FCRA Flashcards
FCRA applies to financial institutions that operate in what types of capacities? (5)
Financial institutions that:
-Act as consumer reporting agencies
-Are procurers and users of information (credit grantors, purchasers of dealer paper, or when opening deposit accounts)
-Are furnishers and transmitters of information (reporting info to consumer reporting agencies or third parties)
-are marketers of credit or insurance products
-are employers
What is the definition of a consumer report under FCRA?
any written, oral, or other communication of any information by a consumer reporting agency that bears on a consumer’s creditworthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living which is used in establishing the consumer’s eligibility for:
-Credit or insurance to be used primarily for personal, family or household purposes
-employment purposes
-any other purpose authorized under section 604
The term consumer report does NOT include what types of information sharing? (6)
Exceptions for financial institutions so they can share information without becoming a consumer reporting agency.
-any report containing information solely about transactions or experiences between a consumer and the institution making the report
-any communication of that transaction or experience among entities related by common ownership, affiliation (different banks that are members of the same holding company)
-communication of other info among persons related by common ownership if it is disclosed to the consumer and the consumer is given the opportunity beforehand to direct the info not be communicated among such persons.
-any authorization or approval of a specific extension of credit by the issuer of a credit card
-Any report in which a institution who has been requested by a third party to make a specific extension of credit directly or indirectly to a consumer, such as a lender who has received a request from a broker, conveys his or her decision with respect to such request, if the third party advises the consumer of the name and address of the financial institution that made the credit decision, and the institution makes the adverse action disclosures to the consumer; or
-Joint user rule, where users of consumer report may share information if they are jointly involved in the decision to approve a consumers request for a product or service.
What is the definition of a person under FCRA?
means any individual, partnership, corporation, trust, estate, cooperative, association, government or governmental subdivision or agency, or other entity.
What is an investigative consumer report?
means a consumer report or portion thereof in which information on a consumer’s character, general reputation, personal characteristics, or mode of living is obtained through personal interviews with neighbors, friends, or associates of the consumer reported on or with others with whom he is acquainted or who may have knowledge concerning any such items of information.
However, such information does not include specific factual information on a consumer’s credit record obtained directly from a creditor of the consumer or from a consumer reporting agency when such information was obtained directly from a creditor of the consumer or from the consumer.
What is the definition of an Adverse Action under FCRA? (5)
Same meaning as under ECOA:
A denial or revocation of credit, a change in terms of an existing credit arrangement, or refusal to grant credit in substantially the same amount or on terms substantially similar to those requested.
Under FCRA there are additional meanings:
-denial or cancellation of, an increase in any charge for, or a reduction or other adverse or unfavorable change in the terms of coverage or amount of any insurance when underwriting insurance
-denial of employment or any other decision for employment purposes that adversely affects any current or prospective employee
-A denial or cancellation of, an increase in any charge for, or other adverse change in the terms of any license or benefit described in section 604(a)(3)(D)
- An action taken or determination that is (a) made in connection with an application made by, or transaction initiated by, any consumer, or in connection with a review of an account to determine whether the consumer continues to meet the terms of the account, and (b) adverse to the interests of the consumer.
What is the definition of a consumer reporting agency?
means any person which, for monetary fees, dues, or on a cooperative nonprofit basis, regularly engages in whole or in part in the practice of assembling or evaluating consumer credit information or other information on consumers for the purpose of furnishing consumer reports to third parties, and which uses any means or facility of interstate commerce for the purpose of preparing or furnishing consumer reports.
FCRA allows a consumer reporting agency to legally furnish a consumer report under what circumstances?
-General (4)
-Sub categories for institutions (6)
-Response to a court order of subpoena
-accordance with written instructions of consumer
-to a financial institution which has reason to believe:
–intends to use report in connection with credit transaction (extending, reviewing, and collecting credit)
–intents to use for employment
–in underwriting of insurance
–in determining consumer eligibility for a license or other benefit granted by gov that is required by law to consider an applicants financial responsibility.
–intends to use info, as a potential investor/servicer, or current issuer in connection with a valuation of the credit or prepayment risks associated with an existing credit obligation
–otherwise has a legitimate business need for the info in connection with a transaction initiated by the consumer OR to review an account to determine if consumer continues to meet the terms of the account.
-in response to a request by the head of a state or local child support agency if the person certifies various information to the agency regarding the need to obtain the report
The financial institution must meet what requirements to procure an investigative consumer report? (4)
- The institution clearly and accurately discloses to the consumer that an investigative consumer report may be obtained.
- The disclosure contains a statement of the consumer’s right to request other information about the report, and a summary of the consumer’s rights under the FCRA.
