(a) A consumer credit reporting agency shall place a security freeze for a protected consumer if:

1. (1) The consumer credit reporting agency receives a request from the protected consumer's representative for the placement of the security freeze under this section; and
2. (2) The protected consumer's representative (i) submits the request to the consumer credit reporting agency at the address or other point of contact and in the manner specified by the consumer credit reporting agency; (ii) provides to the consumer credit reporting agency sufficient proof of identification of the protected consumer and the representative; (iii) provides to the consumer credit reporting agency sufficient proof of authority to act on behalf of the protected consumer; and (iv) pays to the consumer credit reporting agency a fee, if any, as provided in this section.

(e) A security freeze for a protected consumer placed under this section shall remain in effect until:

1. (1) The protected consumer or the protected consumer's representative requests the consumer credit reporting agency to remove the security freeze for a protected person in accordance with subdivision (f) of this section; or
2. (2) The security freeze is removed in accordance with subdivision (i) of this section.

(f) If a protected consumer or a protected consumer's representative wishes to remove a security freeze for the protected consumer, the protected consumer or the protected consumer's representative shall:

1. (1) Submit a request for the removal of the security freeze to the consumer credit reporting agency at the address or other point of contact and in the manner specified by the consumer credit reporting agency;
2. (2) Provide to the consumer credit reporting agency: (i) in the case of a request by the protected consumer: (A) proof that the sufficient proof of authority for the protected consumer's representative to act on behalf of the protected consumer is no longer valid or that the protected consumer has attained the age of sixteen; and (B) sufficient proof of identification of the protected consumer; or (ii) in the case of a request by the representative of a protected consumer: (A) sufficient proof of identification of the protected consumer and the representative; and (B) sufficient proof of authority to act on behalf of the protected consumer; and (C) pay to the consumer credit reporting agency a fee, if any, as provided in subdivision (h) of this section.

(j) This section does not apply to:

1. (1) A person administering a credit file monitoring subscription service to which: (i) the protected consumer has subscribed; or (ii) the representative of the protected consumer has subscribed on behalf of the protected consumer;
2. (2) A person providing the protected consumer or the protected consumer's representative with a copy of the protected consumer's consumer credit report upon the request of the protected consumer or the protected consumer's representative; (3)(i) An entity listed in paragraphs three through eight of subdivision (m) of section three hundred eighty-t of this article; (ii) an entity listed in subdivision (p) of section three hundred eighty-t of this article; or (iii) a consumer credit reporting agency's database or file that consists of information concerning, and used for, one or more of the following: criminal record information, fraud prevention or detection, personal loss history information, and employment, tenant, or background screening.