<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".03" citation="COMAR 09.03.07.03" title_num="09" subtitle_num="03" chapter_num="07" heading="Annual Registration.">
  <paragraph num="A.">
    <text>During the time period established by the Commissioner under §B of this regulation, each consumer reporting agency shall:</text>
    <paragraph num="(1)">
      <text>Obtain and maintain a valid unique identifier issued by NMLS when an account is created with NMLS; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Transfer registration information to NMLS.</text>
    </paragraph>
  </paragraph>
  <paragraph num="B.">
    <text>The Commissioner shall establish a time period that is not less than 2 months after the effective date of these regulations within which a registrant must transfer registration information to NMLS.</text>
  </paragraph>
  <paragraph num="C.">
    <text>At least 30 days before the transfer period begins, the Commissioner shall:</text>
    <paragraph num="(1)">
      <text>Notify all registrants of the transfer period; and</text>
    </paragraph>
    <paragraph num="(2)">
      <text>Provide instructions for the transfer of registration information to NMLS.</text>
    </paragraph>
  </paragraph>
  <paragraph num="D.">
    <text>Subject to §A of this regulation, a consumer credit reporting agency submitting an initial registration or a registration renewal shall apply for the initial registration or registration renewal through NMLS on or after November 1 of the year in which these regulations are effective and annually thereafter.</text>
  </paragraph>
  <paragraph num="E.">
    <text>To register, the consumer reporting agency shall provide all information required by the Commissioner through NMLS, including:</text>
    <paragraph num="(1)">
      <text>The address of the principal executive office;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>The name of a responsible official of the consumer reporting agency who is available to respond expeditiously to inquiries or complaints referred by the Commissioner or the Commissioner's designee;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>A toll-free telephone number for use by the Commissioner or the Commissioner's designee, at which the responsible official required to be identified in this section may be reached;</text>
    </paragraph>
    <paragraph num="(4)">
      <text>A toll-free telephone number or numbers maintained by the consumer reporting agency which is available to all Maryland residents for making inquiries;</text>
    </paragraph>
    <paragraph num="(5)">
      <text>A certification by a control person that the consumer reporting agency has trained personnel sufficient to promptly and properly investigate and respond to consumer complaints and inquiries available;</text>
    </paragraph>
    <paragraph num="(6)">
      <text>The mailing address or addresses to which a consumer may correspond with the consumer reporting agency in order to:</text>
      <paragraph num="(a)">
        <text>Obtain a copy of their consumer report, and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>File written complaints or disputes about the accuracy of information contained in their consumer report;</text>
      </paragraph>
    </paragraph>
    <paragraph num="(7)">
      <text>A certification by a control person who has primary oversight responsibility for the consumer reporting agency’s technology system that the consumer reporting agency is in compliance with all applicable data security requirements, including the requirements of the Fair Credit Reporting Act (15 U.S.C. §1681 et seq.) and, if applicable, the Gramm-Leach-Bliley Act (15 U.S.C. §6801 et seq.) and their respective implementing regulations;</text>
    </paragraph>
    <paragraph num="(8)">
      <text>A copy of the declaration page, certificate of liability, or similarly summarized coverage page of the consumer reporting agency’s cyber risk insurance policy, if applicable;</text>
    </paragraph>
    <paragraph num="(9)">
      <text>A list of all websites and web applications where there is consumer access to a service offered by the consumer reporting agency;</text>
    </paragraph>
    <paragraph num="(10)">
      <text>The total number of consumer reports the consumer reporting agency assembled or evaluated over the previous 12 months; and</text>
    </paragraph>
    <paragraph num="(11)">
      <text>The name of any third-party technology vendor that the consumer reporting agency utilizes to assemble, evaluate, or store consumer reports prepared by the consumer reporting agency.</text>
    </paragraph>
  </paragraph>
  <paragraph num="F.">
    <text>If, except for the information required in §E(10) and (11) of this regulation, the information supplied in a consumer reporting agency's registration becomes inaccurate at any time during the calendar year, the consumer reporting agency shall immediately submit the changes to the Commissioner through NMLS.</text>
  </paragraph>
</regulation>