Sec. 14.

(1) A consumer who does all of the following may temporarily lift a security freeze to allow access to the consumer's credit report by a specific person or for a specific period of time while the security freeze is in place:

(a) Contacts the consumer reporting agency at the address or other point of contact and in the manner specified by the consumer reporting agency for making a request under subdivision (b).

(b) Requests that the consumer reporting agency temporarily lift the security freeze.

(c) Provides to the consumer reporting agency sufficient proof of identification of the consumer.

(d) Includes with the request under subdivision (b) the unique personal identification number or password provided to the consumer under section 12(b).

(e) Provides the proper information regarding the person that is to receive the credit report or the time period during which the credit report is to be available to users of the credit report.

(2) Except as provided in subsection (3), a consumer reporting agency that receives a request to temporarily lift a security freeze under subsection (1) shall comply with the request within 3 business days after receiving the request.

(3) If a consumer reporting agency receives a request to temporarily lift a security freeze under subsection (1) by telephone, by electronic mail, or by secure connection on the website of the consumer reporting agency, the consumer reporting agency shall comply with the request within 15 minutes after receiving the request. However, a consumer reporting agency is not required to temporarily lift a security freeze within 15 minutes if a delay in complying with the request is caused by any of the following:

(a) An act of God, including, but not limited to, a fire, earthquake, hurricane, storm, or similar natural disaster or phenomena.

(b) An unauthorized or illegal act by a third party, including, but not limited to, an act of terrorism, sabotage, riot, or vandalism, a labor strike or other labor dispute that disrupts the consumer reporting agency's operations, or a similar occurrence.

(c) An interruption of the consumer reporting agency's operations, including, but not limited to, an electrical failure, an unanticipated delay in equipment or replacement part delivery, a computer hardware or software failure that inhibits response time, or a similar disruption.

(d) Governmental action, including, but not limited to, an emergency order or regulation, judicial or law enforcement action, or a similar directive.

(e) Regularly scheduled maintenance of, or updates to, the consumer reporting agency's systems that occurs outside of normal business hours.

(f) Commercially reasonable maintenance of, or repair to, the consumer reporting agency's systems that is unexpected or unscheduled.

History: 2013, Act 229, Eff. Jan. 1, 2014 ;-- Am. 2018, Act 76, Eff. June 17, 2018