(B)
in the case of a consumer reporting agency described in section
1681a
(p) of this title, a toll-free telephone number established by the agency, at which personnel are accessible to consumers during normal business hours;
(C)
a list of all Federal agencies responsible for enforcing any provision of this subchapter, and the address and any appropriate phone number of each such agency, in a form that will assist the consumer in selecting the appropriate agency;
(D)
a statement that the consumer may have additional rights under State law, and that the consumer may wish to contact a State or local consumer protection agency or a State attorney general (or the equivalent thereof) to learn of those rights; and
(E)
a statement that a consumer reporting agency is not required to remove accurate derogatory information from the file of a consumer, unless the information is outdated under section
1681c of this title or cannot be verified.
(d)
Summary of rights of identity theft victims
(1)
In general
The Commission, in consultation with the Federal banking agencies and the National Credit Union Administration, shall prepare a model summary of the rights of consumers under this subchapter with respect to the procedures for remedying the effects of fraud or identity theft involving credit, an electronic fund transfer, or an account or transaction at or with a financial institution or other creditor.
(2)
Summary of rights and contact information
Beginning 60 days after the date on which the model summary of rights is prescribed in final form by the Commission pursuant to paragraph (1), if any consumer contacts a consumer reporting agency and expresses a belief that the consumer is a victim of fraud or identity theft involving credit, an electronic fund transfer, or an account or transaction at or with a financial institution or other creditor, the consumer reporting agency shall, in addition to any other action that the agency may take, provide the consumer with a summary of rights that contains all of the information required by the Commission under paragraph (1), and information on how to contact the Commission to obtain more detailed information.
(e)
Information available to victims
(1)
In general
For the purpose of documenting fraudulent transactions resulting from identity theft, not later than 30 days after the date of receipt of a request from a victim in accordance with paragraph (3), and subject to verification of the identity of the victim and the claim of identity theft in accordance with paragraph (2), a business entity that has provided credit to, provided for consideration products, goods, or services to, accepted payment from, or otherwise entered into a commercial transaction for consideration with, a person who has allegedly made unauthorized use of the means of identification of the victim, shall provide a copy of application and business transaction records in the control of the business entity, whether maintained by the business entity or by another person on behalf of the business entity, evidencing any transaction alleged to be a result of identity theft to—
(2)
Verification of identity and claim
Before a business entity provides any information under paragraph (1), unless the business entity, at its discretion, otherwise has a high degree of confidence that it knows the identity of the victim making a request under paragraph (1), the victim shall provide to the business entity—
(A)
as proof of positive identification of the victim, at the election of the business entity—
(3)
Procedures
The request of a victim under paragraph (1) shall—
(4)
No charge to victim
Information required to be provided under paragraph (1) shall be so provided without charge.
(5)
Authority to decline to provide information
A business entity may decline to provide information under paragraph (1) if, in the exercise of good faith, the business entity determines that—
(B)
after reviewing the information provided pursuant to paragraph (2), the business entity does not have a high degree of confidence in knowing the true identity of the individual requesting the information;
(7)
Limitation on civil liability
No business entity may be held civilly liable under any provision of Federal, State, or other law for disclosure, made in good faith pursuant to this subsection.
(8)
No new recordkeeping obligation
Nothing in this subsection creates an obligation on the part of a business entity to obtain, retain, or maintain information or records that are not otherwise required to be obtained, retained, or maintained in the ordinary course of its business or under other applicable law.
(9)
Rule of construction
(B)
Limitation
Except as provided in subparagraph (A), nothing in this subsection permits a business entity to disclose information, including information to law enforcement under subparagraphs (B) and (C) of paragraph (1), that the business entity is otherwise prohibited from disclosing under any other applicable provision of Federal or State law.
(10)
Affirmative defense
In any civil action brought to enforce this subsection, it is an affirmative defense (which the defendant must establish by a preponderance of the evidence) for a business entity to file an affidavit or answer stating that—
(11)
Definition of victim
For purposes of this subsection, the term “victim” means a consumer whose means of identification or financial information has been used or transferred (or has been alleged to have been used or transferred) without the authority of that consumer, with the intent to commit, or to aid or abet, an identity theft or a similar crime.
