Amended in Assembly March 3, 2016

California Legislature—2015–16 Regular Session

Assembly Bill No. 1580

Introduced by Assembly begin delete Member Gatto end delete begin insert Members Gatto and Irwin end insert

January 5, 2016

An act to add Sections 1785.11.9, 1785.11.10, and 1785.11.11 to the Civil Code, relating to consumer credit reports.

LEGISLATIVE COUNSEL’S DIGEST

AB 1580, as amended, Gatto. Consumer credit reports: security freezes: protected consumer.

Existing state law defines and regulates consumer credit reports and authorizes a consumer to place a security freeze on his or her credit report by making a request in writing by mail to a consumer credit reporting agency. Existing state law requires a consumer credit reporting agency to place the security freeze on the consumer’s credit report no later than 3 business days after receiving the consumer’s request.

This bill would begin delete authorize a representative of end delete begin insert require a consumer credit reporting agency to place a security freeze for end insert a protected consumer, defined as an individual who is under 16 years of age at the time a request for the placement of a security freeze is made or an incapacitated person or a protected individual for whom a guardian or conservator has been appointed, begin delete to place or remove a security freeze for the protected consumer, as specified. end delete begin insert upon that consumer’s representative’s request and compliance with certain requirements. The bill would require a consumer credit reporting agency to send confirmation to the protected consumer that a freeze was placed within 10 days of the placement of the freeze. The bill would also require a consumer credit reporting agency to notify a protected consumer within 10 days if his or her frozen credit report was released without proper authorization. end insert

Vote: majority. Appropriation: no. Fiscal committee: no. State-mandated local program: no.

The people of the State of California do enact as follows:

SECTION 1.  

Section 1785.11.9 is added to the Civil Code, to
read:

1785.11.9.  

For purposes of Sections 1785.11.10 and
1785.11.11, the following terms shall have the following meanings:

(a) “Protected consumer” means an individual who is either of
the following:

(1) Under 16 years of age at the time a request for the placement
of a security freeze is made.

(2) An incapacitated person or a protected person for whom a
guardian or conservator has been appointed.

(b) “Record” means a compilation of information that:

(1) Identifies a protected consumer.

(2) Was created by a consumer credit reporting agency solely
for the purpose of complying with this section.

(3) Is not otherwise authorized to be created or used to consider
the protected consumer’s begin delete credit worthiness, end delete begin insert creditworthiness, end insert credit
standing, credit capacity, character, general reputation, personal
characteristics, or mode of living.

(c) “Representative” means a person who provides to a consumer
credit reporting agency sufficient proof of authority to act on behalf
of a protected consumer.

(d) “Security freeze” means:

(1) If a consumer begin insert credit end insert reporting agency does not have a file
pertaining to a protected consumer, a restriction that:

(A) Is placed on the protected consumer’s record in accordance
with this section.

(B) Prohibits the consumer credit reporting agency from
releasing the protected consumer’s record except as authorized in
this section.

(2) If a consumer begin insert credit end insert reporting agency has a file pertaining
to a protected consumer, a restriction that:

(A) Is placed on begin delete a end delete the protected consumer’s consumer report in
accordance with this section.

(B) Prohibits the consumer begin insert credit end insert reporting agency from
releasing the protected consumer’s consumer report or any
information derived from the protected consumer’s consumer
report except as authorized in this section.

(e) “Sufficient proof of authority” means documentation that
shows that a representative has authority to act on behalf of a
protected begin delete consumer. end delete begin insert consumer in a financial matter. end insert This
documentation includes, but is not limited to:

(1) A court begin delete order. end delete begin insert order or relevant enabling document issued
by a court. end insert

(2) A begin delete lawfully executed end delete begin insert legally sufficient end insert and valid power of
begin insert attorney, or a durable power of end insert attorney.

(3) A written, notarized statement signed by a representative
that expressly describes the authority of the representative to act
on behalf of a protected begin delete consumer. end delete begin insert consumer, including a
temporary conservator or temporary guardian. end insert

(f) “Sufficient proof of identification” means information or
documentation that identifies a protected consumer or a
representative of a protected consumer. This information or
documentation includes, but is not limited to:

(1) A social security number or a copy of a social security card
issued by the Social Security Administration.

(2) A certified copy or official copy of a birth certificate issued
by the entity authorized to issue the birth certificate.

(3) A copy of a driver’s license, an identification issued by the
Department of Motor Vehicles, or any other government-issued
identification.

(4) A copy of a bill for telephone, sewer, septic tank, water,
electric, oil, or natural gas services, that shows a name and a home
address.

SEC. 2.  

Section 1785.11.10 is added to the Civil Code, to read:

1785.11.10.  

Sections 1785.11.9 to 1785.11.11, inclusive, do
not apply to the use of a protected consumer report or record by
any of the following:

(a) A person or entity listed in subdivision (l) of Section
1785.11.2, or Section 1785.11.4 or 1785.11.6.

