15 U.S. Code § 1681g – Disclosures to consumers
(2) The sources of the information; except that the sources of information acquired solely for use in preparing an investigative consumer report and actually used for no other purpose need not be disclosed: Provided, That in the event an action is brought under this subchapter, such sources shall be available to the plaintiff under appropriate discovery procedures in the court in which the action is brought.
(3)(A) Identification of each person (including each end-user identified under section 1681e(e)(1) of this title) that procured a consumer report—
(i) for person under subparagraph (A) shall include—
(i) the name of the person or, if applicable, the trade name (written in full) under which such person conducts business; and
(ii) upon request of the person.
(C) Subparagraph (A) does not apply if—
(i) the end user is an agency or department of the United States Government that procures the report from the person for purposes of determining the eligibility of the section 1681b(b)(4)(E)(i) [1] of this title); and
(ii) the head of the agency or department makes a written finding as prescribed under section 1681b(b)(4)(A) of this title.
(4) The dates, original payees, and amounts of any checks upon which is based any adverse characterization of the record of all inquiries received by the agency during the 1-year period preceding the request that identified the credit or insurance transaction that was not initiated by the credit file and not the credit score, a statement that the credit score.
(b) Exempt information
The requirements of subsection (a) respecting the disclosure of sources of information and the recipients of consumer reports do not apply to information received or consumer reports furnished prior to the effective date of this subchapter except to the extent that the matter involved is contained in theconsumer reports and to obtain credit scores
(1) Commission [2] summary of rights required
The Commission 2 shall prepare a model summary of the rights ofconsumer report under subsection (a) from each consumer report without charge under section 1681j of this title;
(iv) the right of a credit score from a credit score;
(v) the method by which a consumer report from, a Bureau prescribed under section 211(c) 1 of the Fair and Accurate Credit Transactions Act of 2003; and
(vi) the method by which a consumer report from, a section 1681a(w) 1 of this title, as provided in the regulations of the Bureau prescribed under section 1681j(a)(1)(C) of this title.
(C) Availability of summary of rights
(i) actively publicize the availability of the summary of rights prepared under this paragraph;
(ii) conspicuously post on its Internet website the availability of such summary of rights; and
(iii) promptly make such summary of rights available to consumers, on request.
(2) Summary of rights required to be included with agency disclosures
A consumer, with each written disclosure by the agency to theBureau under paragraph (1);
(B) in the case of a section 1681a(p) of this title, a toll-free telephone number established by the agency, at which personnel are accessible to State law, and that the State or local consumer protection agency or a State attorney general (or the equivalent thereof) to learn of those rights; and
(E) a statement that a consumer, unless the information is outdated under section 1681c of this title or cannot be verified.
(d) Summary of rights of identity theft victims
The Commission, 2 in consultation with the Federal banking agencies and the National Credit Union Administration , shall prepare a model summary of the rights of identity theft involving credit, an electronic fund transfer, or an account or transaction at or with a financial institution or other creditor.
(2) Summary of rights and contact information
Beginning 60 days after the date on which the model summary of rights is prescribed in final form by the Bureau pursuant to paragraph (1), if any victim of fraud or identity theft involving credit, an electronic fund transfer, or an account or transaction at or with a financial institution or other creditor, the Bureau under paragraph (1), and information on how to contact the Bureau to obtain more detailed information.
(e) Information available to victims
For the purpose of documenting fraudulent transactions resulting from identity theft, not later than 30 days after the date of receipt of a request from a victim in accordance with paragraph (3), and subject to verification of the identity of the victim and the claim of identity theft in accordance with paragraph (2), a business entity that has provided credit to, provided for consideration products, goods, or services to, accepted payment from, or otherwise entered into a commercial transaction for consideration with, a person who has allegedly made unauthorized use of the means of identification of the victim, shall provide a copy of application and business transaction records in the control of the business entity, whether maintained by the business entity or by another person on behalf of the business entity, evidencing any transaction alleged to be a result of identity theft to—
(B) any Federal, State, or local government law enforcement agency or officer specified by the victim in such a request; or
(C) any law enforcement agency investigating the identity theft and authorized by the victim to take receipt of records provided under this subsection.
