‪(480) 285-8227 dave@dealercomply360.com

FCRA Policy 

Purpose:
The purpose of this policy is to ensure that [Dealership Name] complies with the Fair Credit Reporting Act (FCRA), which governs the collection, use, and handling of consumer credit information. This policy ensures transparency, accuracy, and fairness in dealership practices involving consumer credit reports.

1. General Policy Statement

[Dealership Name] is committed to complying with the Fair Credit Reporting Act by ensuring that consumer credit information is obtained, used, and protected responsibly and lawfully. The dealership will follow all FCRA requirements to maintain consumer trust and uphold legal standards.

2. Scope

This policy applies to all dealership personnel involved in obtaining, reviewing, or using consumer credit reports as part of the dealership’s credit, financing, and hiring processes.

3. Responsibilities

  • Compliance Officer: Oversees FCRA compliance, conducts regular audits, and provides training to employees.
  • Finance Department: Ensures proper authorization and secure handling of consumer credit reports.
  • Sales Team: Advises customers on the purpose and use of their credit information, ensuring compliance with FCRA requirements.

4. Policy Provisions

4.1 Obtaining Consumer Credit Reports

  • Consumer credit reports may only be obtained for permissible purposes, including:
    • Evaluating a consumer’s creditworthiness for a financing transaction.
    • Determining eligibility for dealership financing programs.
    • Employment screening (if authorized by management).
  • Obtain written or electronic authorization from the consumer before requesting a credit report.

4.2 Use of Consumer Credit Information

  • Credit information must be used solely for the purpose for which it was obtained and in accordance with FCRA requirements.
  • Employees must not share or disclose credit information to unauthorized parties.

4.3 Adverse Action Notifications

  • If a financing application or decision is based in whole or in part on information from a consumer credit report, the applicant must receive an Adverse Action Notice.
  • The notice must include:
    • The name, address, and phone number of the credit reporting agency (CRA) that provided the report.
    • A statement that the CRA did not make the decision and cannot explain the decision.
    • A statement of the applicant’s rights to obtain a free credit report from the CRA and dispute inaccuracies.

4.4 Dispute Resolution

  • If a consumer disputes information provided by a credit reporting agency, cooperate fully with the CRA and provide accurate information to resolve the dispute promptly.

4.5 Record Retention

  • Retain records of consumer credit reports, authorizations, and adverse action notices for a minimum of five years, or as required by law.
  • Maintain secure storage and controlled access to ensure confidentiality of credit information.

4.6 Protecting Consumer Data

  • Ensure all employees handling consumer credit reports adhere to strict data protection protocols, including:
    • Access only by authorized personnel.
    • Secure storage of physical and electronic documents.
    • Proper disposal of records after the retention period (e.g., shredding or secure deletion).

4.7 Employee Screening

  • If using credit reports for employment purposes:
    • Obtain written consent from the employee or job applicant.
    • Provide a pre-adverse action notice if the report may negatively impact hiring decisions, including a copy of the report and a summary of the applicant’s rights.
    • Allow the applicant reasonable time to dispute or clarify inaccuracies before final action.
    • Provide a final adverse action notice if a negative decision is made based on the credit report.

4.8 Employee Training

  • Provide initial and periodic training to employees involved in obtaining, reviewing, or handling credit reports.
  • Training must cover:
    • Permissible purposes for accessing credit reports.
    • Proper handling of adverse action notifications.
    • Data security protocols for credit information.

5. Monitoring and Auditing

  • Conduct regular internal audits to ensure adherence to FCRA requirements.
  • Randomly review transactions to verify proper handling of credit reports and compliance with notification requirements.
  • Document findings and corrective actions taken.

6. Complaint Handling

  • Establish a clear procedure for consumers to file complaints related to credit report usage or decisions.
  • Investigate and resolve complaints promptly and maintain records of all complaints and resolutions.

7. Penalties for Non-Compliance

Non-compliance with the FCRA can result in:

  • Civil liability for damages, attorney fees, and costs.
  • Regulatory penalties and enforcement actions.
  • Reputational harm to the dealership.
  • Employees found in violation of this policy may face disciplinary action, up to and including termination.

8. Policy Updates

This policy will be reviewed and updated annually, or as changes to the FCRA, industry practices, or dealership operations occur.

Acknowledgment
I acknowledge that I have read and understand the Fair Credit Reporting Act Compliance Policy and agree to abide by its provisions.

Employee Signature: ___________________________
Date: ___________________________

Manager Signature: ___________________________
Date: ___________________________

This policy ensures that the dealership adheres to FCRA requirements, protects consumer information, and upholds fair and lawful practices in credit-related transactions.