100.54(1)(a)
(a) “Business day" means a business day, as defined in
s. 421.301 (6), that is not a legal holiday under
s. 995.20 or a federal legal holiday.
100.54(1)(d)
(d) “Reseller" means a consumer reporting agency that acts only as a reseller of credit information by assembling and merging information contained in a database of another consumer reporting agency or multiple consumer reporting agencies, and does not maintain a permanent database of credit information from which new consumer reports are produced.
100.54(1)(e)
(e) “Security freeze" means a notice included with an individual's consumer report that indicates that releases of the consumer report are subject to this section.
100.54(2)(a)(a) Except as provided in
par. (c), a consumer reporting agency shall include a security freeze with an individual's consumer report if the individual does all of the following:
100.54(2)(a)1.
1. Sends a request by certified mail to an address designated by the consumer reporting agency, or sends a request directly to the consumer reporting agency by any other means that the consumer reporting agency may provide.
100.54(2)(a)2.
2. Provides the consumer reporting agency with proper identification.
100.54(2)(b)
(b) No later than 5 business days after an individual satisfies the requirements under
par. (a) 1. to
3., a consumer reporting agency shall include a security freeze with the individual's consumer report. No later than 10 business days after including the security freeze with the consumer report, the consumer reporting agency shall send the individual a notice that does all of the following:
100.54(2)(b)1.
1. Confirms that a security freeze is included with the individual's consumer report.
100.54(2)(b)2.
2. Includes a unique personal identification number, password, or other device for the individual to authorize release of the consumer report.
100.54(2)(b)3.
3. Describes the procedure for authorizing release of the consumer report.
100.54(2)(c)1.
1. A reseller, except that if a reseller obtains from another consumer reporting agency an individual's consumer report that includes a security freeze, the reseller shall include the security freeze with any consumer report regarding the individual that the reseller maintains.
100.54(2)(c)2.
2. A consumer reporting agency that is a check services or fraud prevention services company which issues reports on incidents of fraud or authorizations for the purpose of approving or processing negotiable instruments, electronic funds transfers, or similar methods of payments.
100.54(2)(c)3.
3. A consumer reporting agency that is a deposit account information service company which issues reports regarding account closures due to fraud, substantial overdrafts, automated teller machine abuse, or similar negative information regarding an individual to inquiring financial institutions for use only in reviewing an individual's request for a deposit account at the inquiring financial institution.
100.54(3)
(3) Prohibition. Except as provided in
sub. (8), if an individual's consumer report includes a security freeze, a consumer reporting agency may not release the consumer report to any person for any purpose related to the extension of credit unless the individual gives prior authorization for the release under
sub. (4).
100.54(4)(a)(a) An individual whose consumer report includes a security freeze may authorize a consumer reporting agency to release the report by doing all of the following:
100.54(4)(a)1.
1. Contacting the consumer reporting agency using a point of contact designated by the consumer reporting agency.
100.54(4)(a)2.
2. Providing proper identification and the personal identification number, password, or other device specified in
sub. (2) (b) 2.
100.54(4)(a)3.
3. Specifying the time period for which the release is authorized.
100.54(4)(b)
(b) If an individual satisfies the requirements under
par. (a) 1. to
4., the consumer reporting agency shall release the individual consumer report during the time period specified by the individual, except that a consumer reporting agency is not required to release a consumer report sooner than 3 business days after the individual contacts the consumer reporting agency under
par. (a) 1. A consumer reporting agency may establish procedures for releasing consumer reports sooner than 3 business days for individuals who satisfy the requirements under
par. (a) 1. to
4. by telephone, facsimile, or the Internet, or by use of other electronic media.
100.54(5)
(5) Release of reports. A consumer reporting agency may release an individual's consumer report that includes a security freeze if any of the following apply:
100.54(5)(b)
(b) The individual requests removal of the security freeze under
sub. (6).