Consumer Law Library

General Information Services, Inc., and e-Backgroundchecks.com, Inc.

Agency
Consumer Financial Protection Bureau
Date
Type
enforcement action
Source
consumerfinance.gov/enforcement/actions/general-information-services/
Pages
29
PDFs
2 documents (links below)

Documents in this case

Case summary

General Information Services, Inc.

CFPB took action against General Information Services and its affiliate, e-Background-checks.com, Inc. (BGC), two of the largest employment background screening report providers for failing to take basic steps to assure the information reported about job applicants was accurate.

Consent order ()

PDF of this document (24 pages)

Page 2

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 1 of 24

UNITED STATES OF AMERICA CONSUMER FINANCIAL PROTECTION BUREAU

ADMINISTRATIVE PROCEEDING File No. 2015-CFPB-0028

In the Matter of: CONSENT ORDER

General Information Services, Inc., and e-Backgroundchecks.com, Inc.

The Consumer Financial Protection Bureau (Bureau) has reviewed the procedures by which General Information Services, Inc. (GIS) and e-Backgroundchecks.com, Inc. (BGC) (collectively Respondents, as defined below) generate and provide employment background screening reports to employers and has identified the following law violations: (1) failure to employ reasonable procedures to assure maximum possible accuracy of the information in their reports in violation of section 607(b) of the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681e(b); (2) failure to meet the requirements of section 613(a) of the FCRA, 15 U.S.C. § 1681k(a), when reporting public record information that is likely to have an adverse effect on a consumer’s ability to obtain employment; and (3) failure to exclude non-reportable information from employment background reports in violation of sections 605(a)(2) and (5) of the FCRA, 15 U.S.C. § 1681c(a)(2), (5). Under sections 1053 and 1055 of the Consumer Financial Protection Act of 2010 (CFPA), 12 U.S.C. §§ 5563, 5565, the Bureau issues this

Consent Order (Consent Order).

Page 1 of 24

Page 3

3.

a.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 2 of 24

I Jurisdiction The Bureau has jurisdiction over this matter under (a) sections 1053 and 1055 of the CFPA, 12 U.S.C. §§ 5563 and 5565; and (b) section 621 of the FCRA, 15 U.S.C. § 1681s(b)(1)(H). II Stipulation Respondents have executed a “Stipulation and Consent to the Issuance of a Consent Order,” dated, October 28, 2015 (Stipulation), which is incorporated by reference and is accepted by the Bureau. By this Stipulation, Respondents have consented to the issuance of this Consent Order by the Bureau under sections 1053 and 1055 of the CFPA, 12 U.S.C. 8§ 5563 and 5565, without admitting or denying any of the findings of fact or conclusions of law, except that Respondents admit the facts necessary to establish the Bureau’s jurisdiction over them and the subject matter of this action.

Ill Definitions The following definitions apply to this Consent Order: “Affected Consumers” means the following categories of consumers, except for those consumers who previously released the applicable Respondent with respect to the reports

that would otherwise qualify them for membership in the class:

(a) Class 1: Those approximately 4,900 consumers who disputed their criminal background report prepared by GIS at any time between July 21, 2011 and December 31, 2014, and whose dispute resulted in a change of Grade, as defined below, from FAIL to PASS, or from FAIL to REVIEW, and then to PASS, following a further review of the dispute;

(b) Class 2: Those approximately 6,300 consumers who disputed their BGC criminal

background report at any time between July 21, 2011 and December 31, 2014, and

Page 2 of 24

Page 4

b.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 3 of 24 whose dispute resulted in a change or correction to the report for the following reasons: (a) BGC reported a criminal record that did not belong to the consumer, including, without limitation, those criminal records that BGC could not confirm belonged to the consumer based on personal identifiers, or (b) BGC reported inaccurate criminal record information about the consumer, including, without limitation, expunged records, dismissed charges, nolo prosequi records reported as convictions, or records with

incorrect disposition data.

(c) Class 3: Those approximately 300 consumers about whom GIS and BGC reported non-

reportable civil-suit or civil-judgment information in violation of section 605(a) of the FCRA, 15 U.S.C. § 1681c(a), at any time between July 21, 2011 and December 31, 2014, excluding those consumers as to whom Respondents provide to the Bureau, within 60 days of the Effective Date, a sworn statement from the employer who requested the report confirming pursuant to 15 U.S.C. § 1681c(b)(3) that the annual salary for the

position associated with the report was $75,000 or more.

“Bureau” means Consumer Financial Protection Bureau.

“Consumer Report” means a “consumer report,” as that term is defined in section 603(d) of

the FCRA, 15 U.S.C. § 1681a(d).

“Consumer Reporting Agencies” or “CRAs” means a “consumer reporting agency,” as that

term is defined in section 603(f) of the FCRA, 15 U.S.C. § 1681a(f).

“Clearly and prominently” means:

i,

In textual communications (e.g., printed publications or words displayed on the screen of an electronic device), the disclosure must be of a type size and location sufficiently noticeable for an ordinary consumer to read and comprehend it, in print

that contrasts with the background on which it appears; and

Page 3 of 24

Page 5

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 4 of 24

ii. In communications made through interactive media such as the internet, online services, and software, the disclosure must be unavoidable and presented in a form consistent with subsection (i).

