FACT ACT Compliance Program - Illinois Credit Union League

advertisement
THE FAIR AND ACCURATE CREDIT TRANSACTION ACT (FACT ACT)
COMPLIANCE PROGRAM
TABLE
OF
CONTENTS
Introduction
O UR
O UR
2
U S E RS O F C O N S U M E R R E P O R TS
Permissible Purposes
Permissible Purposes – as an Employer
Fraud and Active Duty Alerts (effective date 12/01/04)
Adverse Action Notices (effective date 12/31/03) (update – 2013)
“Prescreening” (effective date 08/01/05)
Address Discrepancies (effective date 11/01/08)
Disposal of Records (effective date FCU’s 12/29/04 SCU’s 06/01/05)
Notice to Home Loan Applicants/Disclosure of Credit Scores (effective date 12/01/04)
Protection of Medical Information (effective date 04/01/06)
Risk Based Pricing Notice (effective date 01/01/11) (update – 2011)
RE S PO N S I BI L I TI E S AS F UR N I S HE RS O F I N F O R M A TI O N
Accuracy and Integrity of Information (effective date 07/01/10)
Prevention of Re-Pollution (effective date 12/01/04)
Negative Information Notice (effective date 12/01/04)
ID Theft “Red Flags” Prevention Program (effective date FCU’s 11/1/08 SCU’s 12/31/10)
RE S PO N S I BI L I TI E S AS
2
2
2
3
3
3
3
4
4
4
5
7
7
7
M I S CE L L AN E O US RE Q U I R E M E N TS
Free Annual Credit Reports (member education)
Sharing Information and Marketing with Affiliates (effective date 10/01/08)
Truncation of Credit/Debit Card Users (effective date 12/01/06)
Program Approval
A T T A C HM E N TS
Adverse Action Notice (rev. 2013)
Member Dispute Notice
Third-Party Amendment to Agreement
Risk-based Pricing Notice (rev. 2013 – for general notice requirements if no score is used)
Risk-based Pricing Notice (rev. 2013 – for general notice requirements if score is used)
No Credit Score Notice (rev. 2013)
Account Review Risk Based Pricing Notice (rev. 2013 – if no score is used)
Account Review Risk Based Pricing Notice with Credit Score Information (rev. 2013)
Credit Score Disclosure for Loans Not Secured by Residential Real Property (rev. 2013)
Credit Score Disclosure for Loans Secured by Residential Real Property (rev. 2013)
Notice to the Home Loan Applicant
Js/FACTACT/SAS/
Page 1
12
12
12
12
14
16
17
18
19
21
22
23
25
27
29
FACT ACT COMPLIANCE PROGRAM
INTRODUCTION
The Fair Credit Reporting Act (FCRA) deals with the rights of consumers in relation to their credit reports and the
obligations of credit reporting agencies and the businesses that provide information to them. The FCRA has been
revised numerous times, most recently by passage of the Fair and Accurate Credit Transactions Act of 2003 (FACT
Act).
The FACT Act created new responsibilities for financial institutions, including developing an Identity Theft
Prevention Program, providing more information to consumers about credit reports and credit scoring, limiting
sharing of information to affiliates, providing certain disclosures and reconciling potentially fraudulent address
information. It also created new rights for consumers, including the right to free annual consumer reports, new
identity theft protection and new medical privacy rights.
PERMISSIBLE PURPOSES
OF CONSUMER REPORTS
The credit union may obtain a consumer report for the following purposes:
 For the extension of credit as a result of an application from a member or consumer
 For the review or collection of a member’s account
 To review a member’s account to determine whether the member continues to meet the terms of the
account.
 When there is a legitimate business need, in connection with a business transaction that is initiated by the
member/consumer
 For employment purposes, including hiring and promotion decisions, the procedure is set forth below.
USE OF CONSUMER REPORTS FOR EMPLOYMENT PURPOSES
In the event the credit union obtains a consumer report for employment purposes, we will:
 Make a clear and conspicuous written disclosure to the applicant before the report is obtained, in a document
that consists solely of that disclosure.
 Obtain from the applicant prior written authorization. The credit union may obtain authorization to access
reports during the term of employment at the time of employment.
 Certify to the credit reporting agency (CRA) that the above steps have been followed, that the information
being obtained will not be used in violation of any federal or state equal opportunity law or regulation, and
that, if any adverse action is to be taken based on the consumer report, a copy of the report and a summary of
the applicant/employee‘s rights will be provided.
 Provide a copy of the report to the applicant/employee as well as the applicant/employee’s rights before
taking an adverse action.
 Comply with, and refer to, Section 603(x) of the FCRA for procedures concerning investigations of suspected
misconduct by an employee.
FRAUD
AND ACTIVE DUTY ALERTS
If the credit union receives a credit report that contains an initial, extended or active duty alert, we will adhere to
the following:
 Prior to the issuance of any loan (other than advances on an existing open-end plan), new or additional credit
cards, or increase of a credit limit, the credit union will re-confirm the identity of the member using acceptable
CIP procedures so as to form a reasonable belief of the true identity of the person making the request.
 In the case of initial active duty alerts, key staff will contact the member using the specified telephone number
in the alert or any acceptable CIP measure to verify the identity of the person making the request and confirm
that the request is not the result of ID theft, BEFORE credit is extended.
 Upon receipt of an extended alert or if an alert contains instructions to contact the consumer before taking
any action on the request, key staff must contact the member, either by using the specified telephone number
in the alert or by a method that involves personal contact.
Js/FACTACT/SAS/
Page 2
ADVERSE ACTION DISCLOSURES
Effective July 2011, the Federal Reserve Board (Board) and the Federal Trade Commission (FTC) issued final rules
to implement the credit score disclosure requirements of the Dodd-Frank Wall Street Reform and Consumer
Protection Act. If a credit score is used in setting material terms of credit or in taking adverse action, the statute
requires creditors to disclose credit scores and related information to consumers in notices under the Fair Credit
Reporting Act (FCRA).
The credit union will notify an applicant/member of action taken on a request for credit, whether favorable,
adverse, or incomplete within 30 days after receiving the completed application. Notice of approval may be
provided orally, and all notifications of adverse action, including incomplete application, will be in writing. When
adverse action is taken on an existing account notification will be made within thirty days. If the adverse action is
based on consumer report information that was obtained from an affiliate, and the member requests the nature of
information relied upon within 60 days of receiving the notice, the credit union will respond no later than 30 days
after receiving the request.
To ensure compliance with the Equal Credit Opportunity Act, the credit union will utilize a combined FCRA/ECOA
adverse action form (attachment).
USE
OF
PRESCREENED LISTS
In the event the credit union board of directors authorizes key staff to participate in “prescreening” we understand
our obligation to provide notices to consumers consisting of an initial, prominent statement that provides the basic
opt-out information, followed by a separate longer explanation that provides additional details. If direction to
“prescreen” transpires, we will refer to NCUA Part 717 and Parts 642 and 698 of FTC regulations, and implement
appropriate written procedures as necessary.
(“Prescreening” involves submitting a request to a CRA for the contact information of consumers meeting certain preestablished criteria that will be reflected in the CRA’s records, such as credit scores in a certain range. The CU then sends offers
of credit targeted to those consumers).
ADDRESS DISCREPANCIES
If the credit union receives a Notice of Address Discrepancy from a credit reporting agency we will confirm an
address is accurate by:
 Contacting the member
 Reviewing the member file and compare information in the consumer report to credit union information
 Utilizing third party resources, such as collection agency, card processor
 If warranted, the credit union will enhance the CIP procedure by requesting additional verification of
identity from this member.
Loan proceeds cannot be disbursed or closed until the CEO or credit committee chairperson has reviewed the
Notice of Address Discrepancy and follow–up, and can ascertain with reasonable certainty that the report belongs
to the member/borrower.
At which time the credit union has reasonably confirmed the address is accurate, we will furnish the address to the
CRA as part of the information the credit union regularly furnishes.
DISPOSAL OF RECORDS
In an effort to protect the privacy of member information and reduce the risk of fraud and identity theft, the credit
union will take appropriate measures to dispose of sensitive information derived from consumer reports.
The CEO will determine the disposal method based on the sensitivity of the information, the current cost and
benefit of different disposal methods, and changes in technology, on condition that one of the following disposal
practices are exercised:
Js/FACTACT/SAS/
Page 3