- The disclosure is in writing and is mailed or otherwise delivered to the consumer not later than three business days after the date on which the report was first requested.
- The financial institution procuring the report certifies to the consumer reporting agency that it has complied with the disclosure requirements and will comply in the event that the consumer requests additional disclosures about the report.
Are financial institutions required to maintain FCRA procedures?
Yes.
Financial institutions should employ procedures, controls, or other safeguards to ensure that consumer reports are obtained and used only in situations for which there are permissible purposes.
True or false:
All financial institutions are consumer reporting agencies
False.
By their very nature, banks, credit unions, and thrifts have a significant amount of consumer information that could constitute a consumer report, and thus communication of this information could cause the institution to become a consumer reporting agency.
The FCRA contains several exceptions that enable a financial institution to communicate this type of
information, within strict guidelines, without becoming a consumer reporting agency.
Would the financial institution be considered a consumer reporting agency in the following circumstance?
GLBA permits a financial institution to share a list of its customers and information such as their credit scores with another financial institution to jointly market or sponsor other financial products or services
This communication may be considered a consumer report under FCRA and could potentially cause the sharing financial institution to become a consumer reporting agency.
the FCRA may also restrict activities that the GLBA permits.
Would the financial institution be considered a consumer reporting agency in the following circumstance?
Financial institution shares information related to its own transactions or experiences with a consumer (payment history, account with the institution) with a non-affiliated third party
This information sharing would not be considered a consumer report, therefore the institution is not a consumer reporting agency.
HOWEVER, this type of information sharing may be restricted under the Privacy Regulations (GLBA) because it meets the definition of non-public personal information; therefore, sharing it with a non-affiliated third party may be subject to an opt out under the privacy regulations.
Would the financial institution be considered a consumer reporting agency in the following circumstance?
Institution shares a consumer’s credit score with an affiliate without providing a notice to the consumer or an opportunity to opt out.
Yes, the financial institution may become a consumer reporting agency under FCRA if they share this information without notifying the consumer beforehand and giving them the chance to opt out.
This opt out right must be contained in the institutions Privacy notice.
Where would a financial institution need to disclose the opt out information for a consumer if they do not want the institution to share information with affiliates?
This opt out notice must be contained in the institutions Privacy notice.
Would the financial institution be considered a consumer reporting agency in the following circumstance?
A consumer applies for a mortgage loan that will have a high loan-to-value ratio, and thus the lender will require private mortgage insurance (PMI) in order to approve the application. The PMI will be provided by an outside company. The lender and PMI company share consumer report information to decide whether to grant products to the consumer.
No. The lender and the PMI company can share consumer report information about the consumer because both entities have permissible purposes to obtain the information and both are jointly involved in the decision to grant the products to the consumer. This exception applies to entities that are affiliated or non-affiliated third parties.
It is important to note that the GLBA will still apply to the sharing of nonpublic, personal information with non-affiliated third parties; therefore, financial institutions should be aware that sharing under the FCRA joint user rule may still be limited or prohibited by the GLBA.
A creditor is generally prohibited from using medical information in connection with any determination of a consumer’s eligibility for credit. However a creditor does not violate this prohibition if it receives the medical info in connection with any determination for credit without specifically requesting ______ ______.
However, a creditor may only use this medical info with either the ________ ________ exception or one of the other _______ _________ provided in the rules.
Medical information.
Financial Information Exception
Other Specified Exceptions
What is the Financial Information Exception to using medical information in connection with any determination of a consumer’s eligibility for credit? (3)
The rules allow a creditor to obtain and use medical information pertaining to a consumer in connection with any determination of the consumer’s eligibility or continued eligibility for credit, so long as:
- The information is the type of information routinely used in making credit eligibility determinations, such as information relating to debts, expenses, income, benefits, assets, collateral, or the purpose of the loan, including the use of the loan proceeds;
- The creditor uses the medical information in a manner and to an extent that is no less favorable than it would use comparable information that is not medical information in a credit transaction; AND
- The creditor does not take the consumer’s physical, mental, or behavioral health, condition or history, type of treatment, or prognosis into account as part of any such determination.
How should a creditor consider the debt in the following example?
Consumer includes on an application for credit information about two $20,000 debts. One debt is to a hospital; the other is to a retailer.
The creditor may use the medical information in a manner and to an extent that is no less favorable than it would use comparable, non-medical information.
i.e. The creditor may use and consider the debt to the hospital in the same manner in which they consider the debt to the retailer, such as including the debts in the calculation of the consumer’s proposed debt-to-income ratio. In addition, the consumer’s payment history of the debt to the hospital may be considered in the same manner as the debt to the retailer.
