15 U.S.C. § 1681e — Compliance procedures

(a) Identity and purpose. Every agency must maintain reasonable procedures to avoid violations of § 1681c and limit reports to § 1681b purposes. Prospective users must identify themselves, certify why they want the information, and certify they will use it only for that purpose. The agency must reasonably try to verify a new user’s identity and certified uses before providing a report, and may not provide one when it has reasonable grounds to believe the purpose is not listed in § 1681b.
(b) Accuracy. Whenever an agency prepares a report, it must use reasonable procedures to achieve the greatest possible accuracy for information about the individual.
(c) Disclosure to the consumer^*. An agency may not stop a user from disclosing a report’s contents to the consumer when the user took adverse action^* based wholly or partly on the report.
(d) Notices. (1) The agency must give a notice of responsibilities under this subchapter to anyone who regularly and ordinarily furnishes consumer information to the agency, and to anyone to whom the agency provides a report. (2) The Bureau sets the notice’s content. An agency complies if its notice is substantially similar to the Bureau’s prescription.
(e) Obtaining a report for resale. (1) A person^* may not obtain a report to resell it or information in it unless the person tells the original agency (A) the end user’s identity and (B) every § 1681b purpose for which the end user will receive it. (2) The person must establish and follow reasonable procedures ensuring resale only for a § 1681b purpose. Each later reseller or provider must identify every end user, certify every use, and certify no other use. Before resale, the person must reasonably try to verify those identifications and certifications. (3) The person need not disclose the end user’s identity if the end user is a U.S. Government agency or department determining eligibility for access to classified information as defined in § 1681b(b)(4)(D)(i), and it certifies in writing that nondisclosure is needed to protect classified information or the safety of persons employed by, contracting with, or being investigated for work with the agency or department.