(2) Verification of identity and claim
Before a business entity provides any information under paragraph (1), unless the business entity, at its discretion, otherwise has a high degree of confidence that it knows the identity of the victim making a request under paragraph (1), the victim shall provide to the business entity—
(A) as proof of positive identification of the victim, at the election of the business entity—
(i) the presentation of a government-issued identification card;
(ii) personally identifying information of the same type as was provided to the business entity by the unauthorized person; or
(iii) personally identifying information that the business entity typically requests from new applicants or for new transactions, at the time of the victim’s request for information, including any documentation described in clauses (i) and (ii); and
(B) as proof of a claim of identity theft, at the election of the business entity—
(i) a copy of a police report evidencing the claim of the victim of identity theft; and
(ii) a properly completed—
(I) copy of a standardized affidavit of identity theft developed and made available by the Bureau; or
(II) an [3] affidavit of fact that is acceptable to the business entity for that purpose.
The request of a victim under paragraph (1) shall—
(A) be in writing;
(B) be mailed to an address specified by the business entity, if any; and
(C) if asked by the business entity, include relevant information about any transaction alleged to be a result of identity theft to facilitate compliance with this section including—
(i) if known by the victim (or if readily obtainable by the victim), the date of the application or transaction; and
(ii) if known by the victim (or if readily obtainable by the victim), any other identifying information such as an account or transaction number.
(4) No charge to victim
Information required to be provided under paragraph (1) shall be so provided without charge.
(5) Authority to decline to provide information
A business entity may decline to provide information under paragraph (1) if, in the exercise of good faith, the business entity determines that—
(A) this subsection does not require disclosure of the information;
(B) after reviewing the information provided pursuant to paragraph (2), the business entity does not have a high degree of confidence in knowing the true identity of the individual requesting the information;
(C) the request for the information is based on a misrepresentation of fact by the individual requesting the information relevant to the request for information; or
(D) the information requested is Internet navigational data or similar information about a person’s visit to a website or online service.
(6) Limitation on liability
Except as provided in section 1681s of this title, sections 1681n and 1681o of this title do not apply to any violation of this subsection.
(7) Limitation on civil liability
No business entity may be held civilly liable under any provision of Federal, State, or other law for disclosure, made in good faith pursuant to this subsection.
(8) No new recordkeeping obligation
Nothing in this subsection creates an obligation on the part of a business entity to obtain, retain, or maintain information or records that are not otherwise required to be obtained, retained, or maintained in the ordinary course of its business or under other applicable law.
(9) Rule of construction
No provision of subtitle A of title V of Public Law 106–102 [15 U.S.C. 6801 et seq.], prohibiting the disclosure of financial information by a business entity to third parties shall be used to deny disclosure of information to the victim under this subsection.
Except as provided in subparagraph (A), nothing in this subsection permits a business entity to disclose information, including information to law enforcement under subparagraphs (B) and (C) of paragraph (1), that the business entity is otherwise prohibited from disclosing under any other applicable provision of Federal or State law.
(10) Affirmative defense
In any civil action brought to enforce this subsection, it is an affirmative defense (which the defendant must establish by a preponderance of the evidence) for a business entity to file an affidavit or answer stating that—
(A) the business entity has made a reasonably diligent search of its available business records; and
(B) the records requested under this subsection do not exist or are not reasonably available.
(11) Definition of victim
For purposes of this subsection, the term “victim” means a consumer, with the intent to commit, or to aid or abet, an identity theft or a similar crime.
(12) Effective date
This subsection shall become effective 180 days after December 4, 2003 .
(13) Effectiveness study
Not later than 18 months after December 4, 2003 , the Comptroller General of the United States shall submit a report to Congress assessing the effectiveness of this provision.
(f) Disclosure of credit scores
Upon the request of a credit score, a credit scoring model may be different than the credit score that may be used by the lender, and a notice which shall include—
(A) the current credit score of the credit score of the credit reporting agency for a purpose related to the extension of credit;
(B) the range of possible credit scores under the model used;
(C) all of the key factors that adversely affected the credit score of thecredit score was created; and
(E) the name of the person or entity that provided the credit score or creditcredit score was created.
For purposes of this subsection, the following definitions shall apply:
The term “credit score”—
(i) means a numerical value or a categorization derived from a statistical tool or modeling system used by a person who makes or arranges a loan to predict the likelihood of certain credit behaviors, including default (and the numerical value or the categorization derived from such analysis may also be referred to as a “risk predictor” or “risk score”); and
(ii) does not include—
(I) any mortgage score or rating of an automated underwriting system that considers one or more factors in addition to credit information, including the loan to value ratio, the amount of down payment, or the financial assets of a key factors” means all relevant elements or reasons adversely affecting the credit score for the particular individual, listed in the order of their importance based on their effect on the credit score.
