{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/59.1-444.3.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/59.1-444.3.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/59.1-444.3.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/59.1-444.3.html"}],"law_id":67425,"edition_id":1,"section_id":67425,"structure_id":16371,"section_number":"59.1-444.3","catch_line":"Security freezes for protected consumers","history":"2014, c. 570; 2018, cc. 264, 303, 480; 2020, c. 243.","full_text":"A\n\nAs used in this section, unless the context requires a different meaning:\n\t\t\t“Protected consumer” means a consumer who is either:1\n\nUnder the age of 16 years at the time a request for the placement of a security freeze is made; or2\n\nAn incapacitated person for whom a guardian or conservator has been appointed in accordance with Chapter 20 (§ 64.2-2000 et seq.) of Title 64.2.\n\t\t\t\t“Record” means a compilation of information regarding a specific identified protected consumer, which compilation is created by a consumer reporting agency solely for the purpose of complying with the requirement for a record’s establishment set forth in subsection D.\n\t\t\t\t“Representative” means a person who provides to a consumer reporting agency sufficient proof of authority to act on behalf of a protected consumer.\n\t\t\t\t“Security freeze” means:1\n\nIf a consumer reporting agency does not have a file pertaining to a protected consumer, a restriction that (i) is placed on the protected consumer’s record in accordance with this section and (ii) prohibits the consumer reporting agency from releasing the protected consumer’s record except as provided in this section; or2\n\nIf a consumer reporting agency has a file pertaining to the protected consumer, a restriction that (i) is placed on the protected consumer’s credit report in accordance with this section and (ii) prohibits the consumer reporting agency from releasing the protected consumer’s credit report or any information derived from the protected consumer’s credit report except as provided in this section.\n\t\t\t\t“Sufficient proof of authority” means documentation that shows a representative has authority to act on behalf of a protected consumer. “Sufficient proof of authority” includes (i) an order issued by a court of law, (ii) a lawfully executed and valid power of attorney, (iii) a birth certification; or (iv) a written, notarized statement signed by a representative that expressly describes the authority of the representative to act on behalf of the protected consumer.\n\t\t\t\t“Sufficient proof of identification” means information or documentation that identifies a protected consumer or a representative of a protected consumer. “Sufficient proof of identification” includes (i) a social security number or a copy of a social security card issued by the U.S. Social Security Administration; (ii) a certified or official copy of a birth certificate issued by the entity authorized to issue the birth certificate; (iii) a copy of a driver’s license, an identification card issued by the Department of Motor Vehicles, or any other government-issued identification; or (iv) a copy of a bill, including a bill for telephone, sewer, septic tank, water, electric, oil, or natural gas services, that shows a name and home address.B\n\nThis section does not apply to the use of a protected consumer’s credit report or record by:1\n\nA person administering a credit file monitoring subscription service to which the protected consumer has subscribed or the representative of the protected consumer has subscribed on behalf of the protected consumer;2\n\nA person providing the protected consumer or the protected consumer’s representative with a copy of the protected consumer’s credit report on request of the protected consumer or the protected consumer’s representative; or3\n\nAn entity listed in subsection O of § 59.1-444.2.C\n\nA consumer reporting agency shall place a security freeze for a protected consumer if:1\n\nThe consumer reporting agency receives a request from the protected consumer’s representative for the placement of the security freeze under this section; and2\n\nThe protected consumer’s representative:\n\t\t\t\ta. Submits the request to the consumer reporting agency at the address or other point of contact and in the manner specified by the consumer reporting agency;\n\t\t\t\tb. Provides to the consumer reporting agency sufficient proof of identification of the protected consumer and the representative; and\n\t\t\t\tc. Provides to the consumer reporting agency sufficient proof of authority to act on behalf of the protected consumer.D\n\nIf a consumer reporting agency does not have a file pertaining to a protected consumer when the consumer reporting agency receives a request under subsection C from the protected consumer’s representative for the placement of a security freeze, the consumer reporting agency shall create a record for the protected consumer. A record may not be created or used to consider the protected consumer’s creditworthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living for the purpose of serving as a factor in establishing the consumer’s eligibility for (i) credit or insurance to be used primarily for personal, family, or household purposes or (ii) employment.E\n\nWithin 30 days after receiving a request that meets the requirements of subsection C, a consumer reporting agency shall place a security freeze for the protected consumer.F\n\nUnless a security freeze for a protected consumer is removed in accordance with subsection H or K, a consumer reporting agency may not release the protected consumer’s credit report, any information derived from the protected consumer’s credit report, or any record created for the protected consumer.G\n\nA security freeze for a protected consumer placed under subsection E shall remain in effect until:1\n\nThe protected consumer or the protected consumer’s representative requests the consumer reporting agency to remove the security freeze in accordance with subsection H; or2\n\nThe security freeze is removed in accordance with subsection K.H\n\nIf a protected consumer or a protected consumer’s representative wishes to remove a security freeze for the protected consumer, the protected consumer or the protected consumer’s representative shall:1\n\nSubmit a request for the removal of the security freeze to the consumer reporting agency at the address or other point of contact and in the manner specified by the consumer reporting agency; and2\n\nProvide to the consumer reporting agency:\n\t\t\t\ta. In the case of a request by the protected consumer:1\n\nProof that the sufficient proof of authority for the protected consumer’s representative to act on behalf of the protected consumer is no longer valid; and2\n\nSufficient proof of identification of the protected consumer; or\n\t\t\t\t\tb. In the case of a request by the representative of a protected consumer:1\n\nSufficient proof of identification of the protected consumer and the representative; and2\n\nSufficient proof of authority to act on behalf of the protected consumer.I\n\nWithin 30 days after receiving a request that meets the requirements of subsection H, the consumer reporting agency shall remove the security freeze for the protected consumer.J\n\nA consumer reporting agency shall not charge a fee for any service performed under this section.K\n\nA consumer reporting agency may remove a security freeze for a protected consumer or delete a record of a protected consumer if the security freeze was placed or the record was created based on a material misrepresentation of fact by the protected consumer or the protected consumer’s representative.L\n\nAny person who obtains a consumer report, requests a security freeze, requests the temporary lift of a freeze, or requests the removal of a security freeze from a consumer reporting agency under false pretenses or in an attempt to violate federal or state law shall be liable to the consumer reporting agency for damages sustained by the consumer reporting agency as provided in subsection R of § 59.1-444.2.M\n\nNotwithstanding any other provision of law:1\n\nThe exclusive authority to bring an action