“Effective Date” means the date on which the Consent Order is issued.

. “Enforcement Director” means the Assistant Director of the Office of Enforcement for the Consumer Financial Protection Bureau, or his/her delegate.

. “Grade” means the designation of PASS, FAIL, or REVIEW assigned to a consumer’s background report by GIS or the employer based on criteria selected by a current or prospective employer.

“Related Consumer Action” means a private action by or on behalf of one or more consumers or an enforcement action by another governmental agency brought against Respondents based on substantially the same facts as described in Section IV of this Consent Order.

“Relevant Period” includes the period from July 21, 2011 to December 31, 2014.

. “Respondents” means General Information Services, Inc. and e-Backgroundchecks.com, Inc., also d/b/a Backgroundchecks.com and Backgroundchecksforschools.com, including all successors and assigns.

IV Bureau Findings and Conclusions

The Bureau finds the following:

Respondents are Consumer Reporting Agencies (CRAs), as defined by the FCRA. As CRAs, Respondents are engaged primarily in generating background screening reports for prospective employers throughout the United States with respect to individual job

candidates.

Page 4 of 24

Page 6

10.

11.

A

13.

14.

15.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 5 of 24

The background screening reports that Respondents generate are “consumer reports” as defined by section 603(d) of the FCRA, 15 U.S.C. § 1681a(d). The Bureau has general enforcement authority with respect to persons subject to the FCRA

pursuant to section 1681s(b)(1)(H), including CRAs.

Failure to Employ Reasonable Procedures to Assure Maximum Possible Accuracy

Section 607(b) of the FCRA provides that whenever a consumer reporting agency prepares a report, it shall follow reasonable procedures to assure maximum possible accuracy of the information concerning the individual about whom the report relates. 15 U.S.C. §1681e(b). Since at least July 21, 2011, Respondents failed to meet the requirements of section 607(b). 15 U.S.C. § 1681e(b).

In particular, Respondents failed to have written procedures for researching public records information for consumers with common names or who use nicknames.

Instead, Respondents allowed its employees to use their discretion in determining whether a record matched consumers with common names and nicknames.

Further, GIS permits, but does not require, employers to provide middle names for applicants for purposes of matching criminal records to consumers.

These procedures resulted in the reporting of mismatched criminal record information about consumers.

Further, between at least July 21, 2011 and December 31, 2014, Respondents did not use consumer dispute data to identify the root causes of accuracy errors to inform their researching and reporting procedures.

Respondents failed to analyze available consumer dispute data to determine, among other things, whether certain jurisdictions had data integrity problems, ascertain when a specific reporting procedure was causing reporting errors, or recognize when a particular employee

was making significant mistakes.

Page 5 of 24

Page 7

16.

17.

18.

19.

20.

21;

22.

S%.

24.

25,

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 6 of 24 Respondents’ internal departments failed to meet on a regular basis to discuss errors observed in the Consumer Relations Division and ways to prevent those errors. Further, BGC failed to track the outcome of consumer disputes in a manner which would allow it to easily identify trends or pinpoint reporting errors. For a six month period in 2013, BGC did not contemporaneously log the outcome of consumer disputes.

Respondents also failed to conduct sufficient testing or sampling of their non-disputed reports to assure that the information they report meets the requirement of maximum possible accuracy.

GIS tests two reports approximately every six weeks for each of its internal and external researchers.

The process involves reassigning the two chosen reports to the same researcher to rerun the reports and confirm that the same records are returned. This procedure is not reasonable for several reasons. First, it tests only whether the records identified in a new search of potential matches are the same records identified in the original search — not whether the information included in the final report is lawful. Second, it fails to assess why certain non-reportable or mismatched information is included in reports. Third, testing two cases per researcher every six weeks is not based on any predictive algorithm or tested method.

BGC does not conduct any testing of the accuracy of non-disputed reports at all. Additionally, GIS failed to prevent potentially knowable errors from possibly appearing on consumers’ reports.

GIS possesses certain proprietary software that identifies discrepancies in data across

multiple traditional criminal history reports.

Page 6 of 24

Page 8

26.

27.

28.

29.

30.

a4,

32.

33.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 7 of 24 For example, this software could identify a record that was previously suppressed from a report because it had been dismissed or expunged and prevent it from appearing on a future report.

GIS employed this software only within the pool of reports prepared for each client, rather

than on a consumer-wide basis.

Therefore, if a consumer applied for a new job with a different employer, and GIS prepared the new background report, GIS would not employ this software to identify possible errors and prevent inconsistencies from appearing on the new report.

The Bureau finds that for all of the reasons stated above, Respondents have failed to follow reasonable procedures to assure maximum possible accuracy of the information they report

in violation of section 607(b) of the FCRA, 15 U.S.C. 1681e(b).

Failure to Meet the Requirements of Section 1681k of the FCRA The FCRA requires a consumer reporting agency that furnishes a consumer report for employment purposes containing public record information that is likely to have an adverse effect upon a consumer’s ability to obtain employment to either (1) notify the consumer at the time the information is reported, or (2) maintain “strict procedures” designed to ensure that the information is complete and up to date. Section 613(a), 15 U.S.C. § 1681k(a). Since at least July 21, 2011, Respondents failed to meet the requirements of this provision of the FCRA.