(3) Timeframe and manner of disclosure
The information required by this subsection shall be provided in the same timeframe and manner as the information described in subsection (a).
(4) Applicability to certain uses
This subsection shall not be construed so as to compel a credit providers in understanding the general credit behavior of a credit behavior of the credit scores developed by another person
This subsection shall not be construed to require a credit scores developed by another person or entity to provide a further explanation of them, or to process a dispute arising pursuant to section 1681i of this title, except that the person or entity who developed the score or developed the methodology of the score.
This paragraph shall not apply to a person or entity.
(6) Maintenance of credit scores not required
This subsection shall not be construed to require a credit scores in its files.
(7) Compliance in certain cases
In complying with this subsection, a credit score that is derived from a credit scoring model that is widely distributed to users by that credit score that assists the credit scoring assessment of the credit behavior of the credit behavior of the consumer; and
(B) a statement indicating that the information and credit scoring model may be different than that used by the lender.
(8) Fair and reasonable fee
A Bureau, for providing the information required under this subsection.
(9) Use of enquiries as a key factor
If a key factor that adversely affects the credit score of a consumer report, that factor shall be included in the disclosure pursuant to paragraph (1)(C) without regard to the numerical limitation in such paragraph.
(g) Disclosure of credit scores by certain mortgage lenders
Any person who makes or arranges loans and who uses a credit score, as defined in subsection (f), in connection with an application initiated or sought by a credit score or scores, a lender is only required to provide the notice contained in subparagraph (D).
(B) Disclosures in case of automated underwriting system
If a person that is subject to this subsection uses an automated underwriting system to underwrite a loan, that person may satisfy the obligation to provide a credit score by disclosing a credit score and associated key factors supplied by a credit score
However, if a numerical credit score is generated by an automated underwriting system used by an enterprise, and that score is disclosed to the person, the score shall be disclosed to theEnterprise defined
For purposes of this subparagraph, the term “enterprise” has the same meaning as in paragraph (6) of section 4502 of title 12.
(C) Disclosures of credit scores not obtained from a person that is subject to the provisions of this subsection and that uses a credit score, other than a credit score provided by a credit score by disclosing a credit score and associated key factors supplied by a credit score that was used:
“notice to the home loan applicant
“In connection with your application for a home loan, the lender must disclose to you the score that a key factors affecting your credit scores.
“The credit score is a computer generated summary calculated at the time of the request and based on information that a file. The scores are based on data about your credit history and payment patterns. Credit scores are important because they are used to assist the lender in determining whether you will obtain a loan. They may also be used to determine what interest rate you may be offered on the mortgage. Credit scores can change over time, depending on your conduct, how your credit history and payment patterns change, and how credit scoring technologies change.
“Because the score is based on information in your credit history, it is very important that you review the credit-related information that is being furnished to make sure it is accurate. Credit records may vary from one company to another.
“If you have questions about your credit score or the credit information that is furnished to you, contact the credit score. The person to—
(i) explain the information provided pursuant to subsection (f);
(ii) disclose any information other than a credit score or key factors, as defined in subsection (f);
(iii) disclose any credit score or related information obtained by the user after a loan has closed;
(iv) provide more than 1 disclosure per loan transaction; or
(v) provide the disclosure required by this subsection when another person has made the disclosure to the person pursuant to this subsection shall be limited solely to providing a copy of the information that was received from the person has liability under this subsection for the content of that information or for the omission of any information within the report provided by the Person defined as excluding enterprise
As used in this subsection, the term “person” does not include an enterprise (as defined in paragraph (6) of section 4502 of title 12).
(2) Prohibition on disclosure clauses null and void
Any provision in a contract that prohibits the disclosure of a credit score by a person who makes or arranges loans or a credit score pursuant to this subsection.
[1] See References in Text note below.
[2] So in original. Probably should be [3] So in original. The word “an” probably should not appear.
Editorial Notes
References in Text
Section 1681b(b)(4) of this title, referred to in subsec. (a)(3)(C)(i), was subsequently amended, and section 1681b(b)(4)(E) no longer defines the term “classified information”. However, such term is defined elsewhere in that section.
