|
|
Security Requirements
We MUST work together to protect the privacy of consumers. The following
measures are designed to reduce unauthorized access of consumer reports. In signing
the Landlord2Landlord Membership Agreement, you agree to follow these measures.
- You MUST protect your Landlord2Landlord account number, user name, and password
so that only authorized personnel know this sensitive information. Unauthorized
persons should never have knowledge of your password. DO NOT post the information
in any manner within your business. If a person who knows an access password leaves
your company or no longer need to have access due to a change in their duties, you
should contact Landlord2Landlord to inform them so they can change your login information.
- System access software, whether developed by your company or purchased from a third
party vendor MUST have your Landlord2Landlord account number, user name, and password
“hidden” or “encrypted” so it may only be accessed by authorized personnel. Assign
each user of your system access software a unique logon user name and password.
- Do not discuss your Landlord2Landlord account number, user name, or password by
telephone with any unknown caller, even if the caller claims to be an employee of
Landlord2Landlord. NEVER email your user name and password to Landlord2Landlord.
- Restrict the ability to obtain credit information to a few key personnel.
- Place all terminal devices used to obtain credit information in a secure location
within your business. You should secure these devices so that unauthorized persons
cannot easily access them.
- After normal business hours, be sure to turn off and lock all devices and systems
used to obtain consumer credit information.
- Secure hard copies and electronic files of consumer reports within your business
so that unauthorized persons cannot access them easily.
- Destroy or shred all hard copy consumer reports when they are no longer needed.
- Erase or encrypt electronic files containing consumer information when no longer
needed and when applicable regulations permit destruction.
- Make all employees aware that your business can access credit information only for
the permissible purposes listed in the Permissible Purpose Information section of
your Landlord2Landlord Membership Application. Neither you nor your employees can
access your own credit report or the report of a family member or friend. Fines
can run as much as $2,500.00 per violation.
Record Retention: It is important that you keep credit applications for a reasonable
period of time. This will help to facilitate the investigative process if a consumer
claims that your business inappropriately accessed their credit report. (Note: The
Federal Equal Credit Opportunity Act states that a creditor MUST preserve all written
or recorded information connected with an application for 25 months.)
Under Section 621 (a) (2) (A) of the Fair Credit Reporting Act (FCRA), any person
that violates any of the provisions of the FCRA may be liable for a civil penalty
of not more than $2,500.00 per violation.
|
|