GIS states that it maintains “strict procedures” to assure that the information it reports is complete and up-to-date.

However, its procedures for complying with section 613, 15 U.S.C. § 1681k, are no different than its procedures for complying with the requirements of section 607(b), 15 U.S.C.

§1681e(b) — reasonable procedures to assure maximum possible accuracy.

Page 7 of 24

Page 9

34.

35-

36.

37:

38.

39.

40.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 8 of 24

Therefore, for the same reasons GIS violates the provisions of 607(b), 15 U.S.C. § 1681e(b), it also violates the more stringent requirements of 613(k), 15 U.S.C. § 1681k.

BGC offers two different types of employment background screening reports: verified and unverified. For its verified product, BGC utilizes GIS to research and validate the records identified as matches.

Accordingly, for its verified product, BGC’s procedures also violate the provisions of 613(k) for the same reasons as GIS.

Failure to Exclude Non-Reportable Information from Background Reports

The FCRA provides generally that a CRA may generate a consumer report containing, inter alia, civil suits and civil judgments and records of arrest, except to the extent such items antedate the report by more than seven years, or the applicable statute of limitations, whichever is longer. 605(a)(2), 15 U.S.C. § 1681c(a)(2).

The FCRA provides that a CRA may report other adverse, non-conviction items of information, except to the extent the adverse item antedates the report by more than seven years. 605(a)(5), 15 U.S.C. § 1681c(a)(5).

Respondents did not have sufficient policies and procedures to ensure that their background reports exclude this type of aged information in civil litigation searches.

Between July 2011 and January 2014, Respondents included civil-suit and civil-judgment information that antedated the report by more than seven years in consumers’ reports which, to the extent that no salary-based exception applied, was a violation of sections 1681c(a)(2),

(5) of the FCRA.

Page 8 of 24

Page 10

41.

42.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 9 of 24

ORDER V

Conduct Provisions

IT IS ORDERED, under sections 1053 and 1055 of the CFPA, that:

Respondents, their officers, agents, servants, employees, and attorneys who have actual notice of this Consent Order, whether acting directly or indirectly, may not violate sections 605(a)(2) and (5), 607(b), and 613(a) of the Fair Credit Reporting Act (FCRA), 15 U.S.C. §8 1681c(a)(2) and (5), 1681e(b), 1681k(a), as follows and must take the following affirmative actions:

a. Develop and implement a comprehensive audit program, as detailed in Section VI;

b. Develop and implement policies and procedures to exclude certain non-reportable information from background reports, as proscribed by section 605(a)(2) and (5) of the FCRA, 15 U.S.C. § 16810, as detailed in Section VI;

c. Develop and implement procedures to comply with section 607(b) of the FCRA, 15 U.S.C. § 1681e(b), to assure maximum possible accuracy of the information contained in Respondents’ background reports, as detailed in Section VI; and

d. Develop and implement policies and procedures to comply with section 613(a) of the FCRA, 15 U.S.C. § 1681k(a), when reporting public record information likely to have an adverse

effect on a consumer’s ability to obtain employment, as detailed in Section VI.

VI Compliance Plan IT IS FURTHER ORDERED that:

Within 15 days of the Effective Date, Respondents shall submit the names and curriculum vitae of one or more independent consultants, with specialized experience in compliance with the FCRA, to the Enforcement Director, who shall have the discretion to make a

determination of non-objection. The Enforcement Director shall make such determination

Page 9 of 24

Page 11

43.

44.

45.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 10 of 24

within 10 days, or direct the Respondents to select one or more different independent consultants. If the Enforcement Director directs the Respondents to select one or more different independent consultants, the Respondents shall do so within 10 days, and submit the names and curriculum vitae of the newly identified independent consultant(s) to the Enforcement Director, who may then make a determination of non-objection within 5 days. Within 15 days of the Enforcement Director’s determination of non-objection, the Respondents shall engage the independent consultant (Independent Consultant) to review and assess the following:

. Respondents’ policies, practices, and procedures relating to compliance with sections

605(a)(2) and (5), 607(b) and 613(a), 15 U.S.C. §§ 1681¢, 1681e(b), 1681k;

. The sufficiency of Respondents’ staffing, facilities, and systems relative to the nature, size,

complexity and scope of Respondents’ activities;

. The adequacy of any other administrative, technical and physical safeguards, including, at a

minimum, Respondents’ procedures related to data entry by the Records Entry

Department; and

. Any other policies, practices or procedures which may affect Respondents’ obligations

pursuant to sections 605(a)(2) and (5), 607(b) and 613(a), 15 U.S.C. §§ 1681c, 1681e(b),

1681k.

Based on that review and assessment, the Independent Consultant shall make written recommendations for changes and improvements to Respondent's policies, practices and procedures relating to sections 605(a)(2) and (5), 607(b) and 613(a) to meet Respondents’ obligations under the FCRA (Independent Consultant Recommendations).

