Chapter 4: Federal Privacy Protection and Consumer Identification Laws

Consumer

Individual who obtains, or has obtained, a financial product or service from a financial institution for personal, family, or household reasons.

Consumer Financial Protection Bureau (CFPB)

Independent agency within the Federal Reserve with rulemaking and enforcement authority over many consumer financial laws. Established under Title X of the Dodd-Frank Act.

Credit Freeze

Places a credit file 'on ice' by preventing the information from being reported to third parties, such as credit grantors and other companies.
- Lenders are not able to gain access to the credit file unless given permission by the account holder.
- The cr

Customer

Consumer with a continuing, significant relationship with a financial institution.

Fraud Alert

Condition attached to a credit report that requires lenders to take extra precautions (e.g., contact by phone) to verify that the identity of the party seeking to establish the credit account is actually the individual who wants the new account.

What is the Fair Credit Reporting Act (FCRA) - Regulation V

A federal law dealing with the granting of credit, access to credit information, the rights of debtors, and the responsibilities of creditors

Creditor is defined as

a person who regularly extends consumer credit that is subject to a finance charge, or is paid by written agreement in more than four installments, and to whom the obligation is originally payable

The Fair Credit Reporting Act provides consumers with the following rights to:

� An adverse action notice.
� A copy of consumer credit file.
� Request their credit score.
� Dispute incomplete or inaccurate information.
� Limit prescreened offers.

Any entity that uses a credit report or another type of consumer report to deny an application for credit, insurance, or employment�or to take another adverse action�must provide the consumer with

the name, address, and phone number of the agency that provided the information.

Title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act, amended the Fair Credit Reporting Act to require a creditor to provide a consumer with a

written or electronic disclosure of the numeric credit score used in taking any adverse action, including a risk-based pricing notice.

Consumers are entitled to a free copy of their credit file from a consumer credit reporting agency under these circumstances:

� The information in a credit report resulted in adverse action.
� The consumer was a victim of identity theft and a fraud alert was inserted in the credit file.
� The credit file contains inaccurate information as a result of fraud.
� The consumer is on

Consumers are entitled to receive a free copy of their credit score from a consumer reporting agency each year, according to the Fair Credit Reporting Act.
A. true B. false

False. Credit FILE. must pay for credit score
- Although it is not free, consumers have the right to ask for a credit score from any consumer reporting agencies that create or distribute scores used in residential real property loans.

Consumers have the right to dispute any incomplete or inaccurate information they find in their credit report. The consumer reporting agency must

correct or delete inaccurate, incomplete, or unverifiable information.

Consumers may choose to limit "prescreened" offers of credit and insurance based on information in their credit report. Unsolicited prescreened offers for credit and insurance must include

a toll-free phone number to call to be removed from the lists on which these offers are based.

The Fair Credit Reporting Act entitles consumers access to the same credit information that lenders use in making their credit decisions.
A. true B. false

True

Under the Fair Credit Reporting Act, consumer reporting agencies:

� May not report outdated negative information. In most cases, a consumer reporting agency may not report negative credit information that is more than seven years old or bankruptcies that are more than ten years old. There is no time limit on the reporti

According to FCRA, all of the following would have a business need for access to credit reports EXCEPT a(n)
A. "buy here, pay here" automobile dealer.
B. employer performing a background check for a potential employee.
C. mortgage loan originator.
D. pers

D. person who wants to know their neighbor's credit score.

The consumer reporting agency must correct or delete any data EXCEPT information that is
A. disputed
B. inaccurate.
C. incomplete.
D. unverifiable.

A. disputed

Fair and Accurate Credit Transactions Act of 2003 [FACT Act/FACTA] amended the federal Fair Credit Reporting Act and is intended primarily to help consumers...

- fight the growing crime of identity theft.
The FACT Act was passed in 2003, a time in which identity theft was an ever-increasing problem for consumers and creditors. Thus, the law focused on accuracy, privacy, limits on information sharing, and new con

The FACT Act contains seven major titles: which are...

� Identity Theft Prevention and Credit History Restoration
� Improvements in Use of and Consumer Access to Credit Information
� Enhancing the Accuracy of Consumer Report Information
� Limiting the Use and Sharing of Medical Information in the Financial Sy

One of the major provisions of the FACT Act is to allow consumers easier access to their credit reports as a way to spot

possible identity theft and to allow dispute of inaccurate information.

The FACT Act requires that consumers applying for home loans receive the

Home Loan Applicant Credit Score Information Disclosure notice, which explains their rights.

The FACT Act allows consumers to request and obtain a free copy of their credit report once every ___ months from each of these credit bureaus by contacting a centralized website, maintained in cooperation with the Federal Trade Commission

12 months
- Prior to the passage of the FACT Act, consumers had to pay to get a copy of their report from each of the three national credit bureaus: Equifax, Experian, and TransUnion.