for any violation of subsection E shall be with the Attorney General. In any action brought under this subsection, the Attorney General may cause an action to be brought in the name of the Commonwealth to enjoin the violation and to recover damages for aggrieved protected consumers.2\n\nIn any action brought under this subsection, if the court finds a willful violation, the court may, in its discretion, also award a civil penalty of not more than $1,000 per violation, to be deposited in the Literary Fund.3\n\nIn any action brought under this subsection, the Attorney General may recover any costs, the reasonable expenses incurred in investigating and preparing the case, and attorney fees.","order_by":null,"text":{"0":{"id":244299,"text":"As used in this section, unless the context requires a different meaning:\n\t\t\t“Protected consumer” means a consumer who is either:","type":"section","prefixes":["A"],"prefix":"A","entire_prefix":"A","prefix_anchor":"A","level":1,"next_prefix":"A1"},"1":{"id":244300,"text":"Under the age of 16 years at the time a request for the placement of a security freeze is made; or","type":"section","prefixes":["A","1"],"prefix":"1","entire_prefix":"A1","prefix_anchor":"A1","level":2,"prior_prefix":"A","next_prefix":"A2"},"2":{"id":244301,"text":"An incapacitated person for whom a guardian or conservator has been appointed in accordance with Chapter 20 (§ 64.2-2000 et seq.) of Title 64.2.\n\t\t\t\t“Record” means a compilation of information regarding a specific identified protected consumer, which compilation is created by a consumer reporting agency solely for the purpose of complying with the requirement for a record’s establishment set forth in subsection D.\n\t\t\t\t“Representative” means a person who provides to a consumer reporting agency sufficient proof of authority to act on behalf of a protected consumer.\n\t\t\t\t“Security freeze” means:","type":"section","prefixes":["A","2"],"prefix":"2","entire_prefix":"A2","prefix_anchor":"A2","level":2,"prior_prefix":"A1","next_prefix":"A1"},"3":{"id":244302,"text":"If a consumer reporting agency does not have a file pertaining to a protected consumer, a restriction that (i) is placed on the protected consumer’s record in accordance with this section and (ii) prohibits the consumer reporting agency from releasing the protected consumer’s record except as provided in this section; or","type":"section","prefixes":["A","1"],"prefix":"1","entire_prefix":"A1","prefix_anchor":"A1","level":2,"prior_prefix":"A2","next_prefix":"A2"},"4":{"id":244303,"text":"If a consumer reporting agency has a file pertaining to the protected consumer, a restriction that (i) is placed on the protected consumer’s credit report in accordance with this section and (ii) prohibits the consumer reporting agency from releasing the protected consumer’s credit report or any information derived from the protected consumer’s credit report except as provided in this section.\n\t\t\t\t“Sufficient proof of authority” means documentation that shows a representative has authority to act on behalf of a protected consumer. “Sufficient proof of authority” includes (i) an order issued by a court of law, (ii) a lawfully executed and valid power of attorney, (iii) a birth certification; or (iv) a written, notarized statement signed by a representative that expressly describes the authority of the representative to act on behalf of the protected consumer.\n\t\t\t\t“Sufficient proof of identification” means information or documentation that identifies a protected consumer or a representative of a protected consumer. “Sufficient proof of identification” includes (i) a social security number or a copy of a social security card issued by the U.S. Social Security Administration; (ii) a certified or official copy of a birth certificate issued by the entity authorized to issue the birth certificate; (iii) a copy of a driver’s license, an identification card issued by the Department of Motor Vehicles, or any other government-issued identification; or (iv) a copy of a bill, including a bill for telephone, sewer, septic tank, water, electric, oil, or natural gas services, that shows a name and home address.","type":"section","prefixes":["A","2"],"prefix":"2","entire_prefix":"A2","prefix_anchor":"A2","level":2,"prior_prefix":"A1","next_prefix":"B"},"5":{"id":244304,"text":"This section does not apply to the use of a protected consumer’s credit report or record by:","type":"section","prefixes":["B"],"prefix":"B","entire_prefix":"B","prefix_anchor":"B","level":1,"prior_prefix":"A2","next_prefix":"B1"},"6":{"id":244305,"text":"A person administering a credit file monitoring subscription service to which the protected consumer has subscribed or the representative of the protected consumer has subscribed on behalf of the protected consumer;","type":"section","prefixes":["B","1"],"prefix":"1","entire_prefix":"B1","prefix_anchor":"B1","level":2,"prior_prefix":"B","next_prefix":"B2"},"7":{"id":244306,"text":"A person providing the protected consumer or the protected consumer’s representative with a copy of the protected consumer’s credit report on request of the protected consumer or the protected consumer’s representative; or","type":"section","prefixes":["B","2"],"prefix":"2","entire_prefix":"B2","prefix_anchor":"B2","level":2,"prior_prefix":"B1","next_prefix":"B3"},"8":{"id":244307,"text":"An entity listed in subsection O of § 59.1-444.2.","type":"section","prefixes":["B","3"],"prefix":"3","entire_prefix":"B3","prefix_anchor":"B3","level":2,"prior_prefix":"B2","next_prefix":"C"},"9":{"id":244308,"text":"A consumer reporting agency shall place a security freeze for a protected consumer if:","type":"section","prefixes":["C"],"prefix":"C","entire_prefix":"C","prefix_anchor":"C","level":1,"prior_prefix":"B3","next_prefix":"C1"},"10":{"id":244309,"text":"The consumer reporting agency receives a request from the protected consumer’s representative for the placement of the security freeze under this section; and","type":"section","prefixes":["C","1"],"prefix":"1","entire_prefix":"C1","prefix_anchor":"C1","level":2,"prior_prefix":"C","next_prefix":"C2"},"11":{"id":244310,"text":"The protected consumer’s representative:\n\t\t\t\ta. Submits the request to the consumer reporting agency at the address or other point of contact and in the manner specified by the consumer reporting agency;\n\t\t\t\tb. Provides to the consumer reporting agency sufficient proof of identification of the protected consumer and the representative; and\n\t\t\t\tc. Provides to the consumer reporting agency sufficient proof of authority to act on behalf of the protected consumer.","type":"section","prefixes":["C","2"],"prefix":"2","entire_prefix":"C2","prefix_anchor":"C2","level":2,"prior_prefix":"C1","next_prefix":"D"},"12":{"id":244311,"text":"If a consumer reporting agency does not have a file pertaining to a protected consumer when the consumer reporting agency receives a request under subsection C from the protected consumer’s representative for the placement of a security freeze, the consumer reporting agency shall create a record for the protected consumer. A record may not be created or used to consider the protected consumer’s creditworthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living for the purpose of serving as a factor in establishing the consumer’s eligibility for (i) credit or insurance to be used primarily for personal, family, or household purposes or (ii) employment.","type":"section","prefixes":["D"],"prefix":"D","entire_prefix":"D","prefix_anchor":"D","level":1,"prior_prefix":"C2","next_prefix":"E"},"13":{"id":244312,"text":"Within 30 days after receiving a request that meets the requirements of subsection C, a consumer reporting agency shall place a security freeze for the protected consumer.","type":"section","prefixes":["E"],"prefix":"E","entire_prefix":"E","prefix_anchor":"E","level":1,"prior_prefix":"D","next_prefix":"F"},"14":{"id":244313,"text":"Unless a security freeze for a protected consumer is removed in accordance with subsection H or K, a consumer reporting agency may not release the protected consumer’s credit report, any information derived from the protected consumer’s credit