I have looked, but have not found, a sample agreement that a bank employee would sign to acknowledge they will pull Credit Reports for permissible purpose only, not share CBR access passwords, etc. I know our vendor agreement has this info in it and I could modify something to mirror it, but does anyone have an example or can you offer suggestions on what other issues would be good to include in such an employee agreement? Thanks!!

We used to train on this and document the training, but we never had a statement signed. That could be similar to promising to adhere to Reg Z or Privacy, etc. Is it because of the vendor agreement with the CBR that you feel you need this specific acknowledgment signed?

Andy-Wow, I realize that I never answered this post...oh, just a few years later and I am looking again (apparently I never found what I was looking for-how funny is that!?). Yes, agreement with vendor addresses this and can be used as a tool with employees to "remind" them that it is not only a regulatory requirement but also a contract obligation as well. I will keep looking or come up with something that we can have new users sign as we give them login credentials to add to our file. Thanks. Better late than never!