If a consumer believes he has been a victim of identity theft, the FACT Act allows the consumer to contact the credit bureau and place a

fraud alert
- If an MLO is running a credit report and sees a fraud alert, he must contact the person whose name is on the account at the number provided to the credit bureau or take other reasonable steps to ensure that the person applying for a mortgage

FACT Act also allows consumers to place a ____ to prevent the information from showing on a credit report.

- credit freeze
- When applying for a loan, the consumer may then temporarily "thaw" the credit report by contacting the credit bureau that is "freezing" the report to obtain a temporary password, which allows a credit reporting agency to access the repor

FACT Act prohibits businesses from printing more than five digits of any customer's

credit/debit card number or expiration date on any receipt provided to the cardholder at the point of sale or transaction.
- The provision excludes handwritten or imprinted receipts if that is the only method of recording the card number.

FACT Act requires businesses to take measures to responsibly secure and dispose of sensitive personal information found in a consumer's credit report. Reasonable methods for security and disposal include:

� Burning or shredding papers that contain consumer report information so that information cannot be reconstructed
� Destroying or erasing electronic files or media so that information cannot be recovered or reconstructed
� Placing all pending loan docume

� Burning or shredding papers that contain consumer report information so that information cannot be reconstructed
� Destroying or erasing electronic files or media so that information cannot be recovered or reconstructed
� Placing all pending loan docume

...

The primary focus of the Fair and Accurate Credit Transactions Act (FACT Act) is to ensure that consumers' credit information is accurately maintained and recorded.
A. true B. false

A. true

To properly dispose of a consumer's loan file, the FACT Act requires that paper files be burned or shredded after the loan closes.
A. true B. false

B. false

Section 114 of the FACT Act: Establishment of Procedures for the Identification of Possible Instances of Identity Theft, known as the Red Flags Rules, requires:

� Financial institutions and creditors to implement a written identity theft prevention program.
� Card issuers to assess the validity of change of address requests.
� Users of consumer reports to reasonably verify the identity of the subject of a consume

Section 114 "Red flags rules" applies to

federal and state-chartered banks and credit unions, non-bank lenders, mortgage brokers, any person who regularly participates in a credit decision�including setting the terms of credit, and any person who requests a consumer report.

According to Regulation V, a creditor is defined as
A. the agency that maintains, gathers, and scores information for reports.
B. someone who grants credit.
C. someone who is obtaining credit.
D. the title insurance agency.

B. someone who grants credit.

A MLO hired a third-party independent processing company to perform processing functions on their loan files. Loan files for applicants who were not approved were disposed of in a dumpster at the back of the processing company's office. The processing com

B. FACTA.

The Financial Services Modernization Act of 1999, also known as the Gramm-Leach-Bliley Act, includes provisions in Title V - Privacy
Gramm-Leach-Bliley Act, Privacy of Consumer Financial Information (Regulation P)

to protect and regulate the disclosure of consumers' personal financial information.
- There are 3 principal parts to the privacy requirements: The Financial Privacy Rule, the Safeguards Rule, and Pretexting Provisions.

The GLB Act gives authority to 8 federal agencies and the states to administer and enforce Title V - Privacy.
- These regulations apply to financial institutions, which include not only banks, securities firms, and insurance companies, but also companies

� Lending, brokering, or servicing any type of consumer loan.
� Transferring or safeguarding money.
� Preparing individual tax returns.
� Providing financial advice or credit counseling.
� Providing residential real estate settlement services.
� Collectin

The Financial Privacy Rule governs the collection and disclosure of customers' personal financial information�known as nonpublic personal information�restricting

- when and under what circumstances such information may be disclosed to affiliates and to nonaffiliated third parties.
-Information that many would consider private�including bank balances and account numbers�is regularly bought and sold by banks, credit

Nonpublic personal information could include the following types of information:

� What a consumer or customer puts on an application
� Data about the individual from another source, such as a credit bureau
� Transactions between the individual and the company, such as an account balance, payment history, or credit/debit card purchase

Restrictions of non-personal data are based on a required Consumer Privacy Policy notice provided to the consumer, explaining the lender's information collection procedures and information sharing and transfer practices.

- A financial institution must disclose its policy to consumers before they disclose personal information, disclose the policy annually for customers throughout the financial relationship, and provide the consumer instructions on how to opt-out of having

A written Safeguards Policy must include provisions that:

� Ensure the security and confidentiality of customer records.
� Protect against any anticipated threats or hazards to the security of such records.
� Protect against the unauthorized access or use of such records or information in ways that could result

Pretexting Provisions
This provision does what?

protects consumers from individuals and companies that obtain their personal financial information under false, fictitious, or fraudulent pretenses.

A covered institution must obtain from all customers opening a new account, at a minimum, the following:

� Name
� Date of birth
� Residential or work address for individuals, or physical location address for legal entities
� For U.S. citizens or legal entities organized under state law: A tax identification number (TIN)
� For lawful permanent residents or no

The Safeguards Rule requires all financial institutions to design, implement, and maintain___ to protect customer information while it is in the custody and control of the institution and its agents.

