Under the proposed law, credit-reporting agencies would have to institute a freeze within three days of a consumer requesting one and they would have to unfreeze their credit within an hour if requested to do so electronically. If done by mail, the companies would have three days to unfreeze a consumer's credit.
Some are concerned that implementing this bill will prevent states from enacting stricter regulations going forward. "It's stopping the states from doing anything better in the future, and that's a problem," Mike Litt, a director at consumer-rights group US PIRG, told the Wall Street Journal. Stricter requirements could include, for example, making credit freezes the default rather than an opt-in setting. And along with concerns over what the credit freeze portion of the bill doesn't cover, many are also wary of what else will come with the banking bill -- namely, rollbacks of banking reforms implemented after the 2008 financial crisis.
Equifax is being investigated by numerous agencies in multiple countries. Though recent reports suggested that the Consumer Financial Protection Bureau had stalled its probe into the Equifax breach -- which led dozens of Senators to send a letter asking if that was the case and if so, why -- Equifax claimed in an SEC filing last week that the CFPB was still investigating the breach. It said that along with the CFPB, the SEC, FTC, Justice Department, a number of state attorneys general and regulators in the UK and Canada were looking into the incident. Last week, Equifax announced that an additional 2.4 million, previously unreported, individuals had been affected by last year's hack.