National Center for Safety Initiatives LLC 8/15/2019

DocuSign Envelope ID:4F8A5C36-6108-4FB3-9B63-6018FD5692BB NATIONAL CENTER FOR SAFETY INITIATIVES END-USER AGREEMENT •For the underwriting of insurance as a result of an application from a consumer. Section 604(a)(3)(C) •When there is a legitimate business need,in connection with a business transaction that is initiated by the consumer. Section 604(a)(3)(F)(i) •To review a consumer's account to determine whether the consumer continues to meet the terms of the account. Section 604(a)(3)(F)(ii) •To determine a consumer's eligibility for a license or other benefit granted by a governmental instrumentality required by law to consider an applicant's financial responsibility or status. Section 604(a)(3)(D) •For use by a potential investor or servicer,or current insurer,in a valuation or assessment of the credit or prepayment risks associated with an existing credit obligation. Section 604(a)(3)(E) •For use by state and local officials in connection with the determination of child support payments,or modifications and enforcement thereof. Sections 604(a)(4)and 604(a)(5) In addition,creditors and insurers may obtain certain consumer report information for the purpose of making"prescreened" unsolicited offers of credit or insurance. Section 604(c). The particular obligations of users of"prescreened"information are described in Section VII below. B. Users Must Provide Certifications Section 604(f)prohibits any person from obtaining a consumer report from a consumer reporting agency(CRA)unless the person has certified to the CRA the permissible purpose(s)for which the report is being obtained and certifies that the report will not be used for any other purpose. C. Users Must Notify Consumers When Adverse Actions Are Taken The term"adverse action"is defined very broadly by Section 603. "Adverse actions"include all business,credit,and employment actions affecting consumers that can be considered to have a negative impact as defined by Section 603(k)of the FCRA—such as denying or canceling credit or insurance,or denying employment or promotion. No adverse action occurs in a credit transaction where the creditor makes a counteroffer that is accepted by the consumer. 1.Adverse Actions Based on Information Obtained From a CRA If a user takes any type of adverse action as defined by the FCRA that is based at least in part on information contained in a consumer report,Section 615(a)requires the user to notify the consumer. The notification may be done in writing,orally, or by electronic means. It must include the following: • The name,address,and telephone number of the CRA(including a toll-free telephone number,if it is a nationwide CRA)that provided the report. • A statement that the CRA did not make the adverse decision and is not able to explain why the decision was made. • A statement setting forth the consumer's right to obtain a free disclosure of the consumer's file from the CRA if the consumer makes a request within 60 days. • A statement setting forth the consumer's right to dispute directly with the CRA the accuracy or completeness of any information provided by the CRA. 2.Adverse Actions Based on Information Obtained From Third Parties Who Are Not Consumer Reporting Agencies If a person denies(or increases the charge for)credit for personal,family,or household purposes based either wholly or partly upon information from a person other than a CRA,and the information is the type of consumer information covered by the FCRA,Section 615(b)(1)requires that the user clearly and accurately disclose to the consumer his or her right to be told the nature of the information that was relied upon if the consumer makes a written request within 60 days of notification. The user must provide the disclosure within a reasonable period of time following the consumer's written request. 3.Adverse Actions Based on Information Obtained From Affiliates