- safeguards
- This rule applies not only to financial institutions that collect information from their own customers, but also to any institution�such as a credit reporting agency or even an educational institution�that receives customer information from

To keep from violating National Do Not Call regulations, a company must maintain national and internal lists of customers and prospects and keep them updated regularly. The national DNC list must be updated every three months, and the internal DNC list mu

30

A consumer who receives a telemarketing call despite being on the registry is able to file a complaint with the FTC. Violators could be fined up to $___ per incident.

16,000

A. Fair and Accurate Credit Transactions Act (FACTA)
B. Fair Credit Reporting Act (FCRA)
C. Gramm-Leach-Bliley Act (GLB)
Which regulation is it?
Borrower Frank makes an application for a mortgage loan with ABC Mortgage Brokers. According to (1) _____, Fra

...

The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act (Pub.L. 107-56), more commonly known as the Patriot Act, was enacted in October 2001 in response to the September 11, 2001 terrorist atta

� Increases the ability of law enforcement agencies to search telephone, e-mail, medical, financial, and other records.
� Eases restrictions on foreign intelligence gathering within the United States.
� Expands the Secretary of the Treasury's authority to

Title III of the Patriot Act, designated the International Money Laundering Abatement and Financial Anti- Terrorism Act of 2001, requires lenders and banks to create and maintain customer identification programs (CIPs) to prevent

- financing of terrorist operations and money laundering.
- CIPs require covered institutions to verify the identity of customers who are entering into a "formal relationship," such as taking out a loan or a credit account.

A provision of the federal Telemarketing Sales Rule, the National Do Not Call (DNC) Registry, is managed by the

Federal Trade Commission (FTC), the nation's consumer protection agency, and enforced by the FTC, the Federal Communications Commission (FCC), and state law enforcement officials.

True or False: If a lender is extending credit to the borrower using a mortgage broker as its
agent, it must ensure the broker is performing the bank's CIP.

True

The Patriot Act requires lenders and banks to create and maintain programs that verify their customers' identity.
A. true B. false

True

a company may call a consumer for up to __ months after the consumer makes an inquiry or submits an application to the company.

3 months

The National Do Not Call Registry applies to any plan, program, or campaign to__ goods or services through interstate phone calls.

- sell
- This includes telemarketers who solicit consumers, often on behalf of third party sellers. It also includes sellers who provide, offer to provide, or arrange to provide goods or services to consumers in exchange for payment.
- The National Do Not

The National Do Not Call Registry regulations require companies to update their national customer lists every 30 days.
A. true B. false

True

For how many months after a loan closes may a mortgage loan originator call to solicit new business from a customer whose phone number is on the National Do Not Call Registry?
A. 3 months
B. 6 months
C. 18 months
D. No calls can be made to a number on the

C. 18 months

A telemarketer or seller may call a consumer with whom it has an established business relationship (EBR) for up to __ months after the consumer's last purchase, delivery, or payment, even if the consumer's number is on the National Do Not Call Registry.

18

Which law includes Red Flags Rules that require financial institutions and creditors to implement procedures to protect customer identity?
A. Fair and Accurate Credit Transaction Act
B. Fair Credit Reporting Act
C. Gramm-Leach-Bliley Act (The Financial Pr

C. Gramm-Leach-Bliley Act (The Financial Privacy Act)

Obtaining the name, phone number, and___ from a consumer provides written consent that does not expire until rescinded.

signature

If a consumer has asked to be put on the company's internal Do Not Call list, the company may not call, even if there is an EBR. This prohibition is only against solicitation of ___ business.

NEW
Calls may be made to consumers in reference to a current relationship, such as a creditor making a collection call.

The Fair Credit Reporting Act allows a consumer to request a
A. credit score disclosure statement from a creditor.
B. dispute of inaccurate or incomplete information of a report.
C. fraud alert in the event of stolen identity.
D. freeze on a credit bureau

C. fraud alert in the event of stolen identity.

The Fair and Accurate Credit Transaction Act regulates all of the following EXCEPT
A. an adverse action notice to the borrower who is turned down for a loan.
B. a credit freeze registered with a credit bureau.
C. fraud alerts placed on a credit report.
D.

D. truncation of credit card numbers on a credit
card receipt.

The Red Flags Rules are also known as
A. advertising triggering terms.
B. Chapter 8 of Regulation X.
C. Section 32.
D. Section 114.

D. Section 114.

According to the GLB Act, a person who completes a single transaction with a creditor is known as a(n)
A. applicant.
B. creditor.
C. consumer.
D. customer.

C. consumer.

The FCRA mandates that a credit reporting bureau remove a consumer's Chapter 7 bankruptcy record after
A. credit has been re-established for over five years.
B. 7 years.
C. 10 years.
D. dismissal of the case by a Federal Bankruptcy Court.

C. 10 years.

The penalty per occurrence per day for violating the National Do Not Call regulations is
A. $5,000.
B. $10,000.
C. $11,000.
D. $16,000.

D. $16,000.