Burn, pulverize, or shred papers containing consumer report information so that the information cannot be
read or reconstructed;
Destroy or erase electronic files or media containing consumer report information so that the information
cannot be read or reconstructed;
Conduct due diligence and hire a document destruction contractor to dispose of material specifically identified
as consumer report information consistent with the Rule.
 Should the credit union decide to outsource disposal of records to a vendor, due diligence will include,
at a minimum:
 Reviewing an independent audit of a disposal company’s operations and/or its compliance
with the Rule;
 Obtaining information about the disposal company from several reliable references;
 Obtaining assurance that the disposal company possesses the required certifications or
licenses; and
 Reviewing and evaluating the disposal company’s information security policies or procedures.
NOTICE
TO HOME LOAN APPLICANTS AND CREDIT SCORE DISCLOSURE
When utilizing credit scores In connection with both open-end and closed-end purchase money mortgages,
refinanced loans, home equity loans, second mortgages, and home equity lines of credit secured by 1 to 4 units of
residential real property, we will provide the “Notice to Home Loan Applicant and Credit Score Disclosure”
(attachment). The notice and score disclosure shall be provided as soon as reasonably practical, but no later than
the loan closing if the loan is approved, or along with the adverse action notice if the loan is denied.
The Notice to Home Loan Applicant and Credit Score notice shall be included on the credit union’s mortgage loan
and home equity loan checklist. A loan will not be closed unless all disclosures have been provided to the member,
and noted on the checklist. The mortgage officer will be responsible for ensuring proper handling of the notices.
PROTECTION
OF MEDICAL INFORMATION
The credit union may obtain and use medical information pertaining to a member in connection with
any determination of the member’s eligibility, or continued eligibility, for credit, as long as:
 The information relates to debts, expenses, income, benefits, collateral, or the purpose of the loan, including
the use of proceeds;
 We use the information in a manner and to an extent no less favorable than we would use comparable
information that is not medical information in a credit transaction; and
 We do not take the member’s physical, mental, or behavioral health, condition or history, type of treatment,
or prognosis into account as part of any credit eligibility determination.
RISK-BASED PRICING NOTICE
Effective July, 2011, the Federal Reserve Board (Board) and the Federal Trade Commission (FTC) issued final rules
to implement the credit score disclosure requirements of the Dodd-Frank Wall Street Reform and Consumer
Protection Act. If a credit score is used in setting material terms of credit, the statute requires creditors to
disclose credit scores and related information to consumers in notices under the Fair Credit Reporting Act (FCRA).
The CEO with assistance from the lending manager is responsible for implementing and complying with the riskbased notice requirement. The credit union will provide a risk-based pricing notice to members that receive credit
on terms materially less favorable than terms offered to most members based in whole or in part on a consumer
report. The rule allows the credit union several methods for determining which members/applicants must receive
risk-based pricing notices. In addition, the rule allows for certain exceptions to the notice requirement, as such the
credit union will examine the best method at least annually.


Consumer-to-Consumer Comparison – this involves comparing each applicant to an adequate sample of
members who are offered a specific type of credit, such as vehicle loans or student loans.
Credit score proxy method – under this method the credit union must give notices to each applicant that falls
in the bottom 60% of credit scores
Js/FACTACT/SAS/
Page 4

Tiered pricing method – under this approach the credit union may place the applicant within one of a discrete
number of pricing tiers based on a consumer report. The only factor to consider is tiers with different APRs. A
notice must be sent to those applicants who do not qualify for the top (lowest-priced) tier for a four or fewer
tier system, or the top two tiers for a five or more tier system, as well as additional tiers that comprise
between 30-40% of the total number of tiers.
GUIDELINES










Members that do not receive the best rate offered in the credit union’s credit card program will receive a
notice
The credit union will implement the same notice determination method for a specific type of credit product.
However, the method may vary among different loan products
Risk-based pricing notices will only be given to those who receive materially less favorable terms and not to
all members who apply for credit.
Notices need not be given to guarantors, co-signers, sureties, or endorsers or those who are offered credit but
decline it before the notice is provided.
If the credit union conducts a periodic account review and increases a member’s annual percentage rate
based in whole or in part on a credit report, we will provide either an account review notice or adverse action
notice to the member.
For closed-end credit, the notice will be provided before the loan agreement is in force.
For open-end credit, the notice will be provided before the first transaction is made.
For account reviews, the notice will be provided no later than five days after the effective date of the APR
change.
For indirect auto lending, the requirement to provide a risk-based pricing notice is satisfied if the auto dealer
provides a notice to the member on the credit union’s behalf within the required time periods. The CEO or
lending manager is responsible for evaluating the dealer relationship to ensure reasonable policies and
procedures are in place.
The credit union is not required to provide risk based pricing notices:
o If a member applies for a specific loan product and receives the terms associated with that product
o If a member is provided an adverse action notice
o If the credit union obtains a consumer report that is a prescreened list and uses that consumer report
to make a firm offer of credit to consumers.
o When an extension of credit is or will be secured by one to four units of residential real property and
the consumer is provided a notice consisting of his credit score and certain additional information.
ALTERNATIVE TO THE RISK-BASED PRICING NOTICE
The risk based pricing notice is NOT required if the credit union opts to provide a credit score disclosure. To use
this alternative the credit union must provide a credit score disclosure to ALL members who apply for credit, unlike
the risk-based pricing notice, which is only provided to members who receive less than favorable terms.
The credit score disclosure must be provided as soon as reasonably practicable after the credit score is obtained,
but before the member is obligated for the credit transaction.
The credit score disclosure must include the member's credit score the source of the score, the date the score was
created, and the range of possible scores. In addition, the credit score disclosure must tell the member how his or
her credit score compares to the scores of other consumers using a short narrative statement or a bar graph. The
credit score disclosure also informs the consumer of the right to request a free annual credit report from each of
the three nationwide credit bureaus, along with contact information (attached).
ACCURACY
AND INTEGRITY OF INFORMATION
The credit union shall strive to protect the privacy of credit report information and guarantee that information
supplied to consumer reporting agencies (CRAs) is as accurate as possible, and in doing so, the credit union, as
furnishers of information to CRA’s, will adhere to the following:
Js/FACTACT/SAS/
Page 5

