Seems like there's been a bunch of unanswered questions in this thread, so let me take a shot at a couple:
1) Citation regarding "reusing" credit reports and lack of a permissible purpose. Look at Section 607(a) of the FCRA which states in part:
§ 607. Compliance procedures [15 U.S.C. § 1681e]
(a) Identity and purposes of credit users. Every consumer reporting agency shall maintain reasonable procedures designed to avoid violations of section 605 [§ 1681c] and to limit the furnishing of consumer reports to the purposes listed under section 604 [§ 1681b] of this title. These procedures shall require that prospective users of the information identify themselves, certify the purposes for which the information is sought, and certify that the information will be used for no other purpose...
Section 607 pertains to compliance procedures to be maintained by credit reporting agencies, so a lot of lenders overlook it, but what it's saying in English is that in order to obtain a credit credit, you the user have to certify that you have a permissible purpose AND that the credit report will be used for that purpose and no other. If you "reuse" a credit report to underwrite a later credit request, you're using it for a purpose other than the one you certified you would use it for the first time around. Obtaining a credit report in connection with a current credit application and any other credit application the customer might submit in the next 6 months is not a permissible purpose.
2) Providing exception notices at closing. The timing requirement for exception notices is the same for all the exception notices (H-3, H-4 & H-5) and it's correctly quoted above: "as soon as reasonbly practicable, but in any event at or before consummation..." I think "as soon as reasonably practicable" is the operative requirement. "At closing" would probably work for credit cards and overdraft lines of credit, but I would say you should have procedures in place to provide exception notices as soon in the process as you can and only provide them at closing as a last resort. The only way providing an exception notice at closing will fly is if your loans regularly close before a mailed disclosure could reach the customer.
3) Account review. I don't believe you can use an "exception" notice for account reviews; you have to use model form H-2 in all cases. Which is good news because form H-2 is easier to complete than the exception notices. And yes, you would only have to provide an H-2 notice if you actually increased the APR on the loan. (See 222.72(d)(1)(ii).)
Good luck to everyone and I hope everyone has their new risk based pricing notices off the ground.
_________________________
The opinions expressed are mine and not those of my employer