report, or any record created for the protected consumer.","type":"section","prefixes":["F"],"prefix":"F","entire_prefix":"F","prefix_anchor":"F","level":1,"prior_prefix":"E","next_prefix":"G"},"15":{"id":244314,"text":"A security freeze for a protected consumer placed under subsection E shall remain in effect until:","type":"section","prefixes":["G"],"prefix":"G","entire_prefix":"G","prefix_anchor":"G","level":1,"prior_prefix":"F","next_prefix":"G1"},"16":{"id":244315,"text":"The protected consumer or the protected consumer’s representative requests the consumer reporting agency to remove the security freeze in accordance with subsection H; or","type":"section","prefixes":["G","1"],"prefix":"1","entire_prefix":"G1","prefix_anchor":"G1","level":2,"prior_prefix":"G","next_prefix":"G2"},"17":{"id":244316,"text":"The security freeze is removed in accordance with subsection K.","type":"section","prefixes":["G","2"],"prefix":"2","entire_prefix":"G2","prefix_anchor":"G2","level":2,"prior_prefix":"G1","next_prefix":"H"},"18":{"id":244317,"text":"If a protected consumer or a protected consumer’s representative wishes to remove a security freeze for the protected consumer, the protected consumer or the protected consumer’s representative shall:","type":"section","prefixes":["H"],"prefix":"H","entire_prefix":"H","prefix_anchor":"H","level":1,"prior_prefix":"G2","next_prefix":"H1"},"19":{"id":244318,"text":"Submit a request for the removal of the security freeze to the consumer reporting agency at the address or other point of contact and in the manner specified by the consumer reporting agency; and","type":"section","prefixes":["H","1"],"prefix":"1","entire_prefix":"H1","prefix_anchor":"H1","level":2,"prior_prefix":"H","next_prefix":"H2"},"20":{"id":244319,"text":"Provide to the consumer reporting agency:\n\t\t\t\ta. In the case of a request by the protected consumer:","type":"section","prefixes":["H","2"],"prefix":"2","entire_prefix":"H2","prefix_anchor":"H2","level":2,"prior_prefix":"H1","next_prefix":"H21"},"21":{"id":244320,"text":"Proof that the sufficient proof of authority for the protected consumer’s representative to act on behalf of the protected consumer is no longer valid; and","type":"section","prefixes":["H","2","1"],"prefix":"1","entire_prefix":"H21","prefix_anchor":"H21","level":3,"prior_prefix":"H2","next_prefix":"H22"},"22":{"id":244321,"text":"Sufficient proof of identification of the protected consumer; or\n\t\t\t\t\tb. In the case of a request by the representative of a protected consumer:","type":"section","prefixes":["H","2","2"],"prefix":"2","entire_prefix":"H22","prefix_anchor":"H22","level":3,"prior_prefix":"H21","next_prefix":"H21"},"23":{"id":244322,"text":"Sufficient proof of identification of the protected consumer and the representative; and","type":"section","prefixes":["H","2","1"],"prefix":"1","entire_prefix":"H21","prefix_anchor":"H21","level":3,"prior_prefix":"H22","next_prefix":"H22"},"24":{"id":244323,"text":"Sufficient proof of authority to act on behalf of the protected consumer.","type":"section","prefixes":["H","2","2"],"prefix":"2","entire_prefix":"H22","prefix_anchor":"H22","level":3,"prior_prefix":"H21","next_prefix":"I"},"25":{"id":244324,"text":"Within 30 days after receiving a request that meets the requirements of subsection H, the consumer reporting agency shall remove the security freeze for the protected consumer.","type":"section","prefixes":["I"],"prefix":"I","entire_prefix":"I","prefix_anchor":"I","level":1,"prior_prefix":"H22","next_prefix":"J"},"26":{"id":244325,"text":"A consumer reporting agency shall not charge a fee for any service performed under this section.","type":"section","prefixes":["J"],"prefix":"J","entire_prefix":"J","prefix_anchor":"J","level":1,"prior_prefix":"I","next_prefix":"K"},"27":{"id":244326,"text":"A consumer reporting agency may remove a security freeze for a protected consumer or delete a record of a protected consumer if the security freeze was placed or the record was created based on a material misrepresentation of fact by the protected consumer or the protected consumer’s representative.","type":"section","prefixes":["K"],"prefix":"K","entire_prefix":"K","prefix_anchor":"K","level":1,"prior_prefix":"J","next_prefix":"L"},"28":{"id":244327,"text":"Any person who obtains a consumer report, requests a security freeze, requests the temporary lift of a freeze, or requests the removal of a security freeze from a consumer reporting agency under false pretenses or in an attempt to violate federal or state law shall be liable to the consumer reporting agency for damages sustained by the consumer reporting agency as provided in subsection R of § 59.1-444.2.","type":"section","prefixes":["L"],"prefix":"L","entire_prefix":"L","prefix_anchor":"L","level":1,"prior_prefix":"K","next_prefix":"M"},"29":{"id":244328,"text":"Notwithstanding any other provision of law:","type":"section","prefixes":["M"],"prefix":"M","entire_prefix":"M","prefix_anchor":"M","level":1,"prior_prefix":"L","next_prefix":"M1"},"30":{"id":244329,"text":"The exclusive authority to bring an action for any violation of subsection E shall be with the Attorney General. In any action brought under this subsection, the Attorney General may cause an action to be brought in the name of the Commonwealth to enjoin the violation and to recover damages for aggrieved protected consumers.","type":"section","prefixes":["M","1"],"prefix":"1","entire_prefix":"M1","prefix_anchor":"M1","level":2,"prior_prefix":"M","next_prefix":"M2"},"31":{"id":244330,"text":"In any action brought under this subsection, if the court finds a willful violation, the court may, in its discretion, also award a civil penalty of not more than $1,000 per violation, to be deposited in the Literary Fund.","type":"section","prefixes":["M","2"],"prefix":"2","entire_prefix":"M2","prefix_anchor":"M2","level":2,"prior_prefix":"M1","next_prefix":"M3"},"32":{"id":244331,"text":"In any action brought under this subsection, the Attorney General may recover any costs, the reasonable expenses incurred in investigating and preparing the case, and attorney fees.","type":"section","prefixes":["M","3"],"prefix":"3","entire_prefix":"M3","prefix_anchor":"M3","level":2,"prior_prefix":"M2"}},"ancestry":[{"id":16371,"edition_id":1,"name":"Consumer Reporting Agencies","identifier":"35.1","label":"chapter","depth":2,"order_by":1,"parent_id":12809,"metadata":{},"date_created":"2026-06-26 04:15:27","date_modified":"2026-06-26 04:15:27","permalink":{"id":261549,"object_type":"structure","relational_id":16371,"identifier":"35.1","token":"59.1\/35.1","url":"\/59.1\/35.1\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12809,"edition_id":1,"name":"Trade and Commerce","identifier":"59.1","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:54","date_modified":"2026-06-26 03:43:54","permalink":{"id":259521,"object_type":"structure","relational_id":12809,"identifier":"59.1","token":"59.1","url":"\/59.1\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":72869,"structure_id":16371,"section_number":"59.1-444.1","catch_line":"Definitions","url":"\/59.1-444.1\/","token":"59.1\/35.1\/59.1-444.1","metadata":false},{"id":76739,"structure_id":16371,"section_number":"59.1-444.2","catch_line":"Security freezes","url":"\/59.1-444.2\/","token":"59.1\/35.1\/59.1-444.2","metadata":false},{"id":67425,"structure_id":16371,"section_number":"59.1-444.3","catch_line":"Security freezes for protected consumers","url":"\/59.1-444.3\/","token":"59.1\/35.1\/59.1-444.3","metadata":false},{"id":76508,"structure_id":16371,"section_number":"59.1-444.4","catch_line":"Reporting of medical debt prohibited; civil penalty","url":"\/59.1-444.4\/","token":"59.1\/35.1\/59.1-444.4","metadata":false}],"previous_section":{"id":76739,"structure_id":16371,"section_number":"59.1-444.2","catch_line":"Security freezes","url":"\/59.1-444.2\/","token":"59.1\/35.1\/59.1-444.2","metadata":false},"next_section":{"id":76508,"structure_id":16371,"section_number":"59.1-444.4","catch_line":"Reporting of medical debt prohibited; civil penalty","url":"\/59.1-444.4\/","token":"59.1\/35.1\/59.1-444.4","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/59.1-444.3\/","history_text":"

