National Center for Safety Initiatives LLC 8/15/2019

DocuSign Envelope ID:4F8A5C36-6108-4FB3-9663-6018FD5692BB NATIONAL CENTER FOR SAFETY INITIATIVES END-USER AGREEMENT report is to be used for employment purposes—or in connection with a credit transaction(except as provided in regulations issued by the banking and credit union regulators)—the consumer must provide specific written consent and the medical information must be relevant. Any user who receives medical information shall not disclose the information to any other person(except where necessary to carry out the purpose for which the information was disclosed,or a permitted by statute, regulation,or order). VII. OBLIGATIONS OF USERS OF"PRESCREENED"LISTS The FCRA permits creditors and insurers to obtain limited consumer report information for use in connection with unsolicited offers of credit or insurance under certain circumstances. Sections 603(1),604(c),604(e),and 614(d).This practice is known as"prescreening"and typically involves obtaining a list of consumers from a CRA who meet certain pre- established criteria. If any person intends to use prescreened lists,that person must(1)before the offer is made,establish the criteria that will be relied upon to make the offer and grant credit or insurance,and(2)maintain such criteria on file for a three-year period beginning on the date on which the offer is made to each consumer. In addition,any user must provide with each written solicitation a clear and conspicuous statement that: •Information contained in a consumer's CRA file was used in connection with the transaction. •The consumer received the offer because he or she satisfied the criteria for credit worthiness or insurability used to screen for the offer. •Credit or insurance may not be extended if,after the consumer responds,it is determined that the consumer does not meet the criteria used for screening or any applicable criteria bearing on credit worthiness or insurability,or the consumer does not furnish required collateral. •The consumer may prohibit the use of information in his or her file in connection with future prescreened offers of credit or insurance by contacting the notification system established by the CRA that provided the report. The statement must include the address and toll-free telephone number of the appropriate notification system. In addition,the Consumer Financial Protection Bureau has established the format,type size,and manner of the disclosure required by Section 615(d),with which users must comply. The regulation is 12 CFR 1022.54. VIII.OBLIGATIONS OF RESELLERS A. Disclosure and Certification Requirements Section 607(e)requires any person who obtains a consumer report for resale to take the following steps: • Disclose the identity of the end-user to the source CRA. • Identify to the source CRA each permissible purpose for which the report will be furnished to the end-user. • Establish and follow reasonable procedures to ensure that reports are resold only for permissible purposes, including procedures to obtain: (1) the identify of all end-users; (2) certifications from all users of each purpose for which reports will be used;and (3) certifications that reports will not be used for any purpose other than the purpose(s)specified to the reseller. Resellers must make reasonable efforts to verify this information before selling the report. B. Reinvestigations by Resellers Under Section 611(f),if a consumer disputes the accuracy or completeness of information in a report prepared by a reseller, the reseller must determine whether this is a result of an action or omission on its part and,if so,correct or delete the information. If not,the reseller must send the dispute to the source CRA for reinvestigation. When any CRA notifies the reseller of the results of an investigation,the reseller must immediately convey the information to the consumer. C. Fraud Alerts and Resellers Section 605A(f)requires resellers who receive fraud alerts or active duty alerts from another consumer reporting agency to include these in their reports. IX.LIABILITY FOR VIOLATIONS OF THE FCRA