| |
Security Requirements
We MUST work together to protect the privacy of consumers. The following measures are designed to reduce unauthorized access of consumer reports. In signing the Landlord2Landlord Membership Agreement, you agree to follow these measures.
- You MUST protect your Landlord2Landlord account number, user name, and password so that only key personnel know this sensitive information. Unauthorized persons should never have knowledge of your password. Do not post the information in any manner within your business.
- System access software, whether developed by your company or purchased from a third party vendor MUST have your Landlord2Landlord account number, user name, and password “hidden” or “encrypted” and be known only be by supervisory personnel. Assign each user of your system access software a unique logon user name and password.
- Do not discuss your Landlord2Landlord account number, user name, or password by telephone with any unknown caller, even if the caller claims to be an employee of Landlord2Landlord. Never email your user name and password to Landlord2Landlord.
- Restrict the ability to obtain credit information to a few key personnel.
- Place all terminal devices used to obtain credit information in a secure location within your business. You should secure these devices so that unauthorized persons cannot easily access them.
- After normal business hours, be sure to turn off and lock all devices and systems used to obtain consumer credit information.
- Secure hard copies and electronic files of consumer reports within your business so that unauthorized persons cannot access them easily.
- Destroy or shred all hard copy consumer reports when they are no longer needed.
- Erase or encrypt electronic files containing consumer information when no longer needed and when applicable regulations permit destruction.
- Make all employees aware that your business can access credit information only for the permissible purposes listed in the Permissible Purpose Information section of your Landlord2Landlord Membership Application. Neither you nor your employees can access your own credit report or the report of a family member or friend. Fines can run as much as $2,500.00 per violation.
Record Retention: It is important that you keep credit applications for a reasonable period of time. This will help to facilitate the investigative process if a consumer claims that your business inappropriately accessed their credit report. (Note: The Federal Equal Credit Opportunity Act states that a creditor MUST preserve all written or recorded information connected with an application for 25 months.)
“Under Section 621 (a) (2) (A) of the Fair Credit Reporting Act (FCRA), any person that violates any of the provisions of the FCRA may be liable for a civil penalty of not more than $2,500.00 per violation.
|
|