This law was first created in 2014. The record of its establishment is cataloged in chapter 570<\/a> of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year. It has been modified 2 times. Those modifications are cataloged by \u201cThe Acts of Assembly,\u201d a state publication, by year and chapter. Those modifications that can be read on the General Assembly\u2019s website will be linked accordingly. Those modifications are as follows: in 2018, chapters 264<\/a>, 303<\/a>, and 480<\/a>; in 2020, chapter 243<\/a>.<\/p>","references":[{"id":76739,"section_number":"59.1-444.2","catch_line":"Security freezes","order_by":null,"url":"\/59.1-444.2\/"},{"id":59769,"section_number":"63.2-905.2","catch_line":"Security freezes and annual credit checks for children in foster care","order_by":null,"url":"\/63.2-905.2\/"}],"refers_to":[{"id":65465,"section_number":"64.2-2000","catch_line":"Definitions","order_by":null,"url":"\/64.2-2000\/"}],"permalink":{"id":261559,"object_type":"law","relational_id":67425,"identifier":"59.1-444.3","token":"59.1\/35.1\/59.1-444.3","url":"\/59.1-444.3\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/59.1-444.3\/","token":"59.1\/35.1\/59.1-444.3","dublin_core":{"Title":"Security freezes for protected consumers","Type":"Text","Format":"text\/html","Identifier":"\u00a7 59.1-444.3","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t