For the effective date of this subchapter, referred to in subsec. (b), see section 504(d) of Pub. L. 90–321, set out as an Effective Date note under section 1681 of this title.
Section 211(c) of the Fair and Accurate Credit Transactions Act of 2003, referred to in subsec. (c)(1)(B)(v), probably means section 211(d) of Pub. L. 108–159, which is set out as a note under section 1681j of this title and relates to the promulgation of regulations. Section 211(c) of Pub. L. 108–159 amended this section.
Public Law 106–102, referred to in subsec. (e)(9)(A), is Pub. L. 106–102, Nov. 12, 1999 , 113 Stat. 1338, known as the Gramm-Leach-Bliley Act. Subtitle A of title V of the Act is classified principally to subchapter I (§ 6801 et seq.) of chapter 94 of this title. For complete classification of this Act to the Code, see Short Title of 1999 Amendment note set out under section 1811 of Title 12, Banks and Banking, and Tables.
Amendments
2010—Pub. L. 111–203 substituted “thePub. L. 108–159, § 115, substituted “except that—
Subsec. (c). Pub. L. 108–159, § 211(c), amended subsec. (c) generally. Prior to amendment, subsec. (c) related to the summary of rights required to be included with disclosure toPub. L. 108–159, § 151(a)(1), added subsecs. (d) and (e).
1998—Subsec. (a)(3)(C). Pub. L. 105–347 added subpar. (C).
1996—Subsec. (a). Pub. L. 104–208, § 2408(e)(5)(A), in introductory provisions substituted “, and subject to section 1681h(a)(1) of this title” for “andPub. L. 104–208, § 2408(a), amended par. (1) generally. Prior to amendment, par. (1) read as follows: “The nature and substance of all information (except medical information) in itsPub. L. 104–208, § 2408(b), amended par. (3) generally. Prior to amendment, par. (3) read as follows: “The recipients of anyPub. L. 104–208, § 2408(c), added par. (5).
1994—Subsec. (a)(4). Pub. L. 103–325 added par. (4).
Statutory Notes and Related Subsidiaries
Effective Date of 2010 Amendment
Amendment by Pub. L. 111–203 effective on the designated transfer date, see section 1100H of Pub. L. 111–203, set out as a note under section 552a of Title 5, Government Organization and Employees.
Effective Date of 2003 Amendment
Amendment by Pub. L. 108–159 subject to joint regulations establishing effective dates as prescribed by Federal Reserve Board and Federal Trade Commission , except as otherwise provided, see section 3 of Pub. L. 108–159, set out as a note under section 1681 of this title.
Effective Date of 1998 Amendment
Amendment by Pub. L. 105–347 deemed to have same effective date as amendments made by section 2403 of Pub. L. 104–208, see section 7 of Pub. L. 105–347, set out as a note under section 1681a of this title.
Effective Date of 1996 Amendment
Amendment by Pub. L. 104–208 effective 365 days after Sept. 30, 1996 , with special rule for early compliance, see section 2420 of Pub. L. 104–208, set out as a note under section 1681a of this title.
Effective Date
Section effective upon the expiration of one hundred and eighty days following Oct. 26, 1970 , see section 504(d) of Pub. L. 90–321, as added by Pub. L. 91–508, set out as a note under section 1681 of this title.
Simplified Disclosure To Maximize Comprehensibility and Standardization
“(2) Simplified disclosure.—
Not later than 90 days after the date of enactment of this Act [ Sept. 30, 1996 ], eachFair Credit Reporting Act [15 U.S.C. 1681g(a)], for the purpose of maximizing the comprehensibility and standardization of such disclosures.
The Federal Trade Commission shall take appropriate action to assure that the goals of comprehensibility and standardization are achieved in accordance with paragraph (2).”
| CFR Title | Parts |
|---|---|
| 12 | 1022 |
| 14 | 374 |
| 16 | 1 , 610 |
§ 1022.73 Content, form, and timing of risk-based pricing notices.
