�鶹��ý

INTRODUCTION

ACCURACY

• Guidelines for Policies and Procedures
• Correct and Update Information
• Furnishing Specific Items

DISPUTES

• Disputes to CRAs
• Disputes to Furnishers

ADDITIONAL RESPONSIBILITIES

• Victims of Identity Theft
• Disposing of Consumer Report Information
• Address Discrepancies

NON-COMPLIANCE

INTRODUCTION

The Fair Credit Reporting Act (FCRA) is designed to protect the privacy of consumer report information — sometimes informally called “credit reports” — and to guarantee that information supplied by consumer reporting agencies (CRAs) is as accurate as possible.

If you report information about consumers to a CRA — like a credit bureau, tenant screening company, check verification service, or a medical information service — you have legal obligations under the FCRA’s Furnisher Rule. Your responsibilities include:

• furnishing information that is accurate and complete, and
• investigating consumer disputes about the accuracy of information you provide.

The �鶹��ý Trade Commission, the Consumer Financial Protection Bureau, and the federal banking agencies have each published a Furnisher Rule. The rules are identical in substance. The is summarized here. If you are not subject to the FTC’s jurisdiction, contact your regulator about your obligations.

ACCURACY

When you provide information to a CRA, you have obligations under the FCRA to ensure the accuracy of the information you furnish. As a rule, it’s illegal to report information that you know or believe is inaccurate. You have "reasonable cause to believe" that information is inaccurate if you have knowledge, other than allegations from the consumer, that would lead a reasonable person to doubt the accuracy of the information. FCRA Section 623(a)(1)(A) You may be exempt from this requirement if you give an address for consumers to report inaccurate information, but you cannot, under any circumstances, report information the consumer has told you is inaccurate if it is, in fact, inaccurate. FCRA Section 623(a)(1)(C)

 

Guidelines for Policies and Procedures

You must establish and implement written policies and procedures regarding the accuracy and integrity of information you furnish to a CRA. Guidelines are in . Read the Appendix; the information here is just a sample.

Your policies and procedures:

• must be appropriate to the nature, size, complexity, and scope of your activities;
• must be reviewed periodically and updated, as necessary;
• should ensure that information provided to a CRA is for the right person, and reflects the terms of the account and the consumer's performance on the account;
• require maintenance of records for a reasonable amount of time;
• establish internal controls for the accuracy and integrity of information, such as through random sampling;
• prevent re-aging (inaccurately changing the date of first delinquency on a consumer’s account to a later date) and duplicative reporting, particularly following portfolio acquisitions or sales, mergers, and other transfers; and
• require updating of furnished information where necessary. 

Information should:

• be substantiated by your records when it is furnished;
• include consumer identifiers, like name(s), date of birth, Social Security number, telephone number(s), or address(es); and
• be furnished in a standardized form and specify the time period it pertains to.

Correct and Update Information

Negative Information from Financial Institutions — If you are a financial institution (as defined in the Gramm-Leach-Bliley Act) that extends credit and regularly reports Anegative information@ about your customers to a nationwide CRA (for example, Equifax, Experian, or TransUnion), you must notify your customers that you report such negative information. Examples of negative information include a customer's delinquencies, late payments, insolvency, or any form of default. FCRA 623(a)(7)(G)(i)

You must provide the notice either before you furnish the negative information or within 30 days of furnishing it. You may include the notice with a notice of default, a billing statement, or another item sent to the consumer, but you cannot send it with a Truth In Lending Act notification. The notices must be clear and conspicuous.

The Consumer Financial Protection Bureau has at 12 CFR Part 1022, Appendix B, FCRA 623(a)(7).
 

Medical Information — If your primary business is providing medical services, products, or devices, and you, your agent, or your assignee reports information about consumers to CRAs, you must notify each CRA that you are a medical provider. FCRA 623(a)(9) This notice helps the CRAs comply with their FCRA duties with regard to the reporting of medical information. FCRA 604(g) For example, if the name, address, and telephone number of a medical information furnisher appears on a consumer report, the information must be encoded so it doesn’t identify the specific provider or the nature of the services, products, or devices. FCRA 605(a)(6)(A)

The federal banking agencies have issued to implement these requirements.