A.<\/span> As used in this section, unless the context requires a different meaning:\n\t\t\t“Protected consumer<\/span>” means a consumer who is either: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> Under the age of 16 years at the time a request for the placement of a security freeze is made; or <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> An incapacitated person for whom a guardian or conservator has been appointed in accordance with Chapter 20 (§ 64.2-2000<\/a> et seq.) of Title 64.2.\n\t\t\t\t“Record<\/span>” means a compilation of information regarding a specific identified protected consumer<\/span>, which compilation is created by a consumer reporting agency<\/span> solely for the purpose of complying with the requirement for a record<\/span>’s establishment set forth in subsection D.\n\t\t\t\t“Representative<\/span>” means a person who provides to a consumer reporting agency<\/span> sufficient proof of authority<\/span> to act on behalf of a protected consumer<\/span>.\n\t\t\t\t“Security freeze” means: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> If a consumer reporting agency<\/span> does not have a file pertaining to a protected consumer<\/span>, a restriction that (i) is placed on the protected consumer<\/span>’s record<\/span> in accordance with this section and (ii) prohibits the consumer reporting agency<\/span> from releasing the protected consumer<\/span>’s record<\/span> except as provided in this section; or <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> If a consumer reporting agency<\/span> has a file pertaining to the protected consumer<\/span>, a restriction that (i) is placed on the protected consumer<\/span>’s credit report<\/span> in accordance with this section and (ii) prohibits the consumer reporting agency<\/span> from releasing the protected consumer<\/span>’s credit report<\/span> or any information derived from the protected consumer<\/span>’s credit report<\/span> except as provided in this section.\n\t\t\t\t“Sufficient proof of authority<\/span>” means documentation that shows a representative<\/span> has authority to act on behalf of a protected consumer<\/span>. “Sufficient proof of authority<\/span>” includes (i) an order<\/span> issued by a court<\/span> of law<\/span>, (ii) a lawfully executed and valid power of attorney<\/span>, (iii) a birth certification; or (iv) a written, notarized statement signed by a representative<\/span> that expressly describes the authority of the representative<\/span> to act on behalf of the protected consumer<\/span>.\n\t\t\t\t“Sufficient proof of identification<\/span>” means information or documentation that identifies a protected consumer<\/span> or a representative<\/span> of a protected consumer<\/span>. “Sufficient proof of identification<\/span>” includes (i) a social security number or a copy of a social security card issued by the U.S. Social Security Administration; (ii) a certified or official copy of a birth certificate issued by the entity authorized to issue<\/span> the birth certificate; (iii) a copy of a driver’s license, an identification card issued by the Department of Motor Vehicles, or any other government-issued identification; or (iv) a copy of a bill, including a bill for telephone, sewer, septic tank, water, electric, oil, or natural gas services, that shows a name and home address. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