(b) A person administering a credit file monitoring subscription
service to which the protected consumer has subscribed or to which
the representative of the protected consumer has subscribed on
behalf of the protected consumer.

(c) A person who provides the protected consumer or the
protected consumer’s representative with a copy of the protected
consumer’s consumer report on request of the protected consumer
or of the protected consumer’s representative.

(d) A person or entity that maintains or is a database used solely
for one of the following purposes:

(1) Criminal record information.

(2) Personal loss history information.

(3) Fraud prevention or protection.

(4) Employment screening.

(5) Tenant screening.

SEC. 3.  

Section 1785.11.11 is added to the Civil Code, to read:

1785.11.11.  

(a) A consumer credit reporting agency shall place
a security freeze for a protected consumer if both of the following
occur:

(1) The consumer credit reporting agency receives a request
from the protected consumer’s representative for the placement
of the security freeze pursuant to this section.

(2) The protected consumer’s representative does all of the
following:

(A) Submits the request to the consumer credit reporting agency
at the address or other point of contact and in the manner specified
by the consumer begin insert credit end insert reporting agency.

(B) Provides to the consumer credit reporting agency sufficient
proof of identification of the protected consumer and the
representative.

(C) Provides to the consumer begin insert credit end insert reporting agency sufficient
proof of authority to act on behalf of the protected consumer.

(D) Pays to the consumer credit reporting agency a fee as
authorized by subdivision (h).

(b) If a consumer credit reporting agency does not have a file
pertaining to a protected consumer when the consumer credit
reporting agency receives a request pursuant to paragraph (1) of
subdivision (a), the consumer credit reporting agency shall create
a record for the protected consumer.

(c) Within 30 days after receiving a request that meets the
requirements of subdivision (a), a consumer credit reporting agency
shall place a security freeze for the protected begin delete consumer. end delete begin insert consumer
and send confirmation to the protected consumer that the freeze
was placed within 10 days of the placement of the freeze. end insert

(d) Unless a security freeze for a protected consumer is removed
pursuant to subdivision (g) or (i), a consumer credit reporting
agency shall not release the protected consumer’s consumer report,
any information derived from the protected consumer’s consumer
report, or any record created for the protected consumer.

(e) A security freeze for a protected consumer placed pursuant
to this section shall remain in effect until either of the following
occurs:

(1) The protected consumer or the protected consumer’s
representative requests that the consumer credit reporting agency
remove the security freeze in accordance with subdivision (g).

(2) The security freeze is removed in accordance with
subdivision (i).

(f) To remove a security freeze, a protected consumer or a
protected consumer’s representative shall do all of the following:

(1) Submit a request for removal of the security freeze to the
consumer credit reporting agency at the address or other point of
contact and in the manner specified by the consumer credit
reporting agency.

(2) Provide to the consumer credit reporting agency:

(A) If the request is made by the protected consumer:

(i) Proof that the sufficient proof of authority for the protected
consumer’s representative to act on behalf of the protected
consumer is no longer valid.

(ii) Sufficient proof of identification of the protected consumer.

(B) If the request is made by the representative of a protected
consumer:

(i) Sufficient proof of identification of the protected consumer
and the representative.

(ii) Sufficient proof of authority to act on behalf of the protected
consumer.

(3) Pay to the consumer credit reporting agency a fee as
authorized by subdivision (h).

(g) Within 30 days after receiving a request that meets the
requirements of subdivision (f), a consumer credit reporting agency
shall remove a security freeze for a protected consumer.

(h) (1) Except as provided in paragraph (2), a consumer credit
reporting agency may not charge a fee for any service performed
pursuant to this section.

(2) A consumer credit reporting agency is authorized to charge
a reasonable fee, not exceeding ten dollars ($10), for each
placement or removal of a security freeze for a protected consumer.

(3) Notwithstanding paragraph (2), a consumer credit reporting
agency shall not charge any fee pursuant to this section under any
of the following circumstances:

(A) The protected consumer’s representative has received a
report of alleged identity begin delete fraud end delete begin insert theft end insert against the protected consumer
under Section 530.5 of the Penal Code and has provided copy of
the report to the consumer credit reporting agency.

(B) The request for the placement or removal of a security freeze
is for a protected consumer who is under 16 years of age at the
time of the request and the consumer credit reporting agency has
a report pertaining to the protected consumer.

(i) A consumer credit reporting agency is authorized to remove
a security freeze for a protected consumer or to delete a record of
a protected consumer if the security freeze was placed or the record
was created based upon a material misrepresentation of fact by the
protected consumer or the protected consumer’s representative.

begin insert

(j) A consumer credit reporting agency may develop procedures
involving the use of telephone, fax, the Internet, or other electronic
media to receive and process a request for a protected consumer
credit freeze to be placed or removed.

end insert begin insert

(k) A consumer credit reporting agency shall notify the protected
consumer within 10 days if the protected consumer’s frozen credit
record was released without proper authorization.

end insert