Section 28-52-105 - EXCEPTIONS(1) Notwithstanding subsection (1) of section 28-52-103, Idaho Code, a consumer reporting agency may furnish a consumer's credit report to a third party if the purpose of the credit report is to: (a) Use the credit report for purposes permitted under 15 U.S.C. section 1681b(c);(b) Review the consumer's account with the third party, including for account maintenance or monitoring credit line increases or other upgrades or enhancements;(c) Collect on a financial obligation owed by the consumer to the third party requesting the credit report; or(d) Review the consumer's account with another person, or collect on a financial obligation owed by the consumer to another person and the credit report request is for purposes permitted under 15 U.S.C. section 1681b(c) or the third party requesting the credit report is a subsidiary, affiliate, agent, assignee or prospective assignee of the person holding the consumer's account or to whom the consumer owes a financial obligation.(2) The consumer's request for a security freeze does not prohibit the consumer reporting agency from disclosing the consumer's credit report for other than credit related purposes consistent with the definition of credit report in section 28-52-102, Idaho Code. The following list identifies the types of credit report disclosures by consumer reporting agencies to third parties that are not prohibited by a security freeze:(a) The third party does not use the credit report for the purpose of serving as a factor in establishing a consumer's eligibility for credit;(b) The third party is acting under a court order, warrant or subpoena requiring release of the credit report;(c) The third party is a child support agency, or its agent or assignee acting under part D, title IV, of the social security act or a similar state law;(d) The third party is the federal department of health and human services or a similar state agency, or its agent or assignee, investigating medicare or medicaid fraud;(e) The purpose of the credit report is to investigate or collect delinquent taxes, assessments or unpaid court orders and the third party is the federal internal revenue service; a state taxing authority; the division of motor vehicles of the Idaho transportation department; a county, municipality or other taxing district; a federal, state or local law enforcement agency; or the agent or assignee listed in subsection (1) or (2) of this section;(f) The third party is using the information solely for criminal record information, tenant screening, employment screening, fraud prevention or detection, or personal loss history information;(g) The third party is a person or entity regulated under title 41, Idaho Code;(h) The third party is administering a credit file monitoring service to which the consumer has subscribed; or(i) The third party requests the credit report for the sole purpose of providing the consumer with a copy of the consumer's credit report or credit score upon the consumer's request.(3) Section 28-52-103, Idaho Code, does not apply to:(a) A consumer reporting agency, the sole purpose of which is to resell credit information by assembling and merging information contained in the database of another consumer reporting agency and that does not maintain a permanent database of credit information from which a consumer's credit report is produced;(b) A check services or fraud prevention services company that issues reports on incidents of fraud or authorizations for the purpose of approving or processing negotiable instruments, electronic fund transfers or similar methods of payment; or(c) A deposit account information service company that issues reports concerning account closures based on fraud, substantial overdrafts, automated teller machine abuse or similar information concerning a consumer to a requesting financial institution for the purpose of evaluating a consumer's request to create a deposit account.(4) Nothing in this chapter prohibits a person from obtaining, aggregating or using information lawfully obtained from public records in a manner that does not otherwise violate the provisions of this chapter.[28-52-105, added 2008, ch. 177, sec. 2, p. 525.]