DISPUTES

Consumers may dispute information that you furnished in two ways:

1. They may submit a dispute to the CRA.
2. They may submit a dispute directly to you.

Disputes to CRAs

If a CRA notifies you that a consumer disputes information you provided, you must:

• investigate the dispute and review all relevant information provided by the CRA about the dispute;
• report your findings to the CRA;
• provide corrected information to every CRA that received the information if your investigation shows the information is incomplete or inaccurate; and
• modify the information, delete it, or permanently block its reporting if the information turns out to be inaccurate or incomplete or can’t be verified.  FCRA 623(b)(1)

You must complete these steps within the same time allowed under the FCRA for the CRA to resolve the dispute. Normally, this is 30 days after the CRA gets the dispute from the consumer. If the consumer provides additional relevant information during the 30‑day period, the CRA has 15 more days to resolve the dispute. The CRA must give you all the relevant information it gets within five business days of receipt, and must promptly give you additional relevant information provided by the consumer. If you don’t investigate and respond to the notification of the dispute within the specified times, the CRA must delete the disputed information from its files. FCRA 623(b)(2) and 611(a)(1)

Disputes to Furnishers

You must investigate a consumer’s dispute if it relates to:

• the consumer’s liability for a credit account or other debt with you. For example, disputes relating to whether there is or has been identity theft or fraud against the consumer, whether there is individual or joint liability on an account, or whether the consumer is an authorized user of a credit account;
• the terms of a credit account or other debt with you. For example, disputes relating to the type of account, principal balance, scheduled payment amount on an account, or the amount of the credit limit on an open-end account;
• the consumer's performance or other conduct concerning an account or other relationship with you. For example, disputes relating to the current payment status, high balance, date a payment was made, amount of a payment made, or date an account was opened or closed; or
• any other information in a consumer report about an account or relationship with you that affects the consumer's creditworthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or lifestyle. 

You must:

• conduct a reasonable investigation
• review all relevant information provided by the consumer
• report results to the consumer, generally within 30 days
• notify each CRA to which you provided inaccurate information if the investigation finds the information was inaccurate. 

You are not required to investigate the dispute if it relates to:

• the consumer's identifying information on a consumer report, including name, date of birth, Social Security number, phone number, or address;
• the names of previous or current employers;
• inquiries or requests for consumer reports;
• information from public records, including judgments, bankruptcies, and liens;information related to fraud alerts or active duty alerts;
• information provided to a CRA by another furnisher; orwhen you believe that the dispute is submitted by, prepared on behalf of the consumer by, or submitted on a form supplied to the consumer by a credit repair organization. 

You also are not required to investigate disputes that are frivolous or irrelevant, as defined by the Rule:

• the consumer didn’t provide enough information
• the dispute is substantially the same as a dispute previously submitted
• you already fulfilled your obligation, and there is no new information
• you are not required to investigate the dispute, as described in the list above from 660.4(b). 

If a dispute is found to be frivolous or irrelevant, you must notify the consumer within five business days after making the determination. This notice can be a form letter. Include the reason for the determination and, if relevant, any information the consumer needs to submit so you can investigate the disputed information.

ADDITIONAL RESPONSIBILITIES

Victims of Identity Theft

When you are notified by a CRA that a consumer's identity has been stolen, you have specific duties under the FCRA. FCRA 605B

• If a CRA notifies you that information you furnished is being blocked on a consumer's credit report because of identity theft, you must have procedures to prevent the re-reporting of the information. FCRA 623(a)(6)(A)

• If a CRA notifies you that a debt has resulted from identity theft, you may not sell, transfer, or place that debt for collection. FCRA 615(f)(1)

• If a consumer notifies you that he is a victim of identity theft, and gives you an , you may not furnish information to a CRA regarding the fraudulent account or debt. FCRA 623(a)(6)(B)

• If you find that you furnished inaccurate information due to identity theft, you must promptly notify each CRA of the correct information. Going forward, you must report only complete and accurate information. FCRA 623(a)(2)

• If you provide credit, goods, or services to consumers, you may be required to supply application or other transaction records to an identity theft victim or law enforcement officer, if they ask. FCRA 605B(f) 615(g)

• If you establish or extend credit plans or accounts, you may be required to follow certain steps to verify a consumer's identity when you see a fraud or active duty alert on his credit report. FCRA 605A(h)(B)(ii)

Disposing of Consumer Report Information

When you are finished using a consumer report, you must securely dispose of the report and any information you gathered from it. That can include burning, pulverizing, or shredding paper documents, and disposing of electronic information so that it can't be read or reconstructed. For more information, see Disposing of Consumer Report Information? Rule Tells How.

Address Discrepancies

If you are a user of consumer reports and a CRA notifies you that the consumer address you provided is substantially different from the address it has, you must have policies and procedures to investigate and furnish the consumer’s correct address to the CRA. For more information, see . 

NON-COMPLIANCE

If you don’t comply with the FCRA, you may be sued by the FTC, Consumer Financial Protection Bureau (CFPB), state governments, or in some cases, consumers. The FCRA provides for maximum penalties of $4,857 per violation in the case of lawsuits brought by the FTC. FCRA 616, 617, 621

Your Opportunity to Comment