Back

Define the credit information disclosure parameters.


CONTROL ID
00262
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a consumer credit report policy., CC ID: 00257

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The credit provider must notify the credit reporting agency, as soon as practicable, that an individual is no longer overdue in making a payment or contends that he or she is not overdue in making a payment when the credit reporting agency is given information that an individual is overdue in making… (§ 18F(3), Act No. 119 of 1988 as amended, taking into account amendments up to Freedom of Information Amendment (Parliamentary Budget Office) Act 2012)
  • (§ 18Q(1)(b), Australia Privacy Act 1988)
  • Confidential data disclosed in accordance with the rules of Chapter 5 cannot be accessible to the general public. (§ 15(3), Denmark, The Act on Processing of Personal Data)
  • Consumer reporting agencies must block any information in the consumer's file that resulted from an alleged identity theft no later than 4 days after receipt of a report from the consumer that his/her identity has been stolen. The report should include proof of identity of the consumer, a copy of th… (§ 152, Fair and Accurate Credit Transactions Act of 2003 (FACT Act))
  • Consumer reporting agencies must block any information in the consumer's file that resulted from an alleged identity theft no later than 4 days after receipt of a report from the consumer that his/her identity has been stolen. The report should include proof of identity of the consumer, a copy of th… (§ 605B, § 604(e)(1), § 615(d), Fair Credit Reporting Act (FCRA), July 30, 2004)
  • A consumer credit reporting agency shall notify each person that requests consumer credit information that a security alert exists in the consumer's credit report, regardless of whether a full credit report, credit score, or summary report is requested. (§ 1785.11.1(b), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • A consumer credit reporting agency shall not generate a credit report that contains bankruptcies predating the credit report by more than 10 years. (§ 1785.13(a)(1), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • A consumer credit reporting agency shall not generate a credit report that contains suits and judgments predating the credit report by more than 7 years or until the Statute of Limitations has expired, whichever is longer. (§ 1785.13(a)(2), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • A consumer credit reporting agency shall not generate a credit report that contains unlawful detainer actions, unless the lessor was the prevailing party. (§ 1785.13(a)(3), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • A consumer credit reporting agency shall not generate a credit report that contains paid tax liens predating the credit report by more than 7 years. (§ 1785.13(a)(4), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • A consumer credit reporting agency shall not generate a credit report that contains accounts for collection or charged to profit and loss predating the credit report by more than 7 years. (§ 1785.13(a)(5), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • A consumer credit reporting agency shall not generate a credit report that contains records of indictment, arrests, information, conviction of a crime, or misdemeanor complaints predating the credit report by more than 7 years and shall not be reported a full pardon was granted on a conviction or a … (§ 1785.13(a)(6), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • A consumer credit reporting agency shall not generate a credit report that contains any other adverse information predating the credit report by more than 7 years. (§ 1785.13(a)(7), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • Contract provisions that prohibit the disclosure of a credit score by a person who makes or arranges loans or a consumer credit reporting agency is void. (§ 1785.16(m), Consumer Credit Reporting Agencies Act, California Civil Code 17851-1785.6)
  • A person, corporation, firm, partnership, or other business entity that accepts a check as payment in full or part for services or goods shall not contact a credit card Issuer or access the credit card balance to determine if the amount of credit available will cover the amount of the written check. (§ 105(b)(3), The Commonwealth of Massachusetts, Title XV, Ch 93, Section 105, Credit cards; checks; personal identification information)
  • The credit report protection act does not prohibit Consumer Reporting Agencies from furnishing a consumer's name, address, former address, place of employment, or former place of employment to a governmental agency. (§ 8-2612, Nebraska Revised Statutes, Sections 8-2061 thru 8-2615, Credit Report Protection Act)
  • Except as provided in ORS 646A.614, if a security freeze is in place for a consumer report, information from the consumer report may not be released without prior express authorization from the consumer. (§ 646A.606(4)(a), Oregon Revised Statutes, Chapter 646a, Sections 646A.600 thru 646A.624, Identity Theft Protection Act, 2007 Statutes)