One of my employees at a bank (not mortgage broker) gave a customer her credit report that we had pulled with customers permission to prequalify her for a mortgage. Our new compliance officer said that it is against FCRA policy to do so.
I think: I disagree that we are in violation of Fair Credit since we are not a Consumer reporting agency.And
all of our credit reports have this statement:
This report is governed by the Gramm−Leach−Bliley Act. It does not constitute a consumer report as defined by the Fair Credit Reporting Act (FCRA) and is not subject to the FCRA.

Please tell me who is right?

all of our credit reports have this statement:
This report is governed by the Gramm−Leach−Bliley Act. It does not constitute a consumer report as defined by the Fair Credit Reporting Act (FCRA) and is not subject to the FCRA.


I've never seen this on a consumer report. Is this something you add to the report before giving it to the consumer? If so it doesn't protect you at all. If you are giving a copy of the report you obtained from the Credit Reporting Agency then it's a consumer report regardless what you may call it or disclaimers you place on it.

Now with that said the FCRA does not prohibit you from providing the report to the consumer but your contract with your CRA may, and if it does then you are in breach of contract with them and could have monetary liability.

our credit provider is CBC Innovis and this is a blanket statement that they have placed on every credit report we pull.

There are out of their minds. I would be calling them and asking exactly what that is suppose to mean.

This notice appears on the ID Cross Check version of the report. It is not in the actual credit report provided. Each section is separately numbered.

I have no idea what "ID Cross Check version of the report" might be, so it is hard to opine. By the way, while you may be allowed to give the consumer their report, I know of no banks that actually do. They can get them for free on-line.

From their website, it is the ID verification service. That particular report would not be a consumer report, pulling from public databases, but only that particular report. The actual credit report would be a consumer report.

"A real-time resource for ID verification and fraud detection, Authentication/Cross Check reports provide concise information in an easy to interpret, color-coded format.

Identify Red Flags
Validate Name, Address, SSN, DOB & Phone Number
Check Multiple Watch Lists (including OFAC)
Detect High Risk Address
Confirm SSA Issuance & SSA Death Master"

Why would you ever want to hand that to a consumer????

I certainly would not. Perhaps the entire report, including this part was handed over. Not a good idea.

Additionally, from what I can see, only this section is not a consumer report. The standard report most certainly is.

The bank needs a better understanding of the report(s) it is obtaining and proper handling.