(f)
Disclosure of credit scores
(1)
In general
Upon the request of a consumer for a credit score, a consumer reporting agency shall supply to the consumer a statement indicating that the information and credit scoring model may be different than the credit score that may be used by the lender, and a notice which shall include—
(A)
the current credit score of the consumer or the most recent credit score of the consumer that was previously calculated by the credit reporting agency for a purpose related to the extension of credit;
(2)
Definitions
For purposes of this subsection, the following definitions shall apply:
(A)
Credit score
The term “credit score”—
(i)
means a numerical value or a categorization derived from a statistical tool or modeling system used by a person who makes or arranges a loan to predict the likelihood of certain credit behaviors, including default (and the numerical value or the categorization derived from such analysis may also be referred to as a “risk predictor” or “risk score”); and
(3)
Timeframe and manner of disclosure
The information required by this subsection shall be provided in the same timeframe and manner as the information described in subsection (a) of this section.
(4)
Applicability to certain uses
This subsection shall not be construed so as to compel a consumer reporting agency to develop or disclose a score if the agency does not—
(5)
Applicability to credit scores developed by another person
(A)
In general
This subsection shall not be construed to require a consumer reporting agency that distributes credit scores developed by another person or entity to provide a further explanation of them, or to process a dispute arising pursuant to section
1681i of this title, except that the consumer reporting agency shall provide the consumer with the name and address and website for contacting the person or entity who developed the score or developed the methodology of the score.
(6)
Maintenance of credit scores not required
This subsection shall not be construed to require a consumer reporting agency to maintain credit scores in its files.
(7)
Compliance in certain cases
In complying with this subsection, a consumer reporting agency shall—
(A)
supply the consumer with a credit score that is derived from a credit scoring model that is widely distributed to users by that consumer reporting agency in connection with residential real property loans or with a credit score that assists the consumer in understanding the credit scoring assessment of the credit behavior of the consumer and predictions about the future credit behavior of the consumer; and
(8)
Fair and reasonable fee
A consumer reporting agency may charge a fair and reasonable fee, as determined by the Commission, for providing the information required under this subsection.
(9)
Use of enquiries as a key factor
If a key factor that adversely affects the credit score of a consumer consists of the number of enquiries made with respect to a consumer report, that factor shall be included in the disclosure pursuant to paragraph (1)(C) without regard to the numerical limitation in such paragraph.
(g)
Disclosure of credit scores by certain mortgage lenders
(1)
In general
Any person who makes or arranges loans and who uses a consumer credit score, as defined in subsection (f) of this section, in connection with an application initiated or sought by a consumer for a closed end loan or the establishment of an open end loan for a consumer purpose that is secured by 1 to 4 units of residential real property (hereafter in this subsection referred to as the “lender”) shall provide the following to the consumer as soon as reasonably practicable:
(A)
Information required under subsection (f)
(B)
Disclosures in case of automated underwriting system
(i)
In general
If a person that is subject to this subsection uses an automated underwriting system to underwrite a loan, that person may satisfy the obligation to provide a credit score by disclosing a credit score and associated key factors supplied by a consumer reporting agency.
(C)
Disclosures of credit scores not obtained from a consumer reporting agency
A person that is subject to the provisions of this subsection and that uses a credit score, other than a credit score provided by a consumer reporting agency, may satisfy the obligation to provide a credit score by disclosing a credit score and associated key factors supplied by a consumer reporting agency.
(D)
Notice to home loan applicants
A copy of the following notice, which shall include the name, address, and telephone number of each consumer reporting agency providing a credit score that was used:
“notice to the home loan applicant
“In connection with your application for a home loan, the lender must disclose to you the score that a consumer reporting agency distributed to users and the lender used in connection with your home loan, and the key factors affecting your credit scores.
“The credit score is a computer generated summary calculated at the time of the request and based on information that a consumer reporting agency or lender has on file. The scores are based on data about your credit history and payment patterns. Credit scores are important because they are used to assist the lender in determining whether you will obtain a loan. They may also be used to determine what interest rate you may be offered on the mortgage. Credit scores can change over time, depending on your conduct, how your credit history and payment patterns change, and how credit scoring technologies change.
“Because the score is based on information in your credit history, it is very important that you review the credit-related information that is being furnished to make sure it is accurate. Credit records may vary from one company to another.
“If you have questions about your credit score or the credit information that is furnished to you, contact the consumer reporting agency at the address and telephone number provided with this notice, or contact the lender, if the lender developed or generated the credit score. The consumer reporting agency plays no part in the decision to take any action on the loan application and is unable to provide you with specific reasons for the decision on a loan application.
“If you have questions concerning the terms of the loan, contact the lender.”.
(E)
Actions not required under this subsection
This subsection shall not require any person to—
(ii)
disclose any information other than a credit score or key factors, as defined in subsection (f) of this section;
[1] See References in Text note below.
[2] So in original. The word “an” probably should not appear.