ID Theft information from the Office of Consumer Protection
If you live in Kentucky, you have the right as of July 12, 2006, to put a "security freeze" on your credit report with each credit reporting agency. A security freeze means that your credit report cannot be shared with others, such as potential creditors, without your authorization. A security freeze may help prevent identity theft, because most businesses will not open credit accounts without first checking your credit report. Additionally, if someone changes information about your name, address, birth date, or Social Security Number in a frozen credit report, the credit reporting agency must send written confirmation of the change to you within 30 days.
Each credit reporting agency may charge you up to $10 for security freezes, but there is no fee for an identity theft victim who provides a valid police report upon request. The amount of the fee is subject to a yearly Consumer Price Index (CPI) adjustment.
How to "freeze" your credit report
To put a security freeze on your credit report, send a written request by certified mail to the credit reporting agency, with proper identification, and with the required fee. Unless you are an identity theft victim and can provide a valid police report, each credit bureau may charge a fee of up to $10 to place the freeze. (The fee is subject to annual increases at the beginning of each year, based on the CPI.)
You may want to contact each credit bureau to confirm the amount of the fee and any special information they need with your request. Be sure to check each credit bureau's website for the most current information on security freezes.
After receiving the request, the credit bureau must place the freeze within 10 business days of receiving your request and send you a password or personal identification number (PIN) to use for temporarily lifting or removing the security freeze.
How to make changes to your security freeze
You may allow access to your credit report for a specific period of time after you have placed a security freeze ("temporarily lifting"), or you can permanently remove the freeze. Some reasons for temporarily lifting a security freeze include obtaining credit, or to allow a potential employer or lessor to see your credit report, where you don't want to permanently remove the freeze. To do so you must contact each credit bureau from which you want to temporarily lift or permanently remove the freeze and provide proper identification and the fee (up to $10). Again, you may want to contact the credit bureau for specific information about temporarily lifting or permanently removing a freeze.
Be sure that you plan ahead and make the request well ahead of time, because the credit bureau has 3 business days to comply after receiving your request.
How long does your security freeze last?
The security freeze will remain on your credit report for up to seven years from the date it was put in place, unless you temporarily lift or permanently remove it sooner. A temporary lift will only last for the period of time you specify, after which the credit reporting agency must close the temporary lift (putting the credit report back into "freeze").
However, if a security freeze is placed because you make a material misrepresentation of fact, the credit reporting agency may temporary lift or permanently remove the freeze without your authorization, but only after providing prior written notice to you.
Requesting a new PIN or password
You may request a new PIN or password at any time. To do so, send a written request by certified mail (addresses shown above) to the credit bureau, with proper identification and any required fee. You may want to contact the credit bureau for specific information about requesting a new PIN or password.
After receiving the request, the agency has 10 business days to provide you with a new, unique PIN or password.
Who can get your credit report during a security freeze
Even if a security freeze is in effect on your credit report, the credit reporting agency may provide it without your authorization, to:
- government entities, including a law enforcement agency or court
- private collection agencies (but only to assist in collecting a debt from you)
- anyone to whom you owe a financial obligation (but only to review the account, collect the obligation or facilitate an extension of credit)
- persons using the credit report for making prescreened offers of credit as allowed by federal law
- consumer reporting agencies in order to give a copy of your credit report to you
- child support enforcement agencies
- resellers of credit information (but a consumer reporting agency acting as a reseller must honor any freeze placed on the credit report received by another consumer reporting agency)
- check services or fraud prevention services companies
- deposit account information service companies
- persons using the report to prepare for a civil or criminal action
- insurance companies, to investigate claims, set or adjust rates, or underwrite property and casualty insurance
Enforcement of your security freeze rights
If you believe that your security freeze rights have been violated, you may enforce your rights in state court.
If the violation was due to a willful failure to comply with the security freeze law, the violator could be liable to you for your actual damages caused by the failure, liquidated damages of $100 to $1,000, punitive damages (in an amount allowed by the court), and your litigation costs and reasonable attorney's fees (in amounts allowed by the court).
If the violation was due to a negligent failure to comply with the security freeze law, the violator could be liable to you for your actual damages caused by the failure and your litigation costs and reasonable attorney's fees (in amounts allowed by the court).
