|Business Credit Law and Regulations|
The Fair Credit Reporting Act (FCRA)
A credit application and personal guaranty are important tools for a credit professional to reduce commercial credit risk. An equally important tool for the credit professional in analyzing commercial credit risk are credit reports, both business and consumer. The Fair Credit Reporting Act (FCRA) is federal legislation that governs consumer credit reports, and may affect how a credit professional gathers information to make a commercial credit decision.
The Federal Trade Commission recently issued a legal opinion in response to the National Association of Credit Management's request as to whether a vendor extending commercial credit must obtain written consent from the consumer prior to pulling a consumer credit report for business purposes or for a personal guaranty of business credit. The FTC states in its legal opinion that a vendor must obtain the consumer's consent prior to pulling a consumer credit report, even for a legitimate business purpose. What is the FCRA and what does the FTC's recent legal opinion mean to the credit professionals?
The FTC's Legal Opinion
The FTC is a federal regulatory agency responsible for enforcing certain legislation, including the FCRA. NACM requested the FTC to provide an opinion to the legal question whether a vendor extending commercial credit must obtain consent prior to pulling a consumer credit report to be used for business purposes, or for a personal guaranty of business credit. The FTC states that a vendor must obtain the consumer's consent prior to pulling a consumer credit report. However, the FTC made clear the scope of the FCRA is limited to consumer credit reports: "we interpret it to mean that reports to business vendors by commercial reporting services such as Dun & Bradstreet, which compile data and provide such reports only for commercial purposes, are not covered by the FCRA."
Legitimate Business Purpose Exception not Recognized
The FCRA as a general rule requires a trade credit grantor to obtain written authorization from an individual to run a consumer credit report. Prior to the FTC opinion, there seemed an exception to the FCRA where consent seemed not to be needed if there is a legitimate "business purpose" in connection with a credit transaction. The general language of the business purpose exception seemed to suggest that a business need may be sufficient to allow a credit professional to pull a consumer credit report without authorization from the individual if extending commercial or trade credit or obtaining a personal guaranty, such as a corporation's president. The FTC opinion does not recognize the business purpose exception. The FTC notes that the business exception "provides no authority for a vendor to obtain a consumer report in connection with a credit application for any commercial purpose.": The FTC opinion also does not recognize a right to pull a consumer credit report for a personal guaranty without first obtaining consent: "there is no permissible purpose to obtain a consumer report on a corporate principal to evaluate the capacity of the company to pay a judgment."
It should be noted that credit information providers, such as Experian, are generally not a safe harbor for vendors that contract with the information provider for credit reports. Thus, if a vendor fails to obtain authorization to pull a credit report and the report is pulled through the credit information provider's service, the vendor may be liable for violating FCRA. The contract between the vendor and the credit information provider general states that the information provider is not liable for the vendor's failure to obtain a consumer's consent.
Are Consumer Reports Relevant with Commercial Credit
Extensions to a Corporation, LLC or Partnership?
You learn that your new open account corporate customer has gone out of business. Newspapers report that your corporate customer had orchestrated a bust-out- and the president of the company has fled. Most frustrating, you‡learn too late that the president who orchestrated the bust-out has a personal history of defrauding creditors; and that the president's personal credit history reveals several judgments and a personal bankruptcy. Could you have headed off this problem earlier by obtaining a personal, or consumer credit report on the president in connection with the credit application?
In analyzing whether to extend trade credit to a closely held corporation, a credit professional may wish to review the president or shareholder's personal credit history. Often the payment history of such a corporation is a reflection of the payment history of the officer or shareholder. Likewise, to reduce risk of nonpayment, a credit professional may seek a personal guaranty from a corporation's shareholder or officer, or limited liability corporation';s member, before extending commercial credit. In connection with this guaranty , a credit executive may wish to review the guarantors personal credit history.
The FCRA's Purpose
The FCRA regulates the use of individual credit reports and credit information. As noted in the FTC opinion, generally the collection of business, trade, and commercial credit reports are not covered by the FCRA. The FCRA insures that credit reporting agencies, and the users of such reports, will respect a consumer's right to privacy by pulling consumer credit reports only after express written authorization of the consumer.
What is a Credit Report?
As noted, the FCRA governs consumer credit reports. However, given the various forms of credit information now available over the Internet, what is a credit report under the FCRA? A credit report may be any written or oral communication bearing on a consumer's credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living. The credit report must be either used or expected to be used, or it must have been collected in whole or in part, for a "permissible purpose."
