A consumer may request in writing a replacement personal identification number or password. The request must comply with the requirements for requesting a security freeze under section 3. The consumer reporting agency shall, no later than ten business days after the date the agency receives the request for a replacement personal identification number or password, provide the consumer with a new, unique personal identification number or password to be used by the consumer instead of the number or password that was provided under section 4.
73 P.S. § 2505