Is the following example allowed under FCRA’s Financial information exception to medical information?
If a creditor has a routine policy of declining consumers who have a 90-day past due installment loan to a retailer, but does not decline consumers who have a 90-day past due debt to a hospital. Is the creditor allowed to continue this policy without violating FCRA medical information rules?
the financial information exception would allow a creditor to continue this policy without violating the rules because in these cases, the creditor’s treatment of the debt to the hospital is more favorable to the consumer.
True or false:
A creditor may take a consumer’s physical, mental, or behavioral health, condition or history, type of treatment, or prognosis into account as part of any determination regarding the consumer’s eligibility, or continued eligibility of credit.
False.
The creditor may only consider the financial implication, such as the status of the debt with the hospital, continuance of disability income, etc.
In addition to the financial information exception, the rules also provide for what nine specific exceptions under which a creditor can obtain and use medical information in its determination of the consumer’s eligibility, or continued eligibility for credit?
- To determine if the use of a power of attorney is necessary, of if the consumer has legal capacity to contract when a person seeks to exercise a power of attorney based on a medical condition.
-to comply with local, state, or federal laws
-to determine, at the customers request, if they qualify for a special credit program or credit assistance program that is designed to meet the needs of the consumers medical condition and is established and administered based on a written plan (w/ credit standards/procedures and identified benefitting class).
-for fraud prevention/ detection
-for the purpose of financing medical products/services to verify purpose of the loan
-if consumer/legal rep requests creditor use medical info in determining eligibility to accommodate consumer’s circumstances and as long as it is documented by creditor.
-determine if provisions of a forbearance program is triggered by a medical condition or event apply to the consumer
-determine eligibility for a debt cancellation/ suspension contract if a medical condition/ event is a triggering event for the provisions of benefits under the contract.
-determine eligibility for credit insurance product if a medical condition/ event is a trigger for the provision of benefits under the product.
Can a creditor use medical records to determine a consumer’s eligibility for credit in the following scenario:
Person A is attempting to act on behalf of Person B under a Power of Attorney that is invoked based on a medical event, a creditor obtains and uses medical information to verify that Person B has experienced a medical condition or event such that Person A is allowed to act under the Power of Attorney.
Yes, a creditor is allowed to obtain and use medical information in this situation as it qualifies as a specific exception under FCRA.
Can a creditor use medical records to determine a consumer’s eligibility for credit in the following scenario:
At consumer’s request, a creditor grants an exception to its ordinary policy to accommodate a medical condition the consumer has experienced.
Yes, an exception allows a creditor to consider medical information in this context, but it does not require
a creditor to make such an accommodation nor does it require a creditor to grant a loan that is unsafe or unsound.
Can a creditor use medical records to determine a consumer’s eligibility for credit in the following scenario:
Creditor has a policy of delaying foreclosure in cases where a consumer is experiencing a medical hardship.
Yes, an exception allows the creditor to use medical information to determine if the policy would apply to the consumer. This exception does not require a creditor to grant forbearance, it merely provides an exception so that a creditor may consider medical information in these instances.
If a creditor shares with an affiliate any of the following:
-medical information
-individualized list or description based on the payment transactions of the consumer for medical products/ services
-aggregate list of identified consumers based on payment transaction for medical products/ services
is this considered a consumer report, or an exception to that definition?
This would be considered a consumer report shared with an affiliate, as sharing any of this information does not apply to the exclusions under the definition of a “consumer report”
Effectively, this means that if a person shares medical information, that person becomes a consumer reporting agency, subject to all of the other substantive requirements of the FCRA.
However there are some exceptions.
What are the exceptions to sharing medical information with affiliates? (6)
To avoid becoming a consumer reporting agency.
A creditor may share medical information with affiliates without becoming a consumer reporting agency under the following circumstances:
-in connection w/ business of insurance or annuities
-for any purpose permitted without authorization under HIPAA
-for any purpose described in section 1179 of HIPAA
-for any purpose described in 502(e) of GLBA
-in determining a consumer’s eligibility for credit consistent with the financial information exceptions or specific exceptions
-as otherwise permitted by order of an FFIEC agency
What is the definition of eligibility information?
Includes transaction and experience information, also the type of information found in consumer reports (third party info, credit scores). This does not include aggregate or blind data that does not contain personal identifiers such as account number, name or address.