Within 90 days of the Enforcement Director’s determination of non-objection, based on the Independent Consultant Recommendations, Respondents shall develop revisions to their

current policies, practices, and procedures to achieve compliance with 605(a)(2) and (5),

Page 10 of 24

Page 12

46.

2015-CFPB-0028 Document1 _ Filed 10/29/2015 Page 11 of 24

607(b) and 613(a), 15 U.S.C. §§ 1681c, 1681e(b), 1681k (Compliance Plan). To the extent that Respondents do not incorporate all of the recommendations of the Independent Consultant into the Compliance Plan, Respondents shall specify which recommendations the Compliance Plan does not adopt, the reason why such recommendations have not been included, and how excluding such recommendations affects Respondents’ compliance with sections 605(a)(2) and (5), 607(b) and 613(a), 15 U.S.C. 8§ 1681c, 1681e(b), 1681k.

The Compliance Plan shall include, at a minimum, the following:

a. Revisions to Respondents’ policies, practices, and procedures for complying with sections 605(a)(2) and (5) of the FCRA, 15 U.S.C. § 1681c(a)(2) and (5), including, at a minimum, the following:

1. Excluding from consumer reports civil suits and civil judgments that antedate a report by more than seven years, or until the governing statute of limitations period has expired, whichever is longer; and

2. Excluding from consumer reports other adverse information, other than records of

conviction of crimes, that antedate the report by more than seven years.

b. Revisions to Respondents’ procedures for complying with sections 607(b) and 613(a)(2), 15

U.S.C. § §1681e(b), 1681k(a)(2), including, at a minimum, the following:

1. Using matching logic and algorithms appropriate to the nature, complexity, and size of Respondents’ activities and designed to assure maximum possible accuracy of the information reported, including, at a minimum, use of middle names for matching public records to consumers, including affirmatively matching middle names when provided, or in the event an applicant’s middle name is not provided, deriving a middle name by running a social security trace and using the middle name from records matching an applicant’s first name, last name, and social security number to

affirmatively match criminal records with the same first, middle, and last names with

Page 11 of 24

Page 13

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 12 of 24

one or more additional personal identifiers, such as date of birth or social security

number; algorithms for distinguishing records by middle name; algorithms for

matching common names; algorithms for matching nicknames; and algorithms to distinguish between names that vary by generational suffix;

. Using software to compare and reconcile discrepancies in criminal records in all reports

generated, not just across reports generated for the same employer;

. Using consumer dispute data to improve accuracy in reporting, including, at a

minimum, the following:

a. Analyzing consumer dispute data on at least a monthly basis to determine the root causes of errors in reporting;

b. Holding meetings at least monthly between the Consumer Relations, Quality Assurance, Public Records, Public Records Entry, and Compliance departments to discuss the results of the consumer dispute analysis and any solutions to errors identified; and

c. Implementing any solutions developed at the monthly meetings.

. Developing a comprehensive audit program (Audit Program), in writing, which shall:

a. Test the accuracy, integrity, and completeness of the public-record information sourced to generate Respondents’ background reports, including, at a minimum, the following:

i. Purchased bulk data information;

_ ii. Information obtained from online sources; iii. Information maintained in proprietary databases; iv. Information returned by external researchers; v. Information returned by internal researchers; and

vi. Any other sources of public record information used by Respondents.

Page 12 of 24

Page 14

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 13 of 24

b. Test the accuracy, integrity, and completeness of the public-record information contained in the final background reports Respondents provide to employers, including corrected or updated background reports Respondents provide to employers following a consumer dispute;

c. Designate an employee or employees to oversee the Audit Program;

d. Train personnel to perform the Audit Program’s requirements; and

e. Use the results of the Audit Program to determine the root causes of errors in accuracy and develop and implement solutions to identified errors to achieve maximum possible accuracy of the information Respondents report.

5. Implementing the Audit Program at a frequency necessary to test reliably the accuracy of Respondents’ background reports, sounded in a statistical algorithm based on the number of reports Respondents generate yearly.

6. Regularly evaluating and adjusting the Audit Program in light of the results and any material changes to Respondents’ operations or business arrangements that may significantly impact the Audit Program, or any other circumstances that Respondents know or have reason to know may have an impact on the accuracy of the information Respondents report. In no event shall this evaluation take place less than every 6 months.

7. Developing any additional procedures necessary to assure compliance with 607(b) and, in instances where Respondents do not send pre-adverse action notices pursuant to section 613(a)(1), 15 U.S.C. § 1681k(a)(1), and instead elect to maintain strict procedures designed to insure that public record information that is likely to have an adverse effect on a consumer’s ability to obtain employment is complete and up to date pursuant to 613(a)(2), 15 U.S.C. §1681k(a)(2), developing any additional procedures necessary to

assure compliance with that section.

Page 13 of 24

Page 15

47.

48.

49.

50.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 14 of 24 8. Developing any additional procedures necessary to assure compliance with 607(b) and 613(a) based on the recommendations set forth in the Independent Consultant Recommendations.