Notification if Credit is Declined
The FCRA requires that a credit grantor provide notice to the consumer if the credit grantor is denying credit, or otherwise taking adverse action with respect to the credit application, based upon the information obtained in the credit report. Thus, a credit grantor will provide notice to the company of the denial of credit; the credit grantor must also provide notice to the president, shareholder or guarantor with respect to whom the credit report was obtained.
The notice can be oral, in writing, or electronic. The credit grantor is required to provide the name, address, and telephone number of the consumer reporting agency. In addition, the credit grantor must state that the consumer reporting agency did not make the adverse credit decision and such agency is unable to provide the consumer with the specific reasons why the adverse credit decision was taken. Finally, the credit grantor must notify the consumer of the consumer's right to obtain a free copy of the consumer report. Notice must also be provided of the consumer's right to dispute with the consumer reporting agency the accuracy or completeness of any information in the consumer report.
The FCRA in the Internet Age
The Internet is revolutionizing how the credit professional handles credit transactions. Credit professionals are using the Internet for a myriad of credit and financial functions, from credit research and scoring, to automatic invoicing customers through their web site, to automatic payment posting Credit departments are loading their web pages with credit applications and guaranties for the customer to retrieve. The electronic credit department is here.
On June 30, 2000, President Clinton signed into law the Electronic Signatures in Global and National Commerce Act (The E-Sign Act). The E-Sign Act makes e-signatures as legally binding as ink-and-paper signatures. The E-Sign Act also eliminates legal barriers to storing documents and sending notices electronically. A credit professional may now engage in e-credit transactions across state lines and the credit sale contract is valid in all states.
Neither the E-Sign Act nor the FCRA should bar a credit professional from obtaining an electronic consent to pull a credit report, and otherwise be in full compliance with the FCRA. However, the E-Sign Act requires that the consumer decides whether to use an e-signature or handwritten signature, and the vendor must conduct test e-mailings before sending out subsequent e-mail notifications.
Verifying the E-Signature to Pull the Credit Report
The FCRA requires a vendor to obtain the consumer's express consent to pull a credit report. But how does the credit professional know the e-signature from the consumer authorizing the pulling of a credit report is authentic? Technology to verify a person's identity, so-called digital identification devices, may solve this concern. An e-signature may be verified through a variety of technologies, including smart cards and biometrics. By using the digital verification, the credit professional may confirm the e-signature prior to pulling the credit report.
Penalties for Violating FCRA
The private enforcement provisions of the FCRA permit a consumer to bring civil suit for willful noncompliance with the FCRA with no ceiling on punitive damages. The consumer may sue negligent noncompliance, for actual damages sustained. The consumer may also seek to recover the consumer's attorneys' fees. In addition, criminal penalties may also be assessed including fines and imprisonment against any person who knowingly and willfully obtains a consumer report under false pretenses.
Complying with the FCRA
In light of the FTC's opinion, credit professionals should consider obtaining written permission to run a consumer credit report. The following type of authorization language should be considered in the credit application and personal guaranty form.
FCRA Authorization Contained in Credit Application
A credit professional extending trade credit may consider including the following language in the credit application to authorize obtaining consumer credit reports on the corporation's individual insiders, or LLC's individual members. This language should be included as a separate form, or addendum to accompany the credit application, as the party that the credit professional seeks authorization is not the same party that signs the credit application. It should be noted that a credit application that provides general authority for the credit professional to pull a consumer credit report on a corporation;s officers may be insufficient. Rather, the credit professional should obtain an authorization form from each party that a credit report is to be pulled.
FCRA Authorization Contained in Personal Guaranty
A credit professional requiring a personal guaranty for extensions of trade credit may consider including the following language in a personal guaranty form to authorize obtaining a consumer credit report from the guarantor.
FCRA & the Credit Application
In light of the recent opinion from the FTC and in response to the telephone seminars NACM has held on this issue, many members have asked for assistance with language that can be used in credit applications and personal guaranties in order to grant permission to a trade creditor to use a consumer credit report as part of the evaluation process of business credit where an individual's credit history may be of significant importance in the credit evaluation process.
Simple language that may be used in a credit application to comply with the requirements of the FCRA may be found on NACM's website at www.nacm.org/events/fcra-sample.html.
Further information and sample language on the FCRA and other important aspects of the credit application can be found in NACM's publication, Principles of Business Credit, Field Version 3 (item #2153), available from the NACM Bookstore. Order online or call Cathy Leslie, bookstore coordinator, at 410.740.5560 ext. 1030 for assistance.
Scott Blakeley is a principal of Blakeley & Blakeley LLP, Southern California, where he practices creditors' rights and bankruptcy law. His e-mail is email@example.com, and can be reached at (949) 260-0612.