Upon receipt of a consumer’s request to temporarily lift a security freeze, the consumer reporting agency shall lift the security freeze as soon as practicable and without unreasonable delay, but under no circumstances any later than three business days after receiving the request, provided that the consumer has properly supplied the following:

1. (a) the information necessary for proper identification specified in the information given to the consumer pursuant to 201 CMR 16.04(d); and
2. (b) the identity of the third-party who is to receive the consumer report or the specified period of time for which the report shall be available to authorized users of the consumer report.