SECOND REGULAR SESSION
94TH GENERAL ASSEMBLY
INTRODUCED BY REPRESENTATIVES FAITH (Sponsor), JONES (117), RUZICKA AND COX (Co-sponsors).
Read 1st time February 14, 2008 and copies ordered printed.
D. ADAM CRUMBLISS, Chief Clerk
AN ACT
To amend chapter 407, RSMo, by adding thereto three new sections relating to security freezes.
Be it enacted by the General Assembly of the state of Missouri, as follows:
Section A. Chapter 407, RSMo, is amended by adding thereto three new sections, to be known as sections 407.1380, 407.1382, and 407.1384, to read as follows:
407.1380. As used in sections 407.1380 to 407.1384, the following terms shall mean:
(1) "Consumer", any individual;
(2) "Consumer credit reporting agency", any entity that, for monetary fees, dues, or on a cooperative nonprofit basis, regularly engages, in whole or in part, in the practice of assembling or evaluating consumer credit information or other information on consumers for the purpose of furnishing consumer credit reports to third parties;
(3) "Credit report", any written or electronic communication of any information by a consumer credit reporting agency that in any way bears upon a person's credit worthiness, credit capacity, or credit standing;
(4) "Security freeze", a notice placed in a consumer's credit report, at the request of the consumer, that prohibits the consumer credit reporting agency from releasing the consumer's credit report, credit score, or any information contained in the report without the express authorization of the consumer.
407.1382. 1. A consumer may request that a consumer credit reporting agency place a security freeze on that consumer's credit report, if that request is made:
(1) In writing by certified mail or personal delivery; or
(2) By other reliable means, including Internet, telephone, or facsimile; and
(3) Proper identification is presented to adequately identify the requestor as the consumer subject to the credit report.
2. A consumer credit reporting agency shall honor a consumer's request for a security freeze within five days of receipt of such request. No consumer credit reporting agency shall assess a fee to a consumer for the consumer's first request for a security freeze, but a consumer credit reporting agency may assess a fee up to ten dollars for any subsequent request for a security freeze made by the same consumer.
3. A consumer credit reporting agency shall, within ten days of placing a security freeze on the consumer's credit report, send the consumer:
(1) Written confirmation of compliance with the consumer's request;
(2) Instructions explaining the process of placing, removing, and temporarily lifting a security freeze and the process for allowing access to information from the consumer's credit report for a specific requestor;
(3) A unique personal identification number or password to be used by the consumer to remove temporarily or permanently the security freeze or designate a specific requestor for receipt of the credit report despite the security freeze.
4. A consumer credit reporting agency shall not furnish a credit report to any person if the consumer who is subject to the credit report has requested a security freeze be placed on that report unless the credit report:
(1) Is requested by the consumer who is subject to the report;
(2) Is furnished under a court order;
(3) Is furnished during a period in which the consumer has temporarily removed the freeze;
(4) Is requested for the purposes of prescreening as provided by the Fair Credit Reporting Act under 15 U.S.C. 1681 et seq.;
(5) Is requested by a child support enforcement agency;
(6) Is requested for use in setting or adjusting a rate, issuing or underwriting a policy, adjusting a claim or servicing a policy for underwriting for property and casualty insurance purposes;
(7) Is requested by a specific person, or the subsidiary, affiliate, agent, or assignee of such person, whom the consumer has identified as eligible for receipt of the credit report under subsection 6 of this section, despite the consumer's request for a security freeze;
(8) Is furnished to a person, or the subsidiary, affiliate, agent, or assignee of such person, with whom the consumer has a debtor-creditor relationship for the purpose of account review or collecting the financial obligation owing for the account contract or debt;
(9) Is requested by the state or its agents or assigns for the purpose of investigating fraud or investigating or collecting delinquent taxes;
(10) Is requested by a person or entity administering a credit file monitoring service or similar service to which the consumer has subscribed; or
(11) Is requested for any other purpose that is otherwise allowable under the Fair Credit Reporting Act under 15 U.S.C. 1681 et seq.
5. If a security freeze is in place, a consumer credit reporting agency shall not change any of the following official information in a consumer credit report without sending a written confirmation of the change to the consumer within thirty days of the change being posted to the consumer's file: name, date of birth, social security number, and address. Written confirmation is not required for technical modifications of a consumer's official information, including name and street abbreviations, complete spellings, or transposition of numbers or letters. In the case of an address change, the written confirmation shall be sent to both the new address and to the former address.
6. A consumer may request that the consumer credit reporting agency furnish a credit report to a designated person despite the consumer request for a security freeze under subsection 1 of this section, if that request is made:
(1) In writing by certified mail or personal delivery; or
(2) By other reliable means, including Internet, telephone, or facsimile; and
(3) Proper identification is presented to adequately identify the requestor as the consumer subject to the credit report, which shall include the unique personal identification number or password issued to the consumer under subsection 3 of this section.
7. A consumer credit reporting agency shall temporarily or permanently remove a security freeze within one business day of receiving a request for removal from a consumer, if that request is made:
(1) In writing by certified mail or personal delivery; or
(2) By other reliable means, including Internet, telephone, or facsimile; and
(3) Proper identification is presented to adequately identify the requestor as the consumer subject to the credit report, which shall include the unique personal identification number or password issued to the consumer under subsection 3 of this section; and
(4) In the case of a request for temporary removal, the time period is specified for which the freeze shall be temporarily removed.
8. At any time a consumer is required to receive a summary of rights under 15 U.S.C. Section 1681g(d), the following notice shall be included:
"Missouri Consumers Have the Right to Obtain a Security Freeze.
You have a right to place a "security freeze" on your credit report, which will prohibit a consumer credit reporting agency from releasing information in your credit report without your express authorization. A security freeze must be requested in writing by certified mail or via other approved methods. The security freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a security freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, government services or payments, rental housing, employment, investment, license, cellular phone, utilities, digital signature, Internet credit card transaction, or other services, including an extension of credit at point of sale. When you place a security freeze on your credit report, you will be provided a personal identification number or password to use if you choose to remove the freeze on your credit report or authorize the release of your credit report for a period of time after the freeze is in place. To provide that authorization you must contact the consumer credit reporting agency and provide all of the following:
(1) The personal identification number or password;
(2) Proper identification to verify your identity;
(3) The proper information regarding the period of time for which the report shall be available.
A consumer credit reporting agency must authorize the release of your credit report no later than three business days after receiving the above information.
A security freeze does not apply to a person or entity, or its affiliates, or collection agencies acting on behalf of the person or entity, with which you have an existing account, that requests information in your credit report for the purposes of reviewing or collecting the account. Reviewing the account includes activities related to account maintenance, monitoring, credit line increases, and account upgrades and enhancements.
You have a right to bring civil action against anyone, including a consumer credit reporting agency, who improperly obtains access to a file, knowingly misuses file data, or fails to correct inaccurate file data.".
407.1384. 1. Any consumer credit reporting agency that knowingly fails to comply with the provisions of sections 407.1380 to 407.1384 shall be liable to the consumer who is subject to the credit report in an amount equal to:
(1) Any actual damages sustained by the consumer due to such failure; and
(2) Any court costs and fees assessed in maintaining the action, as well as reasonable attorney's fees.
2. In addition to the foregoing monetary sums, a court, upon request of the damaged consumer, shall award such equitable relief as may be necessary to restore the damaged consumer's credit and to discourage future violations of sections 407.1380 to 407.1384 by the consumer credit reporting agency.
•