Within 90 days of the Enforcement Director’s determination of non-objection to the Independent Consultant, Respondents shall submit the Compliance Plan and a copy of the Independent Consultant Recommendations to the Enforcement Director, who will have the discretion to make a determination of non-objection to the Compliance Plan or to direct the Respondents to revise it. If the Enforcement Director directs the Respondents to revise the Compliance Plan, they must make the requested revisions and resubmit the Compliance Plan to the Enforcement Director within 20 days.

Within 15 days of receiving notification that the Enforcement Director has made a determination of non-objection to the Compliance Plan, the Respondents must implement and adhere to the steps, recommendations, deadlines, and timeframes outlined in the

Compliance Plan.

VIII Order to Pay Redress

IT IS FURTHER ORDERED that:

Within 10 days of the Effective date, Respondents must reserve or deposit into a segregated deposit account $10, 500,000 for the purpose of providing redress to Affected Consumers, as

required by this Section.

Within 45 days of the Effective Date, Respondents must each submit to the Enforcement Director for review and non-objection a comprehensive written plan for providing redress consistent with this Consent Order (Redress Plan). The Enforcement Director will have the discretion to make a determination of non-objection to the Redress Plan or direct the

Respondents to revise them. If the Enforcement Director directs the Respondents to revise

Page 14 of 24

Page 16

51.

e.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 15 of 24

the Redress Plan, the Respondents must make the revisions and resubmit the Redress Plan to the Enforcement Director within 15 days. After receiving notification that the Enforcement Director has made a determination of non-objection to the Redress Plan, the Respondents must implement and adhere to the steps, recommendations, deadlines, and timeframes outlined in the Redress Plan.

The Redress Plan must:

a. Specify how Respondents will identify all Affected Consumers who will receive redress

under this Consent Order;

b. Include the form of letter and envelope to be sent notifying Affected Consumers of the

redress;

c. Provide that Respondents shall pay all costs of administering redress as required by this

Section;

d. Require Respondents to compensate each Affected Consumer within 30 days, as follows: i. $1,000 for each Class 1 Affected Consumer;

ii. $1,000 for each Class 2 Affected Consumer; and iii. $1,000 for each Class 3 Affected Consumer.

In the event the total payments to Affected Consumers pursuant to paragraph 51(d)(i)-(iii) equals an amount greater than $10,500,000, the amount paid to each Affected Consumer may be reduced pro rata; and In the event the Respondents are unable to locate an Affected Consumer, or an Affected Consumer fails to deposit and cash a redress check from Respondents within 180 days of implementation of the Compliance Plan, Respondents shall aggregate the redress payments that would have been made to such Affected Consumers, and redistribute that amount to

the remaining Affected Consumers on a pro rata basis.

Page 15 of 24

Page 17

52.

53-

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 16 of 24

After completing the Redress Plan, if the amount of redress provided to Affected Consumers is less than $10,500,000, within 30 days of the completion of the Redress Plan, Respondents must pay to the Bureau, by wire transfer to the Bureau or to the Bureau’s agent, and according to the Bureau’s wiring instructions, the difference between the amount of redress provided to Affected Consumers and $10,500,000, so that such funds may be distributed to the U.S. Treasury as disgorgement.

Respondents may not condition the payment of any redress to any Affected Consumer under

this Order on that Affected Consumer waiving any right.

IX Order to Pay Civil Money Penalties

IT IS FURTHER ORDERED that:

54.

55-

56.

57-

Under section 1055(c) of the CFPA, 12 U.S.C. § 5565(c), by reason of the violations of law described in Section IV of this Consent Order, and taking into account the factors in 12 U.S.C. § 5565(c)(3), GIS must pay a civil money penalty of $1,250,000 to the Bureau and BGC must pay a civil money penalty of $1,250,000 to the Bureau, for a total of $2,500,000.

Within 30 days of the Effective Date, Respondents must pay the civil money penalty by wire transfer to the Bureau or to the Bureau’s agent in compliance with the Bureau’s wiring instructions.

The civil money penalty paid under this Consent Order will be deposited in the Civil Penalty Fund of the Bureau as required by section 1017(d) of the CFPA, 12 U.S.C. § 5497(d). Respondents must treat the civil money penalty paid under this Consent Order as a penalty paid to the government for all purposes. Regardless of how the Bureau ultimately uses those

funds, Respondents may not:

a. Claim, assert, or apply for a tax deduction, tax credit, or any other tax benefit for any civil

money penalty paid under this Consent Order; or

Page 16 of 24

Page 18

58.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 17 of 24

b. Seek or accept, directly or indirectly, reimbursement or indemnification from any source,

including but not limited to payment made under any insurance policy, with regard to any

civil money penalty paid under this Consent Order.

To preserve the deterrent effect of the civil money penalty in any Related Consumer Action, Respondents may not argue that Respondents are entitled to, nor may Respondents benefit by, any offset or reduction of any compensatory monetary remedies imposed in the Related Consumer Action because of the civil money penalty paid in this action (Penalty Offset). If the court in any Related Consumer Action grants such a Penalty Offset, Respondents must, within 30 days after entry of a final order granting the Penalty Offset, notify the Bureau, and pay the amount of the Penalty Offset to the U.S. Treasury. Such a payment will not be considered an additional civil money penalty and will not change the amount of the civil

money penalty imposed in this action.

xX Additional Monetary Provisions

IT IS FURTHER ORDERED that:

59.

