Consumer Consent
A clear, standalone consent statement that describes the purpose, scope, and right to withdraw consent when applicable; dated and signed by the consumer.
A complete Consumer Credit Report Request documents consumer consent, demonstrates permissible purpose under FCRA, and supports defensible adverse-action decisions.
Organizations that commonly prepare Consumer Credit Report Requests typically include lenders, property managers, employers (where allowed), and background-screening firms.
Consumers also complete parts of the request (consent, signature) and should receive copies when required by law.
| Field | Configuration |
|---|---|
| Authentication Level | Email + SMS code or KBA for employment/background checks |
| Consent Capture | Required ESIGN consumer disclosure for consumer-facing requests |
| Audit Trail | Enable IP, timestamp, and action logs for each signer |
| Storage Location | Encrypted cloud storage with restricted access |
Ensure the platform supports ESIGN/UETA compliance, optional HIPAA BAA where health data is involved, and exports in common formats for retention and audit.
Bureaus generally must investigate consumer disputes within 30 days (15 U.S.C. §1681i).
Furnishers have 30 days to investigate and correct inaccuracies (15 U.S.C. §1681s-2(b)).
If adverse action follows, provide a compliant notice with bureau contact details promptly.
Consumers may request free annual reports under applicable federal/state rules; processes vary.
Keep request records long enough to support any adverse-action defense and regulatory review.
Complete authorization and identity fields before submission.
Transmit request using secure API or portal.
Agency matches and returns a report or notes within statutory windows.
Record the outcome and retain files per retention policy.
A clear, standalone consent statement that describes the purpose, scope, and right to withdraw consent when applicable; dated and signed by the consumer.
Full legal name, DOB, SSN (if permitted), current and previous addresses plus contact details to ensure precise bureau matching.
An explicit selection of permissible purpose (e.g., credit underwriting, tenant screening, employment where allowed) to document legal authority.
Signed and dated signature block; include witness or notarization only when state or policy requires it.
Name of the requesting company, contact person, and point of contact for adverse-action notices or verification.
Internal control fields: request ID, submission timestamp, method of transmission, and audit-trail link for compliance proof.
A property manager integrated an online request into leasing applications to speed tenant screening.
A lender added a structured request to its loan origination system to ensure consistent consent capture.
Responsible for requesting employment-related reports where allowed, documenting permissible purpose, and ensuring proper consent capture and storage to support HR decisions and regulatory defense.
Signs the authorization, provides identity details, and may exercise rights under FCRA to dispute inaccuracies or request a copy of the report when applicable.