Law / United States / 
Florida
Consumer report security freeze
In force since .
A data subject rights rule binding private bodies.
- Obligation class
- Data subject rights, Consent
- Audit expectation
- none
As of .
What it requires
- If you are a consumer reporting agency, place a security freeze on a consumer report no later than 5 business days after you receive the consumer's written request, sent by certified mail with information that properly identifies the consumer (Florida Statutes Section 501.005(2), (3)).
- Within 10 business days after you institute a freeze, send the consumer written confirmation and a unique personal identification number or password for authorizing removal of the freeze (Section 501.005(4)).
- While a freeze is in effect, do not release the consumer report, credit score or any information in the report to a third party without the consumer's express authorization, except for a use Section 501.005(12) lists; you may tell a third party that a freeze is in effect (Section 501.005(1), (12)).
- Comply with a request to temporarily lift a freeze no later than 3 business days after you receive it, and remove a freeze within 3 business days after you receive the consumer's request for removal with proper identification and the personal identification number or password (Section 501.005(6), (11)).
These lines are LexLint's reading of the law's text, as of .
What it makes you log
Logging duty
Section 501.005 requires a consumer reporting agency to place, lift and remove a security freeze on a consumer's request and to confirm a freeze in writing. A consumer's freeze request is not a log, and the section names no duty to keep a log or a record of requests and gives no body a power to inspect one.
- Kind
- None
- As of
What this law does
A consumer may place a security freeze on a consumer report by making a written request by certified mail to a consumer reporting agency and including information that properly identifies the consumer. A consumer reporting agency must place the freeze no later than 5 business days after receiving the request.
Within 10 business days after instituting the freeze, the agency must send the consumer written confirmation and a unique personal identification number or password for authorizing removal of the freeze. The agency must comply with a request to temporarily lift a freeze no later than 3 business days after receiving it. The agency must remove a freeze within 3 business days after receiving the consumer's request for removal.
A freeze prohibits the agency from releasing the consumer report, credit score or any information contained within the consumer report to a third party without the express authorization of the consumer.
When LexLint raises it
When your app profile says your app provides financial services.