(1) In general. The risk-based pricing notice required by § 1022.72(a) or (c) must include:
(i) A statement that a consumer report (or credit report) includes information about the consumer’s credit history and the type of information included in that history;
(ii) A statement that the terms offered, such as the annual percentage rate, have been set based on information from a consumer report;
(iii) A statement that the terms offered may be less favorable than the terms offered to consumers with better credit histories;
(iv) A statement that the consumer is encouraged to verify the accuracy of the information contained in the consumer report and has the right to dispute any inaccurate information in the report;
(v) The identity of each consumer reporting agency that furnished a consumer report used in the credit decision;
(vi) A statement that Federal law gives the consumer the right to obtain a copy of a consumer report from the consumer reporting agency or agencies identified in the notice without charge for 60 days after receipt of the notice;
(vii) A statement informing the consumer how to obtain a consumer report from the consumer reporting agency or agencies identified in the notice and providing contact information (including a toll-free telephone number, where applicable) specified by the consumer reporting agency or agencies;
(viii) A statement directing consumers to the Web site of the Bureau to obtain more information about consumer reports; and
(ix) If a credit score of the consumer to whom a person grants, extends, or otherwise provides credit is used in setting the material terms of credit:
(A) A statement that a credit score is a number that takes into account information in a consumer report, that the consumer’s credit score was used to set the terms of credit offered, and that a credit score can change over time to reflect changes in the consumer’s credit history;
(B) The credit score used by the person in making the credit decision;
(C) The range of possible credit scores under the model used to generate the credit score;
(D) All of the key factors that adversely affected the credit score, which shall not exceed four key factors, except that if one of the key factors is the number of enquiries made with respect to the consumer report, the number of key factors shall not exceed five;
(E) The date on which the credit score was created; and
(F) The name of the consumer reporting agency or other person that provided the credit score.
(2) Account review. The risk-based pricing notice required by § 1022.72(d) must include:
(i) A statement that a consumer report (or credit report) includes information about the consumer’s credit history and the type of information included in that credit history;
(ii) A statement that the person has conducted a review of the account using information from a consumer report;
(iii) A statement that as a result of the review, the annual percentage rate on the account has been increased based on information from a consumer report;
(iv) A statement that the consumer is encouraged to verify the accuracy of the information contained in the consumer report and has the right to dispute any inaccurate information in the report;
(v) The identity of each consumer reporting agency that furnished a consumer report used in the account review;
(vi) A statement that Federal law gives the consumer the right to obtain a copy of a consumer report from the consumer reporting agency or agencies identified in the notice without charge for 60 days after receipt of the notice;
(vii) A statement informing the consumer how to obtain a consumer report from the consumer reporting agency or agencies identified in the notice and providing contact information (including a toll-free telephone number, where applicable) specified by the consumer reporting agency or agencies;
(viii) A statement directing consumers to the Web site of the Bureau to obtain more information about consumer reports; and
(ix) If a credit score of the consumer whose extension of credit is under review is used in increasing the annual percentage rate:
(A) A statement that a credit score is a number that takes into account information in a consumer report, that the consumer’s credit score was used to set the terms of credit offered, and that a credit score can change over time to reflect changes in the consumer’s credit history;
(B) The credit score used by the person in making the credit decision;
(C) The range of possible credit scores under the model used to generate the credit score;
(D) All of the key factors that adversely affected the credit score, which shall not exceed four key factors, except that if one of the key factors is the number of enquires made with respect to the consumer report, the number of key factors shall not exceed five;
(E) The date on which the credit score was created; and
(F) The name of the consumer reporting agency or other person that provided the credit score.
(b) Form of the notice —
(1) In general. The risk-based pricing notice required by § 1022.72(a), (c), or (d) must be:
(i) Clear and conspicuous; and
(ii) Provided to the consumer in oral, written, or electronic form.
(2) Model forms. Model forms of the risk-based pricing notice required by § 1022.72(a) and (c) are contained in appendices H-1 and H-6 of this part. Appropriate use of Model Form H-1 or H-6 is deemed to comply with the requirements of § 1022.72(a) and (c). Model forms of the risk-based pricing notice required by § 1022.72(d) are contained in appendices H-2 and H-7 of this part. Appropriate use of Model Form H-2 or H-7 is deemed to comply with the requirements of § 1022.72(d). Use of the model forms is optional.
