Privacy Law, Fair Credit Reporting Act, and Information Access
Information access is where criminal exposure most often hides. This domain tests the Fair Credit Reporting Act, the driver's-privacy and financial-privacy statutes, and state records law.
FCRA basics
- 15 U.S.C. §1681 et seq. A business that, for a fee, regularly assembles or evaluates consumer information for third parties for employment, credit, insurance, or tenant screening is a consumer reporting agency.
- An investigative consumer report (§1681a(e)) covers character, general reputation, personal characteristics, and mode of living. The user must disclose the report to the consumer within three days of requesting it; adverse action requires notice and a summary of rights (§1681d).
- A permissible purpose (§1681b) is required, and the disposal rule (§1681w) applies. Willful violations carry actual or statutory damages, punitive damages, and fees (§1681n).
- One-off investigative support for an attorney in litigation often falls outside FCRA; recurring background screening does not.
Access statutes
- DPPA (18 U.S.C. §2721): motor-vehicle records require a permissible use and a certification; the litigation and insurance-investigation uses fit PI work, but resale or personal use does not.
- GLBA (15 U.S.C. §6821) criminalizes obtaining customer financial information by false pretenses; 18 U.S.C. §1039 does the same for phone records.
- The Stored Communications Act (18 U.S.C. §2701) bars unauthorized access to stored email and messages.
- Louisiana's Public Records Law (La. R.S. 44:1 et seq.) grants broad access subject to enumerated exemptions; use it for legitimate purposes, not harassment.
- HIPAA does not bind the PI directly, but inducing a covered entity to disclose protected health information exposes both parties.
Worked example
A landlord asks for a tenant's credit and criminal history. That is tenant screening for a third party for a fee, so FCRA applies. The file needs a permissible purpose, written authorization, accurate reporting, and an adverse-action process. Running the same check for a friend as a favor is still a consumer report - and still a violation.
Traps
- Running plates for personal reasons.
- Treating public record as unlimited use.
- Assuming the litigation exemption covers a screening contract.