2011 Oregon Revised Statutes
ORS Volume 14, Chapters 645 - 669
ORS Chapter 646a
646A.608 Deadline for placement of security freeze; confirmation; personal identification number; lifting and removal; fees.

(1) A consumer reporting agency shall place a security freeze on a consumer report no later than five business days after receiving from the consumer:

(a) The request described in ORS 646A.606 (1);

(b) Proper identification; and

(c) A fee, if applicable.

(2) The consumer reporting agency shall send a written confirmation of the security freeze to the consumer, to the last known address for the consumer as contained in the consumer report maintained by the consumer reporting agency, within 10 business days after placing the freeze and, with the confirmation, shall provide the consumer with a unique personal identification number or password or similar device to be used by the consumer when providing authorization for release of the consumer s consumer report for a specific period of time or for permanently removing the security freeze. The consumer reporting agency shall also include with such written confirmation information regarding the process of lifting a freeze, and the process of temporarily lifting a freeze for allowing access to information from the consumer s credit report for a period of time while the freeze is in place.

(3) If a consumer wishes to allow the consumer s consumer report to be accessed for a specific period of time while a freeze is in effect, the consumer shall contact the consumer reporting agency using a point of contact designated by the consumer reporting agency, request that the freeze be temporarily lifted and provide the following:

(a) Proper identification;

(b) The unique personal identification number or password or similar device provided by the consumer reporting agency pursuant to subsection (2) of this section;

(c) The information regarding the time period for which the consumer report shall be available to users of the credit report; and

(d) A fee, if applicable.

(4) A consumer reporting agency that receives a request from the consumer to temporarily lift a freeze on a credit report pursuant to subsection (3) of this section shall comply with the request no later than three business days after receiving from the consumer:

(a) Proper identification;

(b) The unique personal identification number or password or similar device provided by the consumer reporting agency pursuant to subsection (2) of this section;

(c) The information regarding the time period for which the consumer report shall be available; and

(d) A fee, if applicable.

(5) A security freeze shall remain in place until the consumer requests, using a point of contact designated by the consumer reporting agency, that the security freeze be removed. A consumer reporting agency shall remove a security freeze within three business days of receiving a request for removal from the consumer, who provides:

(a) Proper identification;

(b) The unique personal identification number or password or similar device provided by the consumer reporting agency pursuant to subsection (2) of this section; and

(c) A fee, if applicable.

(6) No later than December 31, 2008, the Director of the Department of Consumer and Business Services shall report to the chairs of the legislative committees that considered ORS 646A.600 to 646A.628 concerning the minimum amount of time necessary, using current technology, to place, temporarily lift or remove a freeze on a consumer report, and to verify a consumer s identity. If the chair of any legislative committee is vacant at the time of making the report, the report shall also be made to the President of the Senate and the Speaker of the House of Representatives. [2007 c.759 5]