Enhances fraud alert protections

Section 605A of the Fair Credit Reporting Act (15 U.S.C. 1681c–1) is amended— (1) in subsection (a)— (A) in the subsection heading, by striking One-call and inserting One-year; (B) in paragraph (1)— (i) in the paragraph heading, by striking Initial alerts and inserting In general; (ii) by inserting or harmed by the unauthorized disclosure of the consumer’s financial or personally identifiable information, after identity theft,; (iii) in subparagraph (A), by striking and at the end; (iv) in subparagraph (B)— (I) by inserting 1-year before fraud alert; and (II) by striking the period at the end and inserting; and; and (v) by adding at the end the following new subparagraph: (C) upon the expiration of the 1-year period described in subparagraph (A) or a subsequent 1-year period, and in response to a direct request by the consumer or such representative, continue the fraud alert for a period of 1 additional year if the information asserted in this paragraph remains applicable.; and (C) in paragraph (2)— (i) by inserting 1-year before fraud alert; (ii) in subparagraph (A), by inserting and credit score after file; and (iii) in subparagraph (B), by striking any request described in subparagraph (A) and inserting the consumer reporting agency includes the 1-year fraud alert in the file of a consumer; (2) in subsection (b)— (A) in the subsection heading, by striking Extended and inserting Seven-year; (B) in paragraph (1)— (i) in subparagraph (B)— (I) by striking 5-year period beginning on the date of such request and inserting such 7-year period; and (II) by striking and at the end; (ii) in subparagraph (C)— (I) by striking extended and inserting 7-year; and (II) by striking the period at the end and inserting; and; and (iii) by adding at the end the following new subparagraph: (D) upon the expiration of such 7-year period or a subsequent 7-year period, and in response to a direct request by the consumer or such representative, continue the fraud alert for a period of 7 additional years if the consumer or such representative submits an updated identity theft report.; and (C) in paragraph (2), by amending subparagraph (A) to read as follows: (A) disclose to the consumer that the consumer may request a free copy of the file and credit score of the consumer pursuant to section 612(d) during each 12-month period beginning on the date on which the 7-year fraud alert was included in the file and ending on the date of the last day that the 7-year fraud alert applies to the consumer’s file; and; (3) in subsection (c)— (A) by redesignating paragraphs (1), (2), and (3), as subparagraphs (A), (B), and (C), respectively (and conforming the margins accordingly); (B) by striking Upon the direct request and inserting: (1) In general Upon the direct request; and (C) by adding at the end the following new paragraph: (2) Access to free reports and credit scores If a consumer reporting agency includes an active duty alert in the file of an active duty military consumer, the consumer reporting agency shall— (A) disclose to the active duty military consumer that the active duty military consumer may request a free copy of the file and credit score of the active duty military consumer pursuant to section 612(d), during each 12-month period beginning on the date that the activity duty military alert is requested and ending on the date of the last day the active duty alert applies to the file of the active duty military consumer; and (B) provide to the active duty military consumer all disclosures required to be made under section 609, without charge to the consumer, not later than 3 business days after any request described in subparagraph (A).; (4) by amending subsection (d) to read as follows: (d) Procedures Each consumer reporting agency described in section 603(p) shall include on the webpage required under subsection (i) policies and procedures to comply with this section, including policies and procedures— (1) that inform consumers of the availability of 1-year fraud alerts, 7-year fraud alerts, active duty alerts, and security freezes (as applicable); (2) that allow consumers to request 1-year fraud alerts, 7-year fraud alerts, and active duty alerts (as applicable) and to place, temporarily lift, or fully remove a security freeze in a simple and easy manner; and (3) for asserting in good faith a suspicion that the consumer has been or is about to become a victim of identity theft, fraud, or a related crime, or harmed by the unauthorized disclosure of the consumer’s financial or personally identifiable information, for a consumer seeking a 1-year fraud alert or security freeze.; (5) in subsection (e)— (A) by inserting 1-year or 7-year before fraud alert; and (B) by amending paragraph (3) to read as follows: (3) subparagraphs (A) and (B) of subsection (c)(1), in the case of a referral under subsection (c)(1)(C).; (6) in subsection (f), by striking or active duty alert and inserting, active duty alert, or security freeze (as applicable); (7) in subsection (g)— (A) by inserting or has been harmed by the unauthorized disclosure of the consumer’s financial or personally identifiable information, or to inform such agency of the consumer’s participation in credit restoration or rehabilitation under section 605D, 605E, or 605F, after identity theft,; and (B) by inserting or security freezes after request alerts; (8) in subsection (h)— (A) in paragraph (1)— (i) in the paragraph heading, by striking Initial and inserting 1-year; and (ii) by striking initial and inserting 1-year each place such term appears; and (B) in paragraph (2)— (i) in the paragraph heading, by striking Extended and inserting 7-year; and (ii) by striking extended and inserting 7-year each place such term appears; and (9) in subsection (i)(4)— (A) by striking subparagraphs (E) and (I); and (B) by redesignating subparagraphs (F), (G), (H), and (J) as subparagraphs (E), (F), (G), and (H), respectively.