60.

61.

62.

In the event of any default on Respondents’ obligations to make payment under this Consent Order, interest, computed under 28 U.S.C. § 1961, as amended, will accrue on any outstanding amounts not paid from the date of default to the date of payment, and will immediately become due and payable.

Respondents must relinquish all dominion, control, and title to the funds paid to the fullest extent permitted by law and no part of the funds may be returned to Respondents.

Under 31 U.S.C. § 7701, Respondent, unless it already has done so, must furnish to the Bureau its taxpayer identifying numbers, which may be used for purposes of collecting and

reporting on any delinquent amount arising out of this Consent Order.

Within 30 days of the entry of a final judgment, consent order, or settlement in a Related

Consumer Action, Respondents must notify the Enforcement Director of the final judgment, Page 17 of 24

Page 19

63.

64.

65.

66.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 18 of 24

consent order, or settlement in writing. That notification must indicate the amount of redress, if any, that Respondents paid or are required to pay to consumers and describe the consumers or classes of consumers to whom that redress has been or will be paid.

XI

Reporting Requirements

IT IS FURTHER ORDERED that:

Respondents must notify the Bureau of any development that may affect their compliance with obligations arising under this Consent Order, including but not limited to, a dissolution, assignment, sale, merger, or other action that would result in the emergence of a successor company; the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Consent Order; the filing of any bankruptcy or insolvency proceeding by or against Respondent; or a change in Respondents’ name or address. Respondents must provide this notice, if practicable, at least 30 days before the

development, but in any case no later than 14 days after the development.

Within 7 days of the Effective Date, Respondents must designate at least one telephone number and email, physical, and postal address as points of contact, which the Bureau may use to communicate with Respondents.

Respondents must report any change in the information required to be submitted under Paragraph 63 at least 30 days before the change or as soon as practicable after the learning about the change, whichever is sooner.

Respondents must submit to the Enforcement Director an accurate written compliance progress report and assessment (Compliance Report) within 120 days after implementation of the Compliance Plan, and annually thereafter for 5 years after the Effective Date. The

Compliance Report shall, at a minimum:

Page 18 of 24

Page 20

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 19 of 24

a. Set forth the specifics of the Compliance Plan that Respondents have implemented and

maintained during the reporting period;

b. Explain whether the Compliance Plan is appropriate to Respondents’ size and complexity;

G Provide an analysis of whether the Compliance Plan has resulted in compliance with

sections 605(c)(a), 607(b), and 613(a), 15 U.S.C. §§ 1681c, 1681e(b), and 1681k; and d. Provide an analysis of the results of the Audit Program.

67. The first annual Compliance Report shall be accompanied by a letter from the Independent Consultant evaluating the implementation and efficacy of the Compliance Plan.

68. Within 90 days after the Effective Date and again one year after the Effective Date, Respondents shall submit a copy of each Order Acknowledgment obtained under Section XII, unless previously submitted to the Bureau.

XII Order Distribution and Acknowledgment IT IS FURTHER ORDERED that,

69. Within 30 days of the Effective Date, Respondents must deliver a copy of this Consent Order to each of its board members and executive officers, as well as to any managers, employees, or other agents and representatives who have responsibilities related to the subject matter of the Consent Order.

70. For 5years from the Effective Date, Respondents must deliver a copy of this Consent Order to any business entity resulting from any change in structure referred to in Section XI, any future board members and executive officers, as well as to any managers, employees, or other agents and representatives who will have responsibilities related to the subject matter of the

Consent Order before they assume their responsibilities.

Page 19 of 24

Page 21

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 20 of 24

71. | Respondents must secure a signed and dated statement acknowledging receipt of a copy of this Consent Order, ensuring that any electronic signatures comply with the requirements of the E-Sign Act, 15 U.S.C. § 7001 et seq., within 30 days of delivery, from all persons receiving a copy of this Consent Order under this Section.

XIII Recordkeeping

IT IS FURTHER ORDERED that 72. Respondents must create, or if already created, must retain for at least 5 years from the Effective Date, the following business records:

a. All documents and records necessary to demonstrate full compliance with each provision of this Consent Order, including all submissions to the Bureau. b. All documents and records pertaining to the Redress Plan, described in Section VIII above. 73. Respondents must retain the documents identified in Paragraph 72 for the duration of the Consent Order.

74. Respondents must make the documents identified in Paragraph 72 available to the Bureau

upon the Bureau’s request.

XIV

Notices IT IS FURTHER ORDERED that:

75. Unless otherwise directed in writing by the Bureau, Respondents must provide all submissions, requests, communications, or other documents relating to this Consent Order in writing, with the subject line, “In re General Information Services, Inc., et al., File No.

2015-CFPB-0028 ” and send them either:

Page 20 of 24

Page 22

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 21 of 24

a. By overnight courier (not the U.S. Postal Service), as follows: Assistant Director for Enforcement

Consumer Financial Protection Bureau ATTENTION: Office of Enforcement

1625 Eye Street, N.W.

Washington D.C. 20006; or b. By first-class mail to the below address and contemporaneously by email

to Enforcement [email protected]:

Assistant Director for Enforcement Consumer Financial Protection Bureau ATTENTION: Office of Enforcement 1700 G Street, N.W.

