National Center for Safety Initiatives LLC 8/15/2019

DocuSign Envelope ID:4F8A5C36-6108-4FB3-9B63-6018FD5692BB NATIONAL CENTER FOR SAFETY INITIATIVES END-USER AGREEMENT If a person takes an adverse action involving insurance,employment,or a credit transaction initiated by the consumer, based on information of the type covered by the FCRA,and this information was obtained from an entity affiliated with the user of the information by common ownership or control,Section 615(b)(2)requires the user to notify the consumer of the adverse action. The notice must inform the consumer that he or she may obtain a disclosure of the nature of the information relied upon by making a written request within 60 days of receiving the adverse action notice. If the consumer makes such a request,the user must disclose the nature of the information not later than 30 days after receiving the request. If consumer report information is shared among affiliates and then used for an adverse action,the user must make an adverse action disclosure as set forth in I.C.1 above. D.Users Have Obligations When Fraud and Active Duty Military Alerts are in Files When a consumer has placed a fraud alert,including one relating to identify theft,or an active duty military alert with a nationwide consumer reporting agency as defined in Section 603(p)and resellers,Section 605A(h)imposes limitations on users of reports obtained from the consumer reporting agency in certain circumstances,including the establishment of a new credit plan and the issuance of additional credit cards. For initial fraud alerts and active duty alerts,the user must have reasonable policies and procedures in place to form a belief that the user knows the identity of the applicant or contact the consumer at a telephone number specified by the consumer;in the case of extended fraud alerts,the user must contact the consumer in accordance with the contact information provided in the consumer's alert. E. Users Have Obligations When Notified of an Address Discrepancy Section 605(h)requires nationwide CRAs,as defined in Section 603(p),to notify users that request reports when the address for a consumer provided by the user in requesting the report is substantially different from the addresses in the consumer's file. When this occurs,users must comply with regulations specifying the procedures to be followed,which will be issued by the Consumer Financial Protection Bureau and the banking and credit union regulators. The Consumer Financial Protection Bureau regulations will be available at www.consumerfinance.gov/learnmore/. F. Users Have Obligations When Disposing of Records Section 628 requires that all users of consumer report information have in place procedures to properly dispose of records containing this information. The Consumer Financial Protection Bureau,the Securities and Exchange Commission,and the banking and credit union regulators have issued regulations covering disposal. The Consumer Financial Protection Bureau regulations may be found at www.consumerfinance.gov/learnmore/. H. CREDITORS MUST MAKE ADDITIONAL DISCLOSURES If a person uses a consumer report in connection with an application for,or a grant,extension,or provision of,credit to a consumer on material terms that are materially less favorable than the most favorable terms available to a substantial proportion of consumers from or through that person,based in whole or in part on a consumer report,the person must provide a risk-based pricing notice to the consumer in accordance with regulations prescribed by the Consumer Financial Protection Bureau. Section 609(g)requires a disclosure by all persons that make or arrange loans secured by residential real property(one to four units)and that use credit scores. These persons must provide credit scores and other information about credit scores to applicants,including the disclosure set forth in Section 609(g)(1)(D)("Notice to the Home Loan Applicant"). III.OBLIGATIONS OF USERS WHEN CONSUMER REPORTS ARE OBTAINED FOR EMPLOYMENT PURPOSES A.Employment Other Than in the Trucking Industry If the information from a CRA is used for employment purposes,the user has specific duties,which are set forth in Section 604(b)of the FCRA. The user must: • Make a clear and conspicuous written disclosure to the consumer before the report is obtained,in a document that consists solely of the disclosure,that a consumer report may be obtained.