INFORMATION REPORTING
The credit union will not furnish information that we know — or consciously avoid knowing — is inaccurate.

CORRECTING AND UPDATING INFORMATION
If we discover we supplied one or more CRAs with incomplete or inaccurate information, key staff will correct
credit union’s records as appropriate, resubmit to each CRA, report only the correct information in the future,
and notify the member of such action.


MEMBER - NOTICE OF DISPUTE
o
If a member notifies the credit union and challenges the accuracy of any information we furnished to a
CRA, the credit union will inform the member that he/she must complete a direct dispute notice
(attachment).
o
Upon receiving a completed “Notice of Dispute”, key staff will investigate the dispute and review all
relevant information. Within 30 days a written determination to the member will be provided.
o
If the information is, in fact, inaccurate, we will report the correct information to the CRA(s), with a copy
to the member.
o
If a member has given notice that he or she disputes information, we will not report information to any
CRA without also informing the CRA that the information is in dispute.
o
The credit union WILL NOT investigate anything having to do with the member’s identifying information,
identity of past employers, inquiries, information derived from public records fraud or active duty alerts,
information provided by another furnisher, or direct disputes submitted by credit repair organizations.
o
If the credit union determines that a dispute is frivolous (such as, those that contain insufficient
information or those that are substantially similar to previous disputes from the same member), we will
provide the member with a written explanation within 5 days of the determination date.
CONSUMER REPORTING AGENCY – NOTICE OF DISPUTE
If a CRA notifies the credit union that a member disputes information we provided, we will, within 30 days of
the notice:

o
Investigate the dispute and review all relevant information provided by the CRA about the dispute.
o
Report our findings to the CRA and the member, and if the investigation establishes that the information
was incomplete or inaccurate, we will report the results to the member and all CRAs to which the credit
union provided the information.
REPORTING ACCOUNTS CLOSED BY THE MEMBER
Recognizing that other users may interpret a closed account as an indicator of bad credit, the credit union will
ensure that the CRA is notified, either in writing or through our third-party provider, that the member - not
the credit union, closed the credit account.

REPORTING DELINQUENT ACCOUNTS
If the credit union reports information about a delinquent account that’s placed for collection, charged off, or
subject to any similar action, we will, within 90 days after we report the information, notify the CRA of the
month and the year that the delinquency began. This will ensure that the CRA uses the correct date when
computing how long derogatory information can be kept in the members credit file.

PROCEDURES
The guidelines set forth below will provide additional assurances that the accuracy and integrity of the
information we furnish to consumer reporting agencies is correct.
Js/FACTACT/SAS/
Page 6