What is the definition of a pre-existing business relationship? (3)
Relationship between a financial institution (or a person’s licensed agent), and a consumer based on:
a. A financial contract between the person and the consumer which is in force on the date on which the consumer is sent a solicitation covered by the affiliate marketing regulation;
b. The purchase, rental, or lease by the consumer of the person’s goods or services, or a financial transaction (including holding an active account or a policy in force, or having another continuing relationship) between the consumer and the person, during the 18- month period immediately preceding the date on which the consumer is sent a solicitation covered by the affiliate marketing regulation; or
c. An inquiry or application by the consumer regarding a product or service offered by that person during the three-month period immediately preceding the date on which the consumer is sent a solicitation covered by the affiliate marketing regulation.
What is the definition of a solicitation? (2)
means the marketing of a product or service initiated by a person, such as a financial institution, to a particular consumer that is:
a. Based on eligibility information communicated to that person by its affiliate; and
b. Intended to encourage the consumer to purchase or obtain such product or service.
Ex: telemarketing call, direct mail, email.
Does not include marketing communications directed at the general public (TV, magazine, billboard)
A creditor and its subsidiaries may not use eligibility information about a consumer that it receives from an affiliate to make a solicitation for marketing purposes, unless what? (3)
- It is clearly and conspicuously disclosed to the consumer in writing or, if the consumer agrees, electronically, in a concise notice that the financial institution may use eligibility information about that consumer that it received from an affiliate to make solicitations for marketing purposes to the consumer;
- The consumer is provided a reasonable opportunity and a reasonable and simple method to “opt out” (that is, the consumer prohibits the financial institution from using eligibility information to make solicitations for marketing purposes to the consumer); and
- The consumer has not opted out.
Can the bank use information shared with its affiliates for marketing in the following example?
A consumer has a homeowner’s insurance policy with an insurance company. The insurance company shares eligibility information about the consumer with its affiliated depository institution. Based on that eligibility information, the depository institution wants to make a solicitation to the consumer about its home equity loan products. The depository institution does not have a pre-existing business relationship with the consumer and none of the other exceptions apply.
The depository institution may not use eligibility information it received from its insurance affiliate to make solicitations to the consumer about its home equity loan products unless the insurance company gave the consumer a notice and opportunity to opt out and the consumer does not opt out.
In what circumstances is a creditor considered making a solicitation for marketing purposes? (3)
If:
-The bank receives eligibility info from an affiliate, including placing it in a common database
-the bank uses the info to do one of the following:
–identify consumer/ type to receive solicitation
–establish criteria used to select consumer for solicitation
–decide which of creditor’s products or services to market/ tailor to that consumer
AND
-as a result the consumer is provided a solicitation
What is constructive sharing?
Constructive sharing occurs when a financial institution provides criteria to an affiliate to use in marketing the financial institution’s product and the affiliate uses the criteria to send marketing materials to the affiliate’s own customers that meet the criteria.
In what situations, is a creditor considered to be participating in Constructive Sharing and is not considered to be using shared eligibility info to make solicitations? (2)
Second situation has 5 sub items
-Creditor provides criteria for consumer to whom it would like its affiliate to market the Creditor’s products. Then based on this criteria, affiliate uses eligibility info in connection with its own pre-existing business relationship w/ consumer to market the creditor’s products/services.
-A service provider, applying the creditor’s criteria, uses info from an affiliate (shared database) to market the creditor’s products or services as long as:
–affiliate controls access and use of eligibility info under written agreement
–agreement establishes specific T&C under which servicer provider can access and use data for marketing
–agreement requires service provider to implement policies and procedures to ensure data is used in accordance with T&C on marketing
–affiliate is identified on or with marketing materials provided to the consumer
–creditor does not directly use its affiliate’s eligibility info in a manner described as “making solicitations” under FCRA
In what situations do the initial notice and opt out requirements for affiliate marketing not apply to a financial institution that uses eligibility information it receives from an affiliate? (6)
- To make a solicitation for marketing purposes to a consumer with whom the financial institution has a preexisting business relationship;
- To facilitate communications to an individual for whose benefit the financial institution provides employee benefit or other services pursuant to a contract with an employer;
- To perform services on behalf of an affiliate (but this would not allow solicitation where the consumer has opted out);
- In response to a communication about the financial institution’s products or services initiated by the consumer;
- In response to a consumer’s authorization or request to receive solicitations; or
- If the financial institution’s compliance with the affiliate marketing regulation would prevent it from complying with State insurance laws pertaining to unfair discrimination in any state in which the financial institution is lawfully doing business.
Regarding affiliate marketing, a financial institution must provide to the consumer a reasonable and simple method to ____ ____. The opt-out notice must be ____, _____, ___, and must accurately disclose the consumer may elect to limit the use of ______ ______ to make solicitations to the consumer.