You may also file a consumer complaint with the Kentucky Attorney General's Office of Consumer Protection. The form is available on the internet (click here) or you can call 888-432-9257 to ask that a form be mailed to you.
What is the difference between a fraud alert and a freeze?
A fraud alert is a special message on the credit report, requested by the consumer, that a credit issuer receives when checking a consumer's credit rating. It is allowed by federal law, not by state law. A fraud alert tells the credit issuer that there may be fraud involved in the account. A fraud alert can help protect you against identity theft, and it can also slow down your ability to get new credit. However, a fraud alert should not stop you from using your existing credit cards or other accounts.
A security freeze, which is also requested by the consumer, means that your credit report cannot be seen unless you give your consent (subject to the exceptions discussed above). It is allowed by state law, not by federal law. Most businesses will not open new credit accounts without first checking a consumer's credit history, so having a security freeze in effect may prevent you from immediately opening new accounts unless you have temporarily lifted the freeze. If your credit reports are frozen, even someone who has your name and Social Security number probably would not be able to obtain credit in your name, unless they also have your security freeze PIN or password. A security freeze should not stop you from using your existing credit cards or other accounts.
Can I open new credit accounts if my credit reports are frozen?
Yes, but you will need to plan ahead to make sure that the freeze has been temporarily lifted during a time period that the creditor can access it. This may require that you coordinate access to your credit report with the person to whom you want to make the credit report available. See How to Make Changes to Your Security Freeze above for more information about temporary lifting a security freeze.
Keep in mind that a third party may treat a credit application as incomplete if it requests access to a consumer report in connection with the application and cannot obtain the consumer report or credit score because of the freeze.
What will a creditor who requests my file see if it is frozen?
A creditor will see a message or a code indicating the file is frozen.
Can a creditor get my credit score if my file is frozen?
No. A creditor who requests your file from one of the three credit bureaus will only get a message or a code indicating that the file is frozen.
Can I order my own credit report if my file is frozen?
Does freezing my credit report with one credit bureau freeze my credit reports with other credit bureaus?
No. Different credit issuers may use different credit bureaus. If you want to stop your credit report from being viewed you must make separate freeze requests with each credit bureau.
Does freezing my credit report also freeze my spouse's credit reports?
No. For both spouses to freeze their credit reports, both have to freeze their separate credit reports via separate letters requesting the freeze. Separate fees apply.
Will a freeze lower my credit score?
Does freezing my file mean that I won't receive pre-approved credit offers?
No. You can stop the pre-approved credit offers by calling 888-5OPTOUT (888-567-8688). Or you can do this online at www.optoutprescreen.com. This will stop the offers that go through the credit bureaus, but may not stop other offers. It's good for five years or you can make it permanent.
Can an employer do a background check on my credit report?
No. You would have to temporarily lift the freeze to allow a background check on your credit reports maintained by the credit bureaus, just as you would to apply for credit. The process for temporarily lifting the freeze is described above.
What law requires security freezes?
Kentucky's security freeze takes effect on July 12, 2006. The statutes are KRS 367.363 - 367.365. The law was passed as House Bill 54 in the 2006 Regular Session of the Kentucky Legislature. You may view HB 54 online at
You can also request a copy of the bill from the Legislative Research Commission, Public Bill Room, Capitol, Frankfort, KY 40601 or call (502) 564-8100 and ask to be transferred to the Public Bill Room.
Visit these sites for more information
Kentucky Attorney General, Office of Consumer Protection
Contains links to an ID theft victim kit, the free annual credit report website, the Federal Trade Commission's website, and other information and tips for victims.
Federal Trade Commission
The FTC's website has extensive information about identity theft and steps to minimize the risk of identity theft
This is a site maintained by the 3 credit bureaus for the purpose of requesting a free credit report (1 per year from each bureau). Checking your credit report regularly is a good way to deter identity theft. This website also has links to the credit bureaus' websites, each of which has extensive information about identity theft and protecting credit report information.
Privacy Rights Clearinghouse
This site has extensive information regarding several privacy issues, including identity theft.
Identity Theft Resource Center
This site has extensive information regarding identity theft and actions for identity theft victims to take.