(c) Timing —
(1) General. Except as provided in paragraph (c)(3) of this section, a risk-based pricing notice must be provided to the consumer:
(i) In the case of a grant, extension, or other provision of closed-end credit, before consummation of the transaction, but not earlier than the time the decision to approve an application for, or a grant, extension, or other provision of, credit, is communicated to the consumer by the person required to provide the notice;
(ii) In the case of credit granted, extended, or provided under an open-end credit plan, before the first transaction is made under the plan, but not earlier than the time the decision to approve an application for, or a grant, extension, or other provision of, credit is communicated to the consumer by the person required to provide the notice; or
(iii) In the case of a review of credit that has been extended to the consumer, at the time the decision to increase the annual percentage rate (annual percentage rate referenced in § 1022.71(n)(1)(ii) in the case of a credit card) based on a consumer report is communicated to the consumer by the person required to provide the notice, or if no notice of the increase in the annual percentage rate is provided to the consumer prior to the effective date of the change in the annual percentage rate (to the extent permitted by law), no later than five days after the effective date of the change in the annual percentage rate.
(2) Application to certain automobile lending transactions. When a person to whom a credit obligation is initially payable grants, extends, or provides credit to a consumer for the purpose of financing the purchase of an automobile from an auto dealer or other party that is not affiliated with the person, any requirement to provide a risk-based pricing notice pursuant to this subpart is satisfied if the person:
(i) Provides a notice described in §§ 1022.72(a), 1022.74(e), or 1022.74(f) to the consumer within the time periods set forth in paragraph (c)(1)(i) of this section, § 1022.74(e)(3), or § 1022.74(f)(4), as applicable; or
(ii) Arranges to have the auto dealer or other party provide a notice described in §§ 1022.72(a), 1022.74(e), or 1022.74(f) to the consumer on its behalf within the time periods set forth in paragraph (c)(1)(i) of this section, § 1022.74(e)(3), or § 1022.74(f)(4), as applicable, and maintains reasonable policies and procedures to verify that the auto dealer or other party provides such notice to the consumer within the applicable time periods. If the person arranges to have the auto dealer or other party provide a notice described in § 1022.74(e), the person’s obligation is satisfied if the consumer receives a notice containing a credit score obtained by the dealer or other party, even if a different credit score is obtained and used by the person on whose behalf the notice is provided.
(3) Timing requirements for contemporaneous purchase credit. When credit under an open-end credit plan is granted, extended, or provided to a consumer in person or by telephone for the purpose of financing the contemporaneous purchase of goods or services, any risk-based pricing notice required to be provided pursuant to this subpart (or the disclosures permitted under § 1022.74(e) or (f)) may be provided at the earlier of:
(i) The time of the first mailing by the person to the consumer after the decision is made to approve the grant, extension, or other provision of open-end credit, such as in a mailing containing the account agreement or a credit card; or
(ii) Within 30 days after the decision to approve the grant, extension, or other provision of credit.
(d) Multiple credit scores —
(1) In general. When a person obtains or creates two or more credit scores and uses one of those credit scores in setting the material terms of credit, for example, by using the low, middle, high, or most recent score, the notices described in paragraphs (a)(1) and (2) of this section must include that credit score and information relating to that credit score required by paragraphs (a)(1)(ix) and (a)(2)(ix). When a person obtains or creates two or more credit scores and uses multiple credit scores in setting the material terms of credit by, for example, computing the average of all the credit scores obtained or created, the notices described in paragraphs (a)(1) and (2) of this section must include one of those credit scores and information relating to credit scores required by paragraphs (a)(1)(ix) and (a)(2)(ix). The notice may, at the person’s option, include more than one credit score, along with the additional information specified in paragraphs (a)(1)(ix) and (a)(2)(ix) of this section for each credit score disclosed.
(2) Examples.
(i) A person that uses consumer reports to set the material terms of credit cards granted, extended, or provided to consumers regularly requests credit scores from several consumer reporting agencies and uses the low score when determining the material terms it will offer to the consumer. That person must disclose the low score in the notices described in paragraphs (a)(1) and (2) of this section.
(ii) A person that uses consumer reports to set the material terms of automobile loans granted, extended, or provided to consumers regularly requests credit scores from several consumer reporting agencies, each of which it uses in an underwriting program in order to determine the material terms it will offer to the consumer. That person may choose one of these scores to include in the notices described in paragraph (a)(1) and (2) of this section.
https://www.law.cornell.edu/uscode/text/15/1681ghttps://www.consumerfinance.gov/rules-policy/regulations/1022/73/
