FTC Prescribed Notice of User
Responsibilities
The appendix prescribes the content of the required notice.
NOTICE TO USERS OF CONSUMER
REPORTS:
OBLIGATIONS OF USERS UNDER THE FCRA
The Fair Credit Reporting Act (FCRA) requires that this notice be sent to
inform users of consumer reports of their legal obligations. The following is a
summary of the responsibilities imposed by the FCRA. The FCRA, 15 U.S.C. 1681 et
seq., is set forth in full at the Federal Trade Commission's Internet web site (http://www.ftc.gov).
Congress has limited the use of consumer reports to protect consumers'
privacy. All users must have a permissible purpose under the FCRA to obtain a
consumer report. Section 604 of the FCRA contains a list of the permissible
purposes under the law. These are:
Section 604(f) of the FCRA prohibits any person
from obtaining a consumer report from a consumer reporting agency (CRA) unless
the person certifies the permissible purpose(s) for which the report is being
obtained and certifies that the report will not be used for any other purpose.
The term "adverse action" is defined very broadly by Section 603
of the FCRA. "Adverse actions" include all business, credit, and
employment actions affecting consumers that can be considered to have a negative
impact -- such as unfavorably changing credit or contract terms or conditions,
denying or canceling credit or insurance, and denying employment or promotion.
If a user takes any type of adverse action that is based at least in part
on information contained in a consumer report, the user is required by Section
615 of the FCRA to notify the consumer. The notification may be done in writing,
orally, or by electronic means. It must include the following:
Are Not Consumer Reporting Agencies
If a person takes an adverse action in
connection with a credit transaction for personal, family, or household purposes
that is based either wholly or partly upon information from a person other than
a CRA, and the information is the type of consumer information covered by the
FCRA, Section 615(b)(1) of the FCRA requires that the user clearly and
accurately disclose to the consumer his or her right to obtain disclosure of the
nature of the information that was relied upon by making a written request
within 60 days of notification. The user must provide the disclosure within a
reasonable period of time following the consumer's written request.
If a person takes an adverse action involving credit, insurance, or
employment based on information of the type covered by the FCRA, and this
information was obtained from an entity affiliated with the user of the
information by common ownership or control, Section 615(b)(2) requires the user
to notify the consumer of the adverse action. The notification must inform the
consumer that he or she may obtain a disclosure of the nature of the information
relied upon by making a written request within 60 days of receiving the adverse
action notice. If the consumer makes such a request, the user must disclose the
nature of the information not later than 30 days after receiving the request.
(Information that is obtained directly from an affiliated entity relating solely
to its transactions or experiences with the consumer, and information obtained
in a consumer report from an affiliate are not covered by Section 615(b)(2).)
FOR EMPLOYMENT PURPOSES
If information from a CRA is used for employment purposes, the user has
specific duties, which are set forth in Section 604(b) of the FCRA. The user
must:
regulation, and that, if any adverse action is taken based on the consumer
report, a copy of
the report and a summary of the consumer's rights will be provided to the
consumer.
Investigative consumer reports are a special type of consumer report in
which information about a consumer's character, general reputation, personal
characteristics, and mode of living is obtained through personal interviews.
Consumers who are the subjects of such reports are given special rights under
the FCRA. If a user intends to obtain an investigative consumer report, Section
606 of the FCRA requires the following:
MEDICAL INFORMATION
Section 604(g) of the FCRA prohibits consumer
reporting agencies from providing consumer reports that contain medical
information for employment purposes, or in connection with credit or insurance
transactions, without the specific prior consent of the consumer who is the
subject of the report. In the case of medical information being sought for
employment purposes, the consumer must explicitly consent to the release of the
medical information in addition to authorizing the obtaining of a consumer
report generally.
The FCRA permits creditors and insurers to obtain limited consumer report
information for use in connection with unsolicited offers of credit or insurance
under certain circumstances. Sections 603(l), 604(c), 604(e), and 615(d). This
practice is known as "prescreening" and typically involves obtaining a
list of consumers from a CRA who meet certain pre-established criteria. If any
person intends to use prescreened lists, that person must (1) before the offer
is made, establish the criteria that will be relied upon to make the offer and
grant credit or insurance, and (2) maintain such criteria on file for a
three-year period beginning on the date on which the offer is made to each
consumer. In addition, any user must provide with each written solicitation a
clear and conspicuous statement that:
Section 607(e) of the FCRA requires any person who obtains a consumer
report for resale to take the following steps:
(2) certifications from all users of each purpose for which reports will
be used; and
(3) certifications that reports will not be used for any purpose other
than the purpose(s)
specified to the reseller. Resellers must make reasonable efforts to
verify this information.
Failure to comply with the FCRA can result in state or federal enforcement actions, as well as private lawsuits. Sections 616, 617, and 621. In addition, any person who knowingly and willfully obtains a consumer report under false pretenses may face criminal prosecution. Section 619.