Washington D.C. 20552

XV Cooperation with the Bureau IT IS FURTHER ORDERED that:

76. Respondents must cooperate fully to help the Bureau determine the identity and location of each Affected Consumer. Respondents must provide such information in their or their

agents’ possession or control within 14 days of receiving a written request from the Bureau.

XVI

Compliance Monitoring IT IS FURTHER ORDERED that, to monitor Respondents’ compliance with this Consent Order:

77. Within 14 days of receipt of a written request from the Bureau, Respondents must submit additional Compliance Reports or other requested information, which must be made under penalty of perjury; provide sworn testimony; or produce documents.

78. Respondents must permit Bureau representatives to interview, in relation to compliance with this Order, any employee or other person affiliated with Respondents who have agreed to

such an interview. The person interviewed may have counsel present.

Page 21 of 24

Page 23

79-

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 22 of 24

Nothing in this Consent Order will limit the Bureau’s lawful use of civil investigative demands under 12 C.F.R. § 1080.6 or other compulsory process.

XVII Modifications to Non-Material Requirements

IT IS FURTHER ORDERED that:

80.

81.

82.

83.

Respondents may seek a modification to non-material requirements of this Consent Order (e.g., reasonable extensions of time and changes to reporting requirements) by submitting a

written request to the Enforcement Director.

The Enforcement Director may, in his/her discretion, modify any non-material requirements of this Consent Order (e.g., reasonable extensions of time and changes to reporting requirements) if he/she determines good cause justifies the modification. Any such

modification by the Enforcement Director must be in writing.

XVIII

Administrative Provisions

The provisions of this Consent Order do not bar, estop, or otherwise prevent the Bureau, or any other governmental agency, from taking any other action against Respondent, except as described in Paragraph 83.

The Bureau releases and discharges Respondents from all potential liability for law violations that the Bureau has or might have asserted based on the practices described in Section IV of this Consent Order, to the extent such practices occurred before the Effective Date and the Bureau knows about them as of the Effective Date. The Bureau may use the practices described in this Consent Order in future enforcement actions against Respondents and their affiliates, including, without limitation, to establish a pattern or practice of violations or the continuation of a pattern or practice of violations or to calculate the amount of any penalty.

This release does not preclude or affect any right of the Bureau to determine and ensure

Page 22 of 24

Page 24

84.

85.

86.

87.

88.

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 23 of 24

compliance with the Consent Order, or to seek penalties for any violations of the Consent Order.

This Consent Order is intended to be, and will be construed as, a final Consent Order issued under section 1053 of the CFPA, 12 U.S.C. § 5563, and expressly does not form, and may not be construed to form, a contract binding the Bureau or the United States.

This Consent Order will terminate 5 years from the Effective Date or 5 years from the most recent date that the Bureau initiates an action alleging any violation of the Consent Order by Respondents. If such action is dismissed or the relevant adjudicative body rules that Respondents did not violate any provision of the Consent Order, and the dismissal or ruling is either not appealed or upheld on appeal, then the Consent Order will terminate as though the action had never been filed. The Consent Order will remain effective and enforceable until such time, except to the extent that any provisions of this Consent Order have been amended, suspended, waived, or terminated in writing by the Bureau or its designated agent. Calculation of time limitations will run from the Effective Date and be based on calendar days, unless otherwise noted.

Should Respondents seek to transfer or assign all or part of their operations that are subject to this Consent Order, Respondents must, as a condition of sale, obtain the written agreement of the transferee or assignee to comply with all applicable provisions of this Consent Order.

The provisions of this Consent Order will be enforceable by the Bureau. For any violation of this Consent Order, the Bureau may impose the maximum amount of civil money penalties allowed under section 1055(c) of the CFPA, 12 U.S.C. § 5565(c). In connection with any attempt by the Bureau to enforce this Consent Order in federal district court, the Bureau may serve Respondents wherever Respondents may be found and Respondents may not contest

that court’s personal jurisdiction over Respondents.

Page 23 of 24

Page 25

2015-CFPB-0028 Document1 Filed 10/29/2015 Page 24 of 24

89. This Consent Order and the accompanying Stipulation contain the complete agreement between the parties. The parties have made no promises, representations, or warranties other than what is contained in this Consent Order and the accompanying Stipulation. This Consent Order and the accompanying Stipulation supersede any prior oral or written communications, discussions, or understandings.

90. Nothing in this Consent Order or the accompanying Stipulation may be construed as

allowing the Respondents, their officers, or employees to violate any law, rule, or regulation.

IT IS SO ORDERED, this 29 th day of October, 2015.

Reka) CorGan,

Richard Cordray Director Consumer Financial Protection Bureau

Page 24 of 24

Stipulation ()

PDF of this document (4 pages)

Page 26

UNITED STATES OF AMERICA CONSUMER FINANCIAL PROTECTION BUREAU

File No. 2015-CFPB-0028

STIPULATION AND CONSENT TO THE ISSUANCE OF A CONSENT ORDER In the matter of:

General Information Services, Inc., and e-Backgroundchecks.com, Inc.