In the event a third party provider is used for the purpose of submitting information to a CRA, the CEO will
be responsible for ensuring that the vendor is compliant with FACT ACT requirements. Further,
confirmation will be obtained that the communication methods used to transmit data to a CRA is
designed to prevent duplicative reporting of accounts, erroneous association of information with the
wrong consumer, and other occurrences that may compromise the accuracy or integrity of information
provided to CRAs.
To the extent possible, the credit union will submit information to a CRA electronically, via an approved
vendor. Transmission of information about members will transpire monthly and in a standardized format
suitable for reporting to a CRA.
The lending staff is responsible for furnishing accurate information to the credit bureau, whether via
vendor agreement or manually.
The teller staff is responsible for furnishing accurate information to ChexSystems, whether via vendor
agreement or manually.
If the credit union participates in any transfer of accounts process (such as mergers, portfolio acquisitions
or sales), the lending manager or key staff will review any CRA reports prior to submission to prevent reaging of information, duplicate reporting, or other problems that may affect the accuracy and integrity of
information furnished to CRAs.
Key staff will obtain appropriate training to carry out the requirements of this policy.
Key staff will report all member disputes to the Supervisory Committee,
The Supervisory Committee will be responsible for periodic inspection of information key staff provides to
consumer reporting agencies. In addition, the supervisory committee will review completed member
dispute investigations periodically, and a detailed report of all findings presented to the board at least
annually.
RECORD RETENTION
With the intention of substantiating the accuracy of any information the credit union furnishes that is subject
to a direct dispute, we will maintain records in accordance with all applicable regulations.
PREVENTION
OF RE-POLLUTION
If the credit union receives either a notice from a consumer reporting agency or a member regarding identity theft,
key staff will complete an investigation and notify the CEO of the results. If required, the CEO will take the steps
necessary to block information from reaching a CRA. If the account is a share account, the account in question will
be closed and a new account opened.
NOTICE
OF NEGATIVE
INFORMATION
The credit union will provide written notice to a member if we furnish information to a consumer reporting agency
related to delinquency, late payments, insolvency, or any form of default.
If the notice is provided prior to furnishing the negative information to the CRA, the notice will include the
following statement:
We may report information about your account to credit bureaus. Late payments, missed payments, or
other defaults on your account may be reflected in your credit report.
If the credit union provides a notice after furnishing the negative information, we will do so within 30 days and the
notice will include the following statement:
We have told a credit bureau about a late payment, missed payment or other default on your account.
This information may be reflected in your credit report.
ID THEFT “RED FLAGS” PREVENTION PROGRAM
(Source: Carol Bertoux, ICUL GC, Federal Trade Commission, NCUA, and CUNA)
After consideration of the size and complexity of the credit union’s operations and the nature and scope of our
activities, we constructed the following Identity Theft Prevention Program to help detect, prevent and mitigate
identity theft.
Js/FACTACT/SAS/
Page 7
The program is intended to provide credit union staff with the tools needed to effectively recognize and manage
attempted and actual identity theft in connection with all “covered accounts” accounts (share/savings,
checking/draft, auto loans, mortgage, personal loans, credit card accounts, etc.) and related operations.
Because identity theft is an ever-changing threat, we will re-evaluate our program periodically.
RISK ASSESSMENT
To effectively address the threat of identity theft the credit union will conduct a risk assessment by considering the
risk factors in identifying red flags relevant to the credit union, as indicated below:
The types of accounts offered include:
Share
Draft
Certificates
Club Money Market
Prepaid Cards
Debit Card
Credit Card
Personal Loan /Consumer
HELOC Mortgage
Other______________
Other______________
Other______________
The types of account-opening methods allowed include:
Online
Phone
Mail
In-Person
The means of access to accounts Include:
Online
Phone
Mail
In-Person
Bill-Pay
Debit
Wire Transfer
Other______________
Other______________
Other______________
Check/Draft
Credit Card
Debit Card
ATM
Other______________
Other______________
Other______________
The credit union’s previous experiences with identity theft include:
Unauthorized use or attempted use of existing credit cards
Unauthorized use or attempted use of other existing accounts such as checking accounts
Misuse of personal information to obtain new accounts or loans, or to commit other crimes
Other____________________________________________________________________________________
Other____________________________________________________________________________________
Other____________________________________________________________________________________
In consideration of the foregoing, the following red flags are potentially relevant to this Credit Union’s
operations:
Alerts, notifications, or other warnings from consumer reporting agencies or service providers, including:
Fraud or active duty alerts included with a consumer report.
Consumer reporting agency notices of a credit freeze in response to a request for a consumer report.
Consumer reporting agency notices of an address discrepancy.
Consumer reports indicating a pattern of activity that is inconsistent with the history and usual pattern of activity
of an applicant or member, such as:
A recent and significant increase in the volume of inquiries;
Js/FACTACT/SAS/
Page 8
An unusual number of recently established credit relationships;
A material change in the use of credit, especially with respect to recently established credit relationships;
or
An account that was closed for cause or identified for abuse of account privileges.
Presentation of suspicious documents, such as:
ID documents that appear to have been altered or forged.
Photos or physical descriptions on identification that are not consistent with the appearance of the person
presenting the identification.
Other information on identification is not consistent with information provided by the person presenting the
identification.
Other information on identification is not consistent with readily accessible information that is on file with the
credit union, such as a signature card or a recent check.
Applications that appear to have been altered or forged, or give the appearance of having been destroyed and
reassembled.
Presentation of suspicious personal identifying information, such as:
Personal identifying information provided is inconsistent when compared against external information sources.
For example:
The address does not match any address in the consumer report; or
The SSN has not been issued, or is listed on the Social Security Administration's Death Master File.
Personal identifying information provided by the member is not consistent with other personal identifying
information provided by the member. For example, there is a lack of correlation between the SSN range and date of
birth.
Personal identifying information provided is associated with known fraudulent activity as indicated by internal or
third-party sources. For example:
The address on an application is the same as the address provided on a fraudulent application; or
The phone number on an application is the same as the number provided on a fraudulent application.
Personal identifying information provided is of a type commonly associated with fraudulent activity as indicated
by internal or third-party sources. For example:
The address on an application is fictitious, a mail drop, or prison; or
The phone number is invalid, or is associated with a pager or answering service.
The SSN provided is the same as that submitted by other persons opening an account or other members.
The address or telephone number provided is the same as or similar to the account number or telephone number
submitted by an unusually large number of other persons opening accounts or other members.
The person opening the account fails to provide all required personal identifying information on an application or
in response to notification that the application is incomplete.
Personal identifying information provided is not consistent with personal identifying information that is on file
with the credit union.
For credit unions that use challenge questions, the person opening the account cannot provide authenticating
information beyond that which generally would be available from a wallet or consumer report.
Unusual Use of, Suspicious Activity related to an account, such as
Shortly following the notice of a change of address, receipt of a request for a new, additional, or replacement
card or for the addition of authorized users on the account.
A new revolving credit account is used in a manner commonly associated with known patterns of fraud. For
example:
The majority of available credit is used for cash advances or merchandise that is easily convertible to
cash (e.g., electronics equipment or jewelry)
The member fails to make the first payment or makes an initial payment but no subsequent payments
An account is used in a manner that is not consistent with established patterns of activity on the account. There
is, for example:
Nonpayment when there is no history of late or missed payments
A material increase in the use of available credit
A material change in purchasing or spending patterns
Js/FACTACT/SAS/
Page 9
A material change in electronic fund transfer patterns
An account that has been inactive for a reasonably lengthy period of time is used (taking into consideration the
type of account, the expected pattern of usage and other relevant factors)
Mail sent to the member is returned repeatedly as undeliverable although transactions continue to be conducted
The credit union is notified that the member is not receiving paper account statements
The credit union is notified of unauthorized charges or transactions
Notices of possible ID theft regarding a credit union account -- from members, a victim of identity theft, law
enforcement, or others – stating that the credit union has opened a fraudulent account for a person engaged in
identity theft.
DETECTION OF RED FLAGS
The following are in place to help detect the above Red Flags:

Compliance with the Credit Union’s Patriot Act Identity Verification Program.

The Credit Union’s requirements for authentication regarding remote transaction or signatures:
Two-factor authentication
Other___________________________
VPN security
Other___________________________
Web authentication
Other___________________________
 Sign on protections
Other___________________________
 Identity and access protection

The following software monitoring functions:
Firewall protection
Use of most current operating system
Use of most current web browser
Use up-to-date virus protection software
Prohibit downloading from unknown sources
Scan for infected files often
Allow use of secure sites only (those that
include an image of a padlock in the lower right
corner of the internet browser and an “s”
following the “http” portion of the internet
address).
Guard user names and passwords.
Change passwords often
Encryption
Secure Sockets Layer
Digital Signature
Random Number Generation
Secure Multipurpose Internet Mail Extensions
Password Usage and Generation
Other___________________________
Other___________________________
Other___________________________
Other__________________________
Js/FACTACT/SAS/
Page 10