Opt-out
Clear, Conspicuous, and concise
Eligibility information
True or false:
Affiliate marketing opt out notices cannot be coordinated and consolidated with any other notice or disclosure such as the GLBA notices.
False, The opt out notice can be coordinated and consolidated with any other notice or disclosure required under Law.
In an affiliate marketing opt out notice, a consumer may be given the opportunity to choose from a menu of alternatives when electing to prohibit solicitation, such as? (3)
- Electing to prohibit solicitations from certain types of affiliates covered by the opt-out notice but not other types of affiliates covered by the notice,
- Electing to prohibit solicitations based on certain types of eligibility information but not other types of eligibility information, or
- Electing to prohibit solicitations by certain methods of delivery but not other methods of delivery.
One of the options however, must allow the consumer to prohibit all solicitations from all of the affiliates that are covered by the notice.
Does an affiliate marketing opt- out notice apply to continuing relationships?
i.e a consumer opts out from a notice received in relation to their mortgage account, but later they open a deposit account. Does the opt out notice apply across all account types?
Yes, the opt out notice may apply to eligibility information obtained from one or more continuing relationships as long as the notice adequately describes the continuing relationships covered.
if there is a lapse in the relationship, the consumer would need to receive a new opt out notice after that relationship is established again and the creditor plans to use the eligibility information on the consumer.
How long does an opt-out of affiliate marketing last?
Must be effective for a period of at least 5 years.
After the affiliate marketing opt-out period expires (5yrs), a financial institution may not make solicitations based on eligibility information it receives from an affiliate to a consumer who previously opted-out, Unless what? (2)
Unless:
1. The consumer receives a renewal notice and opportunity to opt out, and the consumer does not renew the opt-out;
or
- An exception to the notice and opt-out requirements
applies.
What elements are required as part of an affiliate marketing opt-out renewal notice? (5)
-Elements of the original opt-out notice
-that the consumer previously elected to limit the use of certain info to make solicitations to the consumer
-the consumer’s election has expired or is about to expire
-consumer may elect to renew the consumer’s previous election
-if applicable, that the election to renew will apply for a specified period of time stated in the notice and that the consumer will be allowed to renew the election once that period expires.
Who is required to provide the affiliate marketing opt out notice to consumers?
Who is required to provide the renewal notice at expiration?
The affiliate solicitor or an affiliate group
The same affiliate who provided the previous opt out notice, its successor or an affiliate group that provided the previous notice.
What are the requirements under FCRA regarding the use of consumer reports for employment purposes? (2)
not including adverse action requirements
-FCRA requires written permission of the consumer to procure a consumer report for “employment purposes:
-Prior to procuring the report, required to provide a clear and conspicuous disclosure that a consumer report may be obtained for employment purposes
Prior to taking any adverse action involving employment that is based in whole or in part on the consumer report, the user generally must provide to the consumer with what? (2)
What about at the time of adverse action? (1)
Prior to:
1. A copy of the report; and
2. A description in writing of the rights of the consumer
under this title, as prescribed by the FTC under section
(609)(c)(3).
At the time of AA:
-the consumer must be provided with an adverse action notice
What is prescreening?
When a financial institution obtains a list from a consumer reporting agency of consumers who meet certain predetermined creditworthiness criteria and who have not elected to be excluded from such lists.
What information is permitted to be included on a prescreening list? (3)
- The name and address of a consumer;
- An identifier that is not unique to the consumer and that is used by the person solely for the purpose of verifying the identity of the consumer; and
- Other information pertaining to a consumer that does not identify the relationship or experience of the consumer with respect to a particular creditor or other entity.
In order for an institution to obtain and use a prescreening list they must do what?
The institution must make a “firm offer of credit or insurance” to each person on the list.
Is a creditor required to grant the credit to the consumer in the following example?
Assume a home mortgage lender obtains a list from a consumer reporting agency of everyone in County
X, with a current home mortgage loan and a credit score of 700. The lender will use this list to market a 2nd lien home equity loan product. The lender’s other non-consumer report criteria, in addition to those used in the prescreened
list for this product, include a maximum total debt-to income ratio (DTI) of 50% or less. Some of the criteria can be screened by the consumer reporting agency, but others, such as the DTI, must be determined individually when consumers respond to the offer.
A consumer responds with a DTI of 60%.
The lender does not have to grant the loan.
An institution is not required to grant credit or insurance if
the consumer is not creditworthy or insurable, or cannot furnish required collateral, provided that the underwriting criteria are determined in advance, and applied consistently.