The Consumer Financial Protection Bureau (Bureau) intends to initiate an administrative proceeding against General Information Services, Inc. and e-Backgroundchecks.com, Inc. (Respondents), under 12 U.S.C. §§ 5563 and 5565, for their violations of sections 605(a)(2) and (5), 607(b) and 613(a) of the Fair Credit Reporting Act, 15 U.S.C. § § 1681c(a)(2) and (5), 1681e(b), 1681k. Respondents, in the interest of compliance and resolution of the matter, and without admitting or denying any wrongdoing, consent to the issuance of a Consent Order substantially in the form of the one to which this Stipulation and Consent to the Issuance of a Consent Order is attached (Consent Order), and which is incorporated by reference.

In consideration of the above premises, Respondents agree to the following: Jurisdiction 1. The Bureau has jurisdiction over this matter under sections 1053 and 1055 of the Consumer Financial Protection Act (CFPA), 12 U.S.C. §§ 5563, 5565. 2015-CFPB-0028 Document 2 Filed 10/29/2015 Page 1 of 4

Page 27

Consent 2. Respondents agree to the issuance of the Consent Order, without admitting or denying any of the findings of fact or conclusions of law, except that Respondents admit the facts necessary to establish the Bureau’s jurisdiction over Respondents and the subject matter of this action. 3. Respondents agree that the Consent Order will be deemed an “order issued with the consent of the person concerned” under 12 U.S.C. § 5563(b)(4), and agree that the Order will become a final order, effective upon issuance, and will be fully enforceable by the Bureau under 12 U.S.C. §§ 5563(d)(1) and 5565.

4. Respondents voluntarily enter into this Stipulation and Consent to the Issuance of a Consent Order.

5. The Consent Order resolves only Respondents’ potential liability for law violations that the Bureau asserted or might have asserted based on the practices described in Section IV of the Consent Order, to the extent such practices occurred before the Effective Date and the Bureau knows about them as of the Effective Date. Respondents acknowledge that no promise or representation has been made by the Bureau or any employee, agent, or representative of the Bureau, about any liability outside of this action that may have arisen or may arise from the facts underlying this action or immunity from any such liability. 6. Respondents agree that the facts described in Section IV of the Consent Order will be taken as true and be given collateral estoppel effect, without further proof, in any proceeding before the Bureau to enforce the Consent Order, or in any subsequent civil litigation by the Bureau to enforce the Consent Order or its rights to any payment or monetary judgement under the Consent Order.

7. The terms and provisions of this Stipulation and the Consent Order will be binding upon, and inure to the benefit of, the parties hereto and their successors in interest. 2015-CFPB-0028 Document 2 Filed 10/29/2015 Page 2 of 4

Page 28

8. Respondents agree that the Bureau may present the Consent Order to the Bureau Director for signature and entry without further notice.

Waivers 9. Respondents, by consenting to this Stipulation, waive: a. Any right to service of the Consent Order, and agree that issuance of the Consent Order will constitute notice to the Respondents of its terms and conditions; b. Any objection to the jurisdiction of the Bureau, including, without limitation, under section 1053 of the CFPA, 12 U.S.C. § 5563;

c. The rights to all hearings under the statutory provisions under which the proceeding is to be or has been instituted; the filing of proposed findings of fact and conclusions of law; proceedings before, and a recommended decision by, a hearing officer; all posthearing procedures; and any other procedural right available under section 1053 of the CFPA, 12 U.S.C. § 5563, or 12 CFR Part 1081;

d. The right to seek any administrative or judicial review of the Consent Order; e. Any claim for fees, costs or expenses against the Bureau, or any of its agents or employees, and any other governmental entity, related in any way to this enforcement matter or the Consent Order, whether arising under common law or under the terms of any statute, including, but not limited to the Equal Access to Justice Act and the Small Business Regulatory Enforcement Fairness Act of 1996; for these purposes, Respondents agree that Respondents are not the prevailing parties in this action because the parties have reached a good faith settlement; f. Any other right to challenge or contest the validity of the Consent Order; g. Such provisions of the Bureau’s rules or other requirements of law as may be construed to prevent any Bureau employee from participating in the preparation of, or advising the Director as to, any order, opinion, finding of fact, or conclusion of law to be entered in connection with this Stipulation or the Consent Order; and 2015-CFPB-0028 Document 2 Filed 10/29/2015 Page 3 of 4

Page 29

h. Any right to claim bias or prejudgment by the Director based on the consideration of or discussions concerning settlement of all or any part of the proceeding. General Information Services, Inc.

BY:

CEO, General Information Services, Inc. and e-Backgroundchecks.com, Inc.

' Date The undersigned of Director of General Information Services, Inc. and e-Backgroundchecks.com acknowledges having read this Stipulation and the Consent Order, and approves of General Information Services, Inc. and e-Backgroundchecks.com entering into this Stipulation. J~n;Conrad Director, General Information Services, Inc. and e-Backgrounchecks.com, Inc.

Date 2015-CFPB-0028 Document 2 Filed 10/29/2015 Page 4 of 4