Address change validation requirements that must be followed before a change of address is implemented
o Verifying the address with the member;
o Reviewing its own records to verify the address of the member
o Verifying the address through third-party sources; or using other reasonable means
PREVENTION AND MITIGATION OF IDENTITY THEFT
Whenever a Red Flag is detected, the Credit Union will undertake one or more of the following responses to
thwart the fraud, depending on the factual situation, [as determined by senior management]:
 Monitoring the account for evidence of identity theft;
 Contacting the member for verification, authentication, or notice, as applicable;
 Changing passwords, security codes, or other security devices that permit access to an account;
 Re-opening an account with a new account number;
 Not opening a new account;
 Closing an existing account;
 Not attempting to collect on an account;
 Notifying law enforcement; or
 Determining that no response is warranted under the particular circumstances.
 When there is an indication of a data security breach, the required notice will be given, and all accounts
possibly involved will be monitored;
 When the Credit Union has received notice that a member has provided account information to a phisher, the
account will be monitored for a period of 90 days.
 Decline to effect an address change, extend additional credit, or provide services related to the red flag until
identity is confirmed.
STAFF TRAINING
Staff will initially undergo training to implement the Program, and thereafter as needed regarding updates or as a
refresher course.
DESIGNATION OF PERSON RESPONSIBLE FOR PROGRAM OVERSIGHT
The CEO is responsible for implementation of this Program, monitoring for compliance, and approval of material
changes as necessary to address changing identity theft risks.
COMPLIANCE REPORTS
Staff of the credit union responsible for aspects of the Program will report on compliance at least annually -- to the
Board of Directors
Reports will address:
 The effectiveness of the policies and procedures of the credit union in addressing the risk of identity
theft;
 Service provider arrangements;
 Significant incidents involving identity theft and management's response; and
 Recommendations for material changes to the Program.
THIRD-PARTY SERVICE PROVIDER OVERSIGHT
Whenever a third-party service provider is utilized to administer any aspect of this Program, the Credit Union will
take steps to ensure that the activity of the service provider is conducted in accordance with reasonable policies
and procedures designed to detect, prevent, and mitigate the risk of identity theft.
js//ICUL-FACTact
Page 11 of 31
In part, the Credit Union will require the service provider, by contract, to have policies and procedures in place to
detect relevant Red Flags that may arise in the performance of the service provider's activities -- and to either
report the Red Flags to the credit union or take appropriate steps to prevent or mitigate identity theft. (Attached)
The credit union will take appropriate steps to ensure that the activity of all service providers is conducted in
accordance with reasonable policies and procedures designed to detect, prevent, and mitigate the risk of identity
theft (attachment).
The credit union will make every effort to obtain, in potential contracts, an assurance by the service provider to
have policies and procedures to detect relevant Red Flags that may arise in the performance of the service
provider’s activities, and either report the red flags to the credit union, or to take appropriate steps to prevent or
mitigate identity theft.
PROGRAM UPDATES
The CEO is authorized to update the Program to reflect changes in risks to members or to the safety and
soundness of the credit union. The following events may require an update in the Program:
 Experiences of the credit union with identity theft;
 Changes in methods of identity theft;
 Changes in methods to detect, prevent, and mitigate identity theft;
 Changes in the types of accounts that the credit union offers or maintains; and
 Changes in the business arrangements of the credit union (e.g., mergers, acquisitions, alliances, joint
ventures, and service provider arrangements).
Updates will be reported to the Board as changes take place.
RULES FOR DEBIT/CREDIT CARD ISSUERS
The credit union will not issue, or make a request to issue, any additional or replacement credit or debit cards if
such a request is received within 30 days after receiving notification of a change of address for that account, unless
the credit union does the following:
 Notifies the cardholder of the request at the cardholder’s former address; or by any other means of
communication that the credit union and the cardholder have previously agreed to use.
 Provides to the cardholder a reasonable means of promptly reporting incorrect address changes; or
otherwise assesses the validity of the change of address in accordance with credit union policy.
Any written notice that the credit union provides to verify a change of address will be provided separately from its
regular correspondence with the member
OTHER APPLICABLE LEGAL REQUIREMENTS
The credit union will be mindful of other related legal requirements that may be applicable, such as:
 Filing a Suspicious Activity Report under the Bank Secrecy Act;
 Implementing any requirements under the Fair Credit Reporting Act (FCRA), regarding the circumstances
under which credit may be extended when the credit union detects a fraud or active duty alert.
 Implementing any requirements for furnishers of information to consumer reporting agencies under the
FCRA. For example, to correct or update inaccurate or incomplete information, and to not report
information that the furnisher has reasonable cause to believe is inaccurate; and
 Complying with the FCRA prohibition on the sale, transfer, and placement for collection of certain debts
resulting from identity theft.
INFORMATION AVAILABLE TO VICTIMS
The credit union will provide victims of identity theft copies of any records related to a fraudulent activity
transacted at the credit union within 30 days of the request.
js//ICUL-FACTact
Page 12 of 31
Model Form and Procedures for Identity Theft Victims
The credit union will provide and promote the location of the model form and procedures – Take Charge: Fighting
Back Against Identity Theft. This guidance includes the ID theft affidavit and sample letters as well as a description
of the circumstances under which victims would use a particular form to contact creditors or consumer reporting
agencies. The booklet is available at www.consumer.gov/idtheft or by writing to: FTC, Consumer Response Center,
Room 130-B, 600 Pennsylvania Avenue, N.W. Washington, D.C., 20580.
MEMBER EDUCATION
As part of our overall effort to address the problem of identity theft the credit union will provide our members
with the resources they need to arm themselves against identity theft. Primarily, we will rely on the suite of
materials provided by the Federal Trade Commission (FTC).
FREE ANNUAL CREDIT REPORTS
In an effort to help our members avoid confusing “free” offers of consumer reports, we will be steadfast in our
efforts to remind them that while they have the right to a free credit report – there is but ONE authorized source
under federal law. AnnualCreditReport.com or 877-322-8228.
SHARING
INFORMATION WITH AFFILIATES
The credit union does not share any eligibility information - both transactional information and information that would
normally be considered a “consumer report” with any affiliates (any company related by common ownership, typically a CUSO
controlled by credit unions).
Under the affiliate marketing rules, the credit union understands that if we share certain information with an affiliated entity
(CUSO), the affiliate cannot use that information to make a solicitation for marketing purposes unless the consumer is:

Provided a notice that the information may be used for marketing

Given reasonable opportunity to “opt-out” of these solicitations; and

The consumer does not “opt-out”
If and when necessary, the credit union will refer to NCUA and FTC rules for guidance
TRUNCATION
OF CREDIT/DEBIT CARD ACCOUNT NUMBERS
If the credit union accepts credit cards or debit cards for the transaction of business, we will not print more than
the last 5 digits of the card number or the expiration date upon any electronically printed receipt provided to the
cardholder at the time of transaction. This will not apply to transactions in which the sole means of recording a
credit card or debit card account number is by handwriting or by an imprint or copy of the card.
PROGRAM/POLICY
APPROVED BY
-
REVISION DATES
Board approved
____________________________________________
Origination Date:
____________________________________________
Last Amended Date
_____________________________________________________
Next Review Date
_______________________________________________
js//ICUL-FACTact
Page 13 of 31
Adverse Action Notice (sample 1)
Sample Notice of Action Taken and Statement of Reasons Statement Credit Denial, Termination or
Change (page 1 of 2) (rev. 2011).
____________________________
_________________________________
_________________________________
_________________________________
Dear__________________________:
The following represents notification of adverse action, including detailed information regarding credit
denial, termination or change. If you have any questions regarding this notice, please contact the credit
union at (____) ________________.
Description of Account, Transaction, or Requested Credit:
____________________________________________________________________________________
Description of Action Taken:
____________________________________________________________________________________
Principal Reason(s) for Credit Denial, Termination, or Other Action Taken Concerning Credit:
Credit application incomplete
Unable to verify income
Insufficient number of credit references provided
Length of residence
Unacceptable type of credit references provided
Temporary residence
Unable to verify credit references
Unable to verify residence
Temporary or irregular employment
No credit file
Unable to verify employment
Limited credit experience
Length of employment
Poor credit performance with us
Income insufficient for amount of credit requested
Bankruptcy
Excessive obligations in relation to income
Collection action or judgment
Garnishment or attachment
Number of recent inquiries on credit bureau report
Foreclosure or repossession
Delinquent past or present credit obligations with
others
Value or type of collateral not sufficient
Other, specify:
(continued…)
js//ICUL-FACTact
Page 14 of 31
Disclosure of Use of Information Obtained From an Outside Source
Our credit decision was based in whole or in part on information obtained in a report from the consumer reporting
agency listed below. You have a right under the Fair Credit Reporting Act to know the information contained in your credit
file at the consumer reporting agency. The reporting agency played no part in our decision and is unable to supply
specific reasons why we have denied credit to you. You also have a right to a free copy of your report from the reporting
agency, if you request it no later than 60 days after you receive this notice. In addition, if you find that any information
contained in the report you receive is inaccurate or incomplete, you have the right to dispute the matter with the reporting
agency, as indicated below:
 Experian
PO Box 2104
Allen, TX 75013
(888) 397-3742
www.experian.com
 Equifax
PO Box 740241
Atlanta, GA 30374
(800) 685-1111
www.equifax..com
 TransUnion
PO Box 2000
Chester, PA 19022
(800) 888-4213
www.transunion.com
If you have any questions regarding this letter, you should contact us at :
________________________________________________________
________________________________________________________
Telephone Number ________________________________________
We also obtained your credit score form this consumer reporting agency and used it in making our credit decision. Your
credit score is a number that reflects the information in your consumer repot. Your credit score can change, depending
on how the information in your consumer report changes.
Your credit score: _____________________
Date: _______________________________
Scores range from a low of _______________ to a high of _______________
Key factors that adversely affected your credit score:
1.
________________________________________________________
2.
________________________________________________________
3.
________________________________________________________
4.
________________________________________________________
5.
________________________________________________________
If you have any questions regarding your credit score, you should contact the entity that provided the credit score
(consumer reporting agency), as indicated above.
Notice: The federal Equal Credit Opportunity Act prohibits creditors from discriminating against credit
applicants on the basis of race, color, religion, national origin, sex, marital status, age (provided the
applicant has the capacity to enter into a binding contract); because all or part of the applicant's income
derives from any public assistance program; or because the applicant has in good faith exercised any
right under the Consumer Credit Protection Act. The federal agency that administers compliance with this
law concerning this creditor is ___________________________________________________________.
⃝ Federal Credit Unions: National Credit Union Administration, Office of Consumer Protection (OCP), Division of
Compliance and Outreach (DCCO), 1775 Duke Street, Alexandria, VA 22314.
⃝ State Credit Unions: Federal Trade Commission, Equal Credit Opportunity, Washington, DC 20580
Consumer
Credit Union
js//ICUL-FACTact
Page 15 of 31
MEMBER NOTICE DISPUTING CREDIT UNION INFORMATION SUBMITTED TO A CONSUMER REPORTING AGENCY.
Please complete and return this form (along with any supporting documentation) and mail to:
________________________________________________________
________________________________________________________
________________________________________________________
Upon receipt of your dispute, the credit union will investigate your dispute and provide you with a written
determination of our findings within 30 days of the date we receive your dispute.
MEMBER INFORMATION
Date
Requested:
Member Name:
Member
Address:
Account No.
E-Mail Address:
Date of Birth
Phone
Last 4 digits of
SS number
DL number
XXX – XX - _____ _____ _____ _____
DETAILS
Please provide details on why you are disputing information the credit union provided to the consumer
reporting agency.
Indicate the details in the space provided below
NOTE – Attach all supporting documentation that you think might be helpful in the resolution of your
dispute.
js//ICUL-FACTact
Page 16 of 31
AMENDMENT TO AGREEMENT
BETWEEN __________________________ CREDIT UNION (“Credit Union”) and
___________________________________________________ (“Service Provider”)
WHEREFORE, on
, an agreement was entered into between
______________________________________________ services (the “Agreement”).
the
parties
for
WHEREFORE, certain laws require that the Agreement be amended to add confidentiality and identity theft
prevention and mitigation provisions.
NOW, THEREFORE, the parties agree as follows:
1.
The parties hereby amend the Agreement by adding the following paragraphs:
Notwithstanding other Agreement provisions to the contrary, it is understood and agreed that member and
customer information obtained pursuant to this Agreement will be held in strict confidence and used only as
necessary to provide Agreement services, or where otherwise required or permitted by law. Access to
member and customer information will be limited to those employees and agents needing such information to
provide Agreement services, and pursuant to reasonable business practices adopted to limit access and
unauthorized disclosure of same.
Service Provider represents that it has in place policies and procedures to detect relevant identity theft red
flags that may arise in the performance of the Service Provider’s activities. Service Provider further agrees to
notify Credit Union in the event of a data security breach or other detection of relevant identity theft red flags
and to take appropriate steps to prevent or mitigate identity theft.
This confidentiality and identity theft prevention and mitigation provision shall survive termination of the
Agreement.
2.
All other provisions of the Agreement remain in full force and effect.
3.
This amendment is effective this _________ day of ____________________, 200___.
___
CREDIT UNION
_____________________________________
By:___________________________________
By:__________________________________