B.<\/span> This section does not apply to the use of a protected consumer<\/span>’s credit report<\/span> or record<\/span> by: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> A person administering a credit file monitoring subscription service to which the protected consumer<\/span> has subscribed or the representative<\/span> of the protected consumer<\/span> has subscribed on behalf of the protected consumer<\/span>; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> A person providing the protected consumer<\/span> or the protected consumer<\/span>’s representative<\/span> with a copy of the protected consumer<\/span>’s credit report<\/span> on request of the protected consumer<\/span> or the protected consumer<\/span>’s representative<\/span>; or <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

3.<\/span> An entity listed in subsection O of § 59.1-444.2<\/a>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

C.<\/span> A consumer reporting agency<\/span> shall place a security freeze for a protected consumer<\/span> if: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> The consumer reporting agency<\/span> receives a request from the protected consumer<\/span>’s representative<\/span> for the placement of the security freeze under this section; and <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> The protected consumer<\/span>’s representative<\/span>:\n\t\t\t\ta. Submits the request to the consumer reporting agency<\/span> at the address or other point of contact and in the manner specified by the consumer reporting agency<\/span>;\n\t\t\t\tb. Provides to the consumer reporting agency<\/span> sufficient proof of identification<\/span> of the protected consumer<\/span> and the representative<\/span>; and\n\t\t\t\tc. Provides to the consumer reporting agency<\/span> sufficient proof of authority<\/span> to act on behalf of the protected consumer<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

D.<\/span> If a consumer reporting agency<\/span> does not have a file pertaining to a protected consumer<\/span> when the consumer reporting agency<\/span> receives a request under subsection C from the protected consumer<\/span>’s representative<\/span> for the placement of a security freeze, the consumer reporting agency<\/span> shall create a record<\/span> for the protected consumer<\/span>. A record<\/span> may not be created or used to consider the protected consumer<\/span>’s creditworthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living for the purpose of serving as a factor in establishing the consumer’s eligibility for (i) credit or insurance to be used primarily for personal, family, or household purposes or (ii) employment. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

E.<\/span> Within 30 days after receiving a request that meets the requirements of subsection C, a consumer reporting agency<\/span> shall place a security freeze for the protected consumer<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

F.<\/span> Unless a security freeze for a protected consumer<\/span> is removed in accordance with subsection H or K, a consumer reporting agency<\/span> may not release the protected consumer<\/span>’s credit report<\/span>, any information derived from the protected consumer<\/span>’s credit report<\/span>, or any record<\/span> created for the protected consumer<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

G.<\/span> A security freeze for a protected consumer<\/span> placed under subsection E shall remain in effect until: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> The protected consumer<\/span> or the protected consumer<\/span>’s representative<\/span> requests the consumer reporting agency<\/span> to remove the security freeze in accordance with subsection H; or <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> The security freeze is removed in accordance with subsection K. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

