28-52-103. SECURITY FREEZE. (1) A consumer may place a security freeze on the consumer’s credit report by:

(a) Making a request to a consumer reporting agency in writing by regular or certified mail at an address designated by the consumer reporting agency to receive the request;

(b) Providing proper identification; and

(c) Paying the fee required by the consumer reporting agency in accordance with section 28-52-106, Idaho Code.

(2) Upon receiving a request from a consumer under subsection (1) of this section, the consumer reporting agency shall:

(a) Place a security freeze on the consumer’s credit report within three (3) business days after receiving the consumer’s request; and

(b) Within five (5) business days after placing the security freeze, send a written confirmation of the security freeze to the consumer and provide the consumer with a unique personal identification number or password to be used by the consumer when providing authorizations for removal or temporary lifts of the security freeze under section 28-52-104, Idaho Code.

(3) If a security freeze is in place, a consumer reporting agency may not release a consumer’s credit report, or information from the credit report, to a third party that intends to use the information to determine a consumer’s eligibility for credit without prior authorization from the consumer.

(4) Notwithstanding subsection (3) of this section, a consumer reporting agency may communicate to a third party requesting a consumer’s credit report that a security freeze is in effect on the consumer’s credit report. If a third party requesting a consumer’s credit report in connection with the consumer’s application for credit is notified of the existence of a security freeze under this section, the third party may treat the consumer’s application as incomplete.

(5) A consumer reporting agency shall require proper identification of the consumer requesting to place, remove or temporarily remove a security freeze.

(6) A consumer reporting agency shall develop a contact method to receive and process a consumer’s request to permanently remove or temporarily lift a security freeze. The contact method may include: a postal address; an electronic contact method chosen by the consumer reporting agency, which may include the use of fax, internet or other electronic means; or the use of telephone in a manner that is consistent with any federal requirements placed on the consumer reporting agency. By no later than September 1, 2008, a consumer reporting agency shall develop a secure electronic means for a consumer to request the temporary lift of a security freeze.

(7) A security freeze placed under this section may be removed only in accordance with section 28-52-104, Idaho Code.

History:

[28-52-103, added 2008, ch. 177, sec. 2, p. 523.]