Typed Name:___________________________
Typed Name:__________________________
Typed Title:____________________________
Typed Title:___________________________
js//ICUL-FACTact
Page 17 of 31
Risk-Based Pricing Notice (rev. 2013) - for use in complying with the general risk-based pricing notice
requirements if a credit score is not used in setting the material terms of credit
_________________________________________________________________Credit Union
Your Credit Report and the Price You Pay for Credit
What is a credit report?
How did we use your credit
report[s]?
A credit report is a record of your credit history. It includes information
about whether you pay your bills on time and how much you owe to
creditors.
We used information from your credit report[s] to set the terms of the
credit we are offering you, such as the [Annual Percentage Rate/down
payment].
The terms offered to you may be less favorable than the terms offered to
consumers who have better credit histories
You have a right to dispute any inaccurate information in your credit
report[s].
What if there are mistakes in your
credit report[s]?
If you find mistakes on your credit report[s], contact:
______________________________________________________
which is the consumer reporting agency from which we obtained your
credit report.
It is a good idea to check your credit report[s] to make sure the
information it contains is accurate.
Under federal law, you have the right to obtain a copy of your credit
report[s] without charge for 60 days after you receive this notice. To
obtain your free report[s], contact:______________________________
How can you obtain a copy of your
credit report(s)?
By telephone: Call toll-free: 1-877-_____ ________
By mail: Mail your written request to:
___________________________________________________________
On the web: Visit www. __________
How can you get more information
about credit reports?
js//ICUL-FACTact
For more information about credit reports and your rights under federal
law, visit the Consumer Financial Protection Bureau’s website at
www.consumerfinance.gov/learnmore
Page 18 of 31
Risk-based Pricing Notice with Credit Score Information (page 1 of 2)(rev. 2013) for use in complying with
the general risk-based pricing notice requirements if a credit score is used in setting the material terms of credit
_________________________________________________________________Credit Union
Your Credit Report and the Price You Pay for Credit
What is a credit report?
How did we use your credit
report[s]?
A credit report is a record of your credit history. It includes information
about whether you pay your bills on time and how much you owe to
creditors.
We used information from your credit report[s] to set the terms of the
credit we are offering you, such as the [Annual Percentage Rate/down
payment].
The terms offered to you may be less favorable than the terms offered to
consumers who have better credit histories
You have a right to dispute any inaccurate information in your credit
report[s].
What if there are mistakes in your
credit report[s]?
If you find mistakes on your credit report[s], contact:
______________________________________________________
which is the consumer reporting agency from which we obtained your
credit report.
It is a good idea to check your credit report[s] to make sure the
information it contains is accurate.
Under federal law, you have the right to obtain a copy of your credit
report[s] without charge for 60 days after you receive this notice. To
obtain your free report[s], contact:______________________________
How can you obtain a copy of your
credit report(s)?
By telephone: Call toll-free: 1-877-_____ ________
By mail: Mail your written request to:
___________________________________________________________
On the web: Visit www. __________
How can you get more information
about credit reports?
js//ICUL-FACTact
For more information about credit reports and your rights under federal
law, visit the Consumer Financial Protection Bureau’s website at
www.consumerfinance.gov/learnmore
Page 19 of 31
Risk-based Pricing Notice with Credit Score Information (page 2 of 2)
Your Credit Score and Understanding Yo
Your Credit Score
Understanding Your Credit Score
What you should know about credit scores
How we use your credit score
The range of scores
30%
Key
Factors
that
adversely
affected
your
credit
score
1.
________________________________________________________
2.
________________________________________________________
3.
________________________________________________________
25%
20%
15%
10%
5%
4.
5.
________________________________________________________
_________________________________________________________
0%
0100
201300
How can you get more information about your credit score?
js//ICUL-FACTact
Page 20 of 31
401500
No Credit Score Notice – (rev. 2013) for use in connection with the credit score disclosure exception when
no credit score is available for the consumer
_________________________________________________________________Credit Union
Credit Scores and the Price You Pay for Credit
Your Credit Score
Your Credit Score
What you Should know
about your credit scores
Why credit scores are
important
Your credit score is not available from _______________________which is a
consumer reporting agency, because they may not have enough information about
your credit history to calculate a score.
A credit score is a number that reflects the information in a credit report.
A credit report is a record of your credit history. It includes information about
whether you pay your bills on time and how much you owe to creditors.
A credit score can change, depending on how a consumer’s credit history changes.
Credit scores are important because consumers who have higher credit scores
generally will get more favorable credit terms.
Not having a credit score can affect whether you can get a loan and how much you
will have to pay for that loan.
Checking Your Credit Report
What if there are
mistakes in your credit
report?
You have a right to dispute any inaccurate information in your credit report. If you
find mistakes on your credit report, contact the consumer reporting agency.
It is a good idea to check your credit report to make sure the information it contains is
accurate.
Under federal law, you have the right to obtain a free copy of your credit report from
each of the nationwide consumer reporting agencies once a year.
To order your fee annual credit report –
By telephone: Call toll-free 1-877-322-8228
How can you obtain a
copy of your credit
report(s)?
On the web: Visit www.annualcreditreport.com
By mail: Mail you completed Annual Credit Report Request Form (which you can
obtain from the Federal Trade Commissions’ web site at:
http://www.ftc.gov/bcp/conline/include/requestformfinal.pdf to:
Annual Credit Report Request Service
P.O. Box 105281
Atlanta, GA 30348-5281
How can you get more
information?
js//ICUL-FACTact
For more information about credit reports and your rights under federal law, visit the
Consumer
Financial
Protection
Bureau’s
website
at
www.consumerfinance.gov/learnmore
Page 21 of 31
Account Review Risk-based Pricing Notice- (rev. 2013) for risk-based pricing notices given in connection with
account review if a credit score is not used in increasing the annual percentage rate.
_________________________________________________________________Credit Union
Your Credit Report and the Pricing of Your Account
What is a credit report?
How did we use your credit
report[s]?
What if there are mistakes in your
credit report[s]?
A credit report is a record of your credit history. It includes information
about whether you pay your bills on time and how much you owe to
creditors.
We have used information from your credit report[s] to review the terms
of your account with us.
Based on our review of your credit report[s], we have increased the
annual percentage rate on your account.
You have a right to dispute any inaccurate information in your credit
report[s].
If you find mistakes on your credit report[s], contact:
______________________________________________________
which is the consumer reporting agency from which we obtained your
credit report.
It is a good idea to check your credit report[s] to make sure the
information it contains is accurate.
Under federal law, you have the right to obtain a copy of your credit
report[s] without charge for 60 days after you receive this notice. To
obtain your free report[s], contact:______________________________
How can you obtain a copy of your
credit report(s)?
By telephone: Call toll-free: 1-877-_____ ________
By mail: Mail your written request to:
___________________________________________________________
On the web: Visit www. __________
How can you get more information
about credit reports?
js//ICUL-FACTact
For more information about credit reports and your rights under federal
law, visit the Consumer Financial Protection Bureau’s website at
www.consumerfinance.gov/learnmore