H.<\/span> If a protected consumer<\/span> or a protected consumer<\/span>’s representative<\/span> wishes to remove a security freeze for the protected consumer<\/span>, the protected consumer<\/span> or the protected consumer<\/span>’s representative<\/span> shall: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> Submit a request for the removal of the security freeze to the consumer reporting agency<\/span> at the address or other point of contact and in the manner specified by the consumer reporting agency<\/span>; and <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> Provide to the consumer reporting agency<\/span>:\n\t\t\t\ta. In the case of a request by the protected consumer<\/span>: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> Proof that the sufficient proof of authority<\/span> for the protected consumer<\/span>’s representative<\/span> to act on behalf of the protected consumer<\/span> is no longer valid; and <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> Sufficient proof of identification<\/span> of the protected consumer<\/span>; or\n\t\t\t\t\tb. In the case of a request by the representative<\/span> of a protected consumer<\/span>: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> Sufficient proof of identification<\/span> of the protected consumer<\/span> and the representative<\/span>; and <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> Sufficient proof of authority<\/span> to act on behalf of the protected consumer<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

I.<\/span> Within 30 days after receiving a request that meets the requirements of subsection H, the consumer reporting agency<\/span> shall remove the security freeze for the protected consumer<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

J.<\/span> A consumer reporting agency<\/span> shall not charge a fee for any service performed under this section. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

K.<\/span> A consumer reporting agency<\/span> may remove a security freeze for a protected consumer<\/span> or delete a record<\/span> of a protected consumer<\/span> if the security freeze was placed or the record<\/span> was created based on a material<\/span> misrepresentation of fact<\/span> by the protected consumer<\/span> or the protected consumer<\/span>’s representative<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

L.<\/span> Any person who obtains a consumer report<\/span>, requests a security freeze, requests the temporary lift of a freeze, or requests the removal of a security freeze from a consumer reporting agency<\/span> under false pretenses<\/span> or in an attempt to violate federal or state law<\/span> shall be liable to the consumer reporting agency<\/span> for damages<\/span> sustained by the consumer reporting agency<\/span> as provided in subsection R of § 59.1-444.2<\/a>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

M.<\/span> Notwithstanding any other provision of law<\/span>: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> The exclusive authority to bring an action for any violation of subsection E shall be with the Attorney General<\/span>. In any action brought under this subsection, the Attorney General<\/span> may cause an action to be brought in the name of the Commonwealth to enjoin the violation and to recover damages<\/span> for aggrieved protected consumers<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> In any action brought under this subsection, if the court<\/span> finds a willful violation, the court<\/span> may, in its discretion, also award a civil penalty<\/span> of not more than $1,000 per violation, to be deposited in the Literary Fund. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

