‪(480) 285-8227 dave@dealercomply360.com

Process for Obtaining and Using Customer Credit Reports

Purpose:
This document outlines the procedures for obtaining and using customer credit reports at [Dealership Name]. The process ensures compliance with the Fair Credit Reporting Act (FCRA) and protects the confidentiality and proper use of credit information.

1. Purpose of Credit Reports

Customer credit reports are used to:

  • Evaluate a customer’s creditworthiness for financing applications.
  • Determine eligibility for credit terms, interest rates, or promotions.
  • Verify customer identity to prevent fraud.

2. Procedures for Obtaining Customer Credit Reports

2.1 Authorization

  • Obtain Customer Consent:
    • Customers must provide written or electronic consent before their credit report is accessed.
    • Include a clear and conspicuous authorization clause in the credit application form.

2.2 Permissible Purpose

  • Access credit reports only for permissible purposes under the FCRA, such as:
    • Determining eligibility for financing or credit.
    • Evaluating trade-in or lease options tied to a credit decision.

2.3 Requesting Credit Reports

  • Use only approved credit reporting agencies (e.g., Experian, Equifax, TransUnion).
  • Ensure employees requesting credit reports are trained and authorized to access the system.
  • Document the customer’s information accurately to avoid pulling the wrong credit report.

2.4 Verification

  • Verify the customer’s identity before accessing their credit report to prevent identity theft or fraud.
  • Use government-issued identification, such as a driver’s license, to confirm the customer’s identity.

3. Procedures for Using Customer Credit Reports

3.1 Evaluating Creditworthiness

  • Assess credit reports objectively based on:
    • Payment history.
    • Debt-to-income ratio.
    • Credit utilization.
  • Do not use non-credit factors or discriminatory practices when making credit decisions.

3.2 Adverse Action

  • If a credit decision is unfavorable (e.g., denied credit or higher interest rates), provide an Adverse Action Notice in compliance with the FCRA and ECOA:
    • Include the reason(s) for denial or less favorable terms.
    • Provide the name, address, and phone number of the credit reporting agency.
    • Inform the customer of their right to obtain a free copy of their credit report.

3.3 Confidentiality

  • Use credit information only for the purpose for which it was obtained.
  • Prohibit sharing or discussing credit information with unauthorized individuals or third parties.

4. Data Security and Storage

4.1 Secure Handling

  • Access credit reports only through secure systems approved by [Dealership Name].
  • Do not print credit reports unless absolutely necessary. If printed, ensure they are stored securely and shredded after use.

4.2 Retention and Disposal

  • Retain credit application records, including credit reports, for at least 25 months as required by the FCRA.
  • Securely destroy credit reports when no longer needed, using methods such as cross-cut shredding or certified electronic data deletion.

5. Monitoring and Auditing

  • Conduct periodic audits to ensure proper use and handling of credit reports.
  • Review access logs to confirm that only authorized personnel are accessing credit reports.

6. Training

  • Train employees involved in credit processes on:
    • Legal obligations under the FCRA.
    • Proper procedures for obtaining and using credit reports.
    • Importance of confidentiality and data security.

7. Prohibited Practices

Employees must not:

  • Access credit reports without a permissible purpose or customer consent.
  • Share or discuss credit report information with unauthorized individuals.
  • Use credit reports for personal or non-business purposes.
  • Retain copies of credit reports for longer than necessary or in an unsecured location.

8. Penalties for Non-Compliance

Failure to comply with this policy may result in:

  • Disciplinary action, up to and including termination of employment.
  • Regulatory fines or legal action against [Dealership Name].
  • Damage to the dealership’s reputation.

9. Acknowledgment

All employees handling customer credit reports must sign an acknowledgment confirming they have read and understand this policy.

Employee Signature: ___________________________
Date: ___________________________

Manager Signature: ___________________________
Date: ___________________________

This process ensures [Dealership Name] uses customer credit reports responsibly, complies with legal requirements, and maintains customer trust by protecting their sensitive information. Let me know if you need templates for authorization forms or Adverse Action Notices!