Page 22 of 31
Account Review Risk-based Pricing Notice with Credit Score Information (page 1 of 1) (rev. 2013) - for
risk-based pricing notices given in connection with account review if a credit score is used in increasing the annual
percentage rate
_________________________________________________________________Credit Union
Your Credit Report and the Pricing of Your Account
What is a credit report?
How did we use your credit
report[s]?
What if there are mistakes in your
credit report[s]?
A credit report is a record of your credit history. It includes information
about whether you pay your bills on time and how much you owe to
creditors.
We have used information from your credit report[s] to review the terms
of your account with us.
Based on our review of your credit report[s], we have increased the
annual percentage rate on your account.
You have a right to dispute any inaccurate information in your credit
report[s].
If you find mistakes on your credit report[s], contact:
______________________________________________________
which is the consumer reporting agency from which we obtained your
credit report.
It is a good idea to check your credit report[s] to make sure the
information it contains is accurate.
Under federal law, you have the right to obtain a copy of your credit
report[s] without charge for 60 days after you receive this notice. To
obtain your free report[s], contact:______________________________
How can you obtain a copy of your
credit report(s)?
By telephone: Call toll-free: 1-877-_____ ________
By mail: Mail your written request to:
___________________________________________________________
On the web: Visit www. __________
How can you get more information
about credit reports?
js//ICUL-FACTact
For more information about credit reports and your rights under federal
law, visit the Consumer Financial Protection Bureau’s website at
www.consumerfinance.gov/learnmore
Page 23 of 31
Account Review Risk-based Pricing Notice with Credit Score Information (page 2 of 2)
Your Credit Score and Understanding Yo
Your Credit Score
Understanding Your Credit Score
What you should know about credit scores
How we use your credit score
The range of scores
30%
Key
Factors
that
adversely
affected
your
credit
score
1.
________________________________________________________
2.
________________________________________________________
3.
________________________________________________________
25%
20%
15%
10%
5%
4.
5.
________________________________________________________
_________________________________________________________
0%
0100
201300
How can you get more information about your credit score?
js//ICUL-FACTact
Page 24 of 31
401500
Form for Credit Score Disclosure Exception for Loans not Secured by Residential Real Property (page
1 of 2)
For use in connection with the credit score disclosure exception for loan that are not secured by residential real property
(rev. 2013)
js//ICUL-FACTact
Page 25 of 31
________________________________________________________________
Your Credit Report and the Price You Pay for C
Your Credit Score
Your Credit Score
Understanding Your Credit Score
What you should know about credit scores
How we use your credit score
% of Consumers with Scores in a Particular Range
The range of scores
js//ICUL-FACTact
100%
90%
80%
70%
60%
30%
50%
25%
40%
20%
30%
15%
20%
10%
10%
5%
0%
0%
Score Range
0-100
101-200 201-300
301-400 401-500
501-600
0100
Page 26 of 31
201300
401500
Credit Score Disclosure Exception for Loans Not Secured by Residential Real Property (page 2 of 2)
Checking Your Credit Report
You have the right to dispute any inaccurate information in your credit report. If you
What if there are
find mistakes on your credit report, contact the consumer reporting agency.
mistakes in your credit
report?
It is a good idea to check your credit report to make sure the information it contains is
accurate.
Under federal law, you have the right to obtain a free copy of your credit report from
each of the nationwide consumer reporting agencies once a year.
To order your free annual credit reportBy telephone: Call Toll-free 1-877-322-8228
How can you obtain a
copy of your credit
report(s)?
On the web: Visit www.annualcreditreport.com
By mail: Mail your completed Annual Credit Report Request Form (which you can
obtain
from
the
Federal
Trade
Commission’s
web
site
at
http://www.ftc.gov/bcp/conline/include/requestformfinal.pdf to:
Annual Credit Report Request Service
P.O. Box 105281
Atlanta, GA 30348 -5281
How can you get more
information about
credit reports?
js//ICUL-FACTact
For more information about credit reports and your rights under federal law, visit the
Consumer
Financial
Protection
Bureau’s
website
at
www.consumerfinance.gov/learnmore
Page 27 of 31
Form for Credit Score Disclosure Exception for Loans Secured by Residential Real Property (page 1 of
2)
For use in connection with the credit score disclosure exception for loans secured by residential real property (Rev. 2013)
js//ICUL-FACTact
Page 28 of 31
_________________________________________________________________Credit Union
Your Credit Report and the Price You Pay for C
Your Credit Score
Your Credit Score
Understanding Your Credit Score
What you should know about credit scores
How we use your credit score
% of Consumers with Scores in a Particular Range
The range of scores
js//ICUL-FACTact
100%
90%
80%
70%
60%
30%
50%
25%
40%
20%
30%
15%
20%
10%
10%
5%
0%
0%
Score Range
0-100
101-200 201-300
301-400 401-500
501-600
0100
Page 29 of 31
201300
401500
Credit Score Disclosure Exception for Loans Secured by Residential Real Property (page 2 of 2)
Understanding Your Credit Score
1.__________________________________________________________________
Key factors that
adversely affected your
credit score
2.__________________________________________________ ________________
3.___________________________________________________________________
4.___________________________________________________________________
5.___________________________________________________________________
Checking Your Credit Report
You have the right to dispute any inaccurate information in your credit report. If you
What if there are
find mistakes on your credit report, contact the consumer reporting agency.
mistakes in your credit
report?
It is a good idea to check your credit report to make sure the information it contains is
accurate.
Under federal law, you have the right to obtain a free copy of your credit report from
each of the nationwide consumer reporting agencies once a year.
To order your free annual credit reportBy telephone: Call Toll-free 1-877-322-8228
How can you obtain a
copy of your credit
report(s)?
On the web: Visit www.annualcreditreport.com
By mail: Mail your completed Annual Credit Report Request Form (which you can
obtain
from
the
Federal
Trade
Commission’s
web
site
at
http://www.ftc.gov/bcp/conline/include/requestformfinal.pdf to:
Annual Credit Report Request Service
P.O. Box 105281
Atlanta, GA 30348 -5281
How can you get more
information
about
credit reports?
js//ICUL-FACTact
For more information about credit reports and your rights under federal law, visit the
Consumer
Financial
Protection
Bureau’s
website
at
www.consumerfinance.gov/learnmore
Page 30 of 31
Notice To The Home Loan Applicant
In connection with your application for a home loan, the lender must disclose to you the score that
a consumer reporting agency distributed to users and the lender used in connection with your home loan,
and the key factors affecting your credit scores.
The credit score is a computer generated summary calculated at the time of the request and
based on information that a consumer reporting agency or lender has on file. The scores are based on
data about your credit history and payment patterns. Credit scores are important because they are used
to assist the lender in determining whether you will obtain a loan. They may also be used to determine
what interest rate you may be offered on the mortgage. Credit scores can change over time, depending
on your conduct, how your credit history and payment patterns change, and how credit scoring
technologies change.
Because the score is based on information in your credit history, it is very important that you
review the credit-related information that is being furnished to make sure it is accurate. Credit records
may vary from one company to another.
If you have questions about your credit score or the credit information that is furnished to you,
contact the consumer reporting agency at the address and telephone number provided with this notice, or
contact the lender, if the lender developed or generated the credit score. The consumer-reporting agency
plays no part in the decision to take any action on the loan application and is unable to provide you with
specific reasons for the decision on a loan application.
If you have questions concerning the terms of the loan, contact the credit union at ___________.
js//ICUL-FACTact
Page 31 of 31
Download