3.<\/span> In any action brought under this subsection, the Attorney General<\/span> may recover any costs, the reasonable expenses incurred in investigating and preparing the case, and attorney fees. <\/i><\/a><\/p><\/section>","plain_text":" CODE OF VIRGINIA\n\nSECURITY FREEZES FOR PROTECTED CONSUMERS (\u00a7 59.1-444.3)\n\nA. As used in this section, unless the context requires a different meaning:\n\t\t\t“Protected consumer” means a consumer who is either:\n\n 1. Under the age of 16 years at the time a request for the placement of a\n security freeze is made; or\n\n 2. An incapacitated person for whom a guardian or conservator has been\n appointed in accordance with Chapter 20 (§ 64.2-2000 et seq.) of Title\n 64.2.\n \t\t\t\t“Record” means a compilation of information regarding a\n specific identified protected consumer, which compilation is created by a\n consumer reporting agency solely for the purpose of complying with the\n requirement for a record’s establishment set forth in subsection D.\n \t\t\t\t“Representative” means a person who provides to a consumer\n reporting agency sufficient proof of authority to act on behalf of a protected\n consumer.\n \t\t\t\t“Security freeze” means:\n\n 1. If a consumer reporting agency does not have a file pertaining to a\n protected consumer, a restriction that (i) is placed on the protected\n consumer’s record in accordance with this section and (ii) prohibits the\n consumer reporting agency from releasing the protected consumer’s record\n except as provided in this section; or\n\n 2. If a consumer reporting agency has a file pertaining to the protected\n consumer, a restriction that (i) is placed on the protected consumer’s\n credit report in accordance with this section and (ii) prohibits the consumer\n reporting agency from releasing the protected consumer’s credit report\n or any information derived from the protected consumer’s credit report\n except as provided in this section.\n \t\t\t\t“Sufficient proof of authority” means documentation that shows\n a representative has authority to act on behalf of a protected consumer.\n “Sufficient proof of authority” includes (i) an order issued by a\n court of law, (ii) a lawfully executed and valid power of attorney, (iii) a\n birth certification; or (iv) a written, notarized statement signed by a\n representative that expressly describes the authority of the representative to\n act on behalf of the protected consumer.\n \t\t\t\t“Sufficient proof of identification” means information or\n documentation that identifies a protected consumer or a representative of a\n protected consumer. “Sufficient proof of identification” includes\n (i) a social security number or a copy of a social security card issued by the\n U.S. Social Security Administration; (ii) a certified or official copy of a\n birth certificate issued by the entity authorized to issue the birth\n certificate; (iii) a copy of a driver’s license, an identification card\n issued by the Department of Motor Vehicles, or any other government-issued\n identification; or (iv) a copy of a bill, including a bill for telephone,\n sewer, septic tank, water, electric, oil, or natural gas services, that shows\n a name and home address.\n\nB. This section does not apply to the use of a protected consumer’s credit\nreport or record by:\n\n 1. A person administering a credit file monitoring subscription service to\n which the protected consumer has subscribed or the representative of the\n protected consumer has subscribed on behalf of the protected consumer;\n\n 2. A person providing the protected consumer or the protected consumer’s\n representative with a copy of the protected consumer’s credit report on\n request of the protected consumer or the protected consumer’s\n representative; or\n\n 3. An entity listed in subsection O of § 59.1-444.2.\n\nC. A consumer reporting agency shall place a security freeze for a protected\nconsumer if:\n\n 1. The consumer reporting agency receives a request from the protected\n consumer’s representative for the placement of the security freeze under\n this section; and\n\n 2. The protected consumer’s representative:\n \t\t\t\ta. Submits the request to the consumer reporting agency at the address or\n other point of contact and in the manner specified by the consumer reporting\n agency;\n \t\t\t\tb. Provides to the consumer reporting agency sufficient proof of\n identification of the protected consumer and the representative; and\n \t\t\t\tc. Provides to the consumer reporting agency sufficient proof of authority\n to act on behalf of the protected consumer.\n\nD. If a consumer reporting agency does not have a file pertaining to a protected\nconsumer when the consumer reporting agency receives a request under subsection\nC from the protected consumer’s representative for the placement of a\nsecurity freeze, the consumer reporting agency shall create a record for the\nprotected consumer. A record may not be created or used to consider the\nprotected consumer’s creditworthiness, credit standing, credit capacity,\ncharacter, general reputation, personal characteristics, or mode of living for\nthe purpose of serving as a factor in establishing the consumer’s\neligibility for (i) credit or insurance to be used primarily for personal,\nfamily, or household purposes or (ii) employment.\n\nE. Within 30 days after receiving a request that meets the requirements of\nsubsection C, a consumer reporting agency shall place a security freeze for the\nprotected consumer.\n\nF. Unless a security freeze for a protected consumer is removed in accordance\nwith subsection H or K, a consumer reporting agency may not release the\nprotected consumer’s credit report, any information derived from the\nprotected consumer’s credit report, or any record created for the\nprotected consumer.\n\nG. A security freeze for a protected consumer placed under subsection E shall\nremain in effect until:\n\n 1. The protected consumer or the protected consumer’s representative\n requests the consumer reporting agency to remove the security freeze in\n accordance with subsection H; or\n\n 2. The security freeze is removed in accordance with subsection K.\n\nH. If a protected consumer or a protected consumer’s representative wishes\nto remove a security freeze for the protected consumer, the protected consumer\nor the protected consumer’s representative shall:\n\n 1. Submit a request for the removal of the security freeze to the consumer\n reporting agency at the address or other point of contact and in the manner\n specified by the consumer reporting agency; and\n\n 2. Provide to the consumer reporting agency:\n \t\t\t\ta. In the case of a request by the protected consumer:\n\n 1. Proof that the sufficient proof of authority for the protected\n consumer’s representative to act on behalf of the protected consumer\n is no longer valid; and\n\n 2. Sufficient proof of identification of the protected consumer; or\n \t\t\t\t\tb. In the case of a request by the representative of a protected\n consumer:\n\n 1. Sufficient proof of identification of the protected consumer and the\n representative; and\n\n 2. Sufficient proof of authority to act on behalf of the protected consumer.\n\nI. Within 30 days after receiving a request that meets the requirements of\nsubsection H, the consumer reporting agency shall remove the security freeze for\nthe protected consumer.\n\nJ. A consumer reporting agency shall not charge a fee for any service performed\nunder this section.\n\nK. A consumer reporting agency may remove a security freeze for a protected\nconsumer or delete a record of a protected consumer if the security freeze was\nplaced or the record was created based on a material misrepresentation of fact\nby the protected consumer or the protected consumer’s representative.\n\nL. Any person who obtains a consumer report, requests a security freeze,\nrequests the temporary lift of a freeze, or requests the removal of a security\nfreeze from a consumer reporting agency under false pretenses or in an attempt\nto violate federal or state law shall be liable to the consumer reporting agency\nfor damages sustained by the consumer reporting agency as provided in subsection\nR of § 59.1-444.2.\n\nM. Notwithstanding any other provision of law:\n\n 1. The exclusive authority to bring an action for any violation of subsection\n E shall be with the Attorney General. In any action brought under this\n subsection, the Attorney General may cause an action to be brought in the name\n of the Commonwealth to enjoin the violation and to recover damages for\n aggrieved protected consumers.\n\n 2. In any action brought under this subsection, if the court finds a willful\n violation, the court may, in its discretion, also award a civil penalty of not\n more than $1,000 per violation, to be deposited in the Literary Fund.\n\n 3. In any action brought under this subsection, the Attorney General may\n recover any costs, the reasonable expenses incurred in investigating and\n preparing the case, and attorney fees.\n\nHISTORY: 2014, c. 570; 2018, cc. 264, 303, 480; 2020, c. 243.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}