Code of the District of Columbia

Chapter 38. Consumer Protections.

Subchapter I. General.

§ 28–3801. Scope — Limitation on agreements and practices.

This subchapter applies to actions to enforce rights arising from a consumer credit sale or a direct installment loan.

§ 28–3802. Definitions.

As used in this chapter —

(1) “revolving credit account” means a revolving credit account as defined in section 28-3701 of this subtitle;

(2) “consumer credit sale” means a sale of goods or services in which —

(A) a credit is granted by a person who regularly engages as a seller in credit transactions of the same kind;

(B) the buyer is a natural person;

(C) the goods or services are purchased primarily for a personal, family, household, or agricultural purpose;

(D) either the debt is payable in installments or a finance charge is made; and

(E) the amount financed does not exceed $25,000.

The term includes any contract in the form of a bailment or lease if the bailee or lessee contracts to pay as compensation for use a sum substantially equivalent to or in excess of the aggregate value of the property and services involved and it is agreed that the bailee or lessee will become, or for no other or a nominal consideration has the option to become, the owner of the property upon full compliance with his obligations under the contract.

(3) “direct installment loan” means a direct installment loan as that term is used in section 28-3308 and does not include a loan secured on real estate or a direct motor vehicle installment loan covered by Chapter 36 of this subtitle.

(4) “cross collateral” means an arrangement wherein a seller in a “consumer credit sale” secures a debt arising from the sale by contracting for a security interest in other property if as a result of a prior sale the seller has an existing security interest in the other property. The seller may also contract for a security interest in the property sold in the subsequent sale as a security for the previous debt.

§ 28–3803. Balloon payments.

With respect to a consumer credit sale or direct installment loans except for revolving credit accounts:

(1) No creditor shall at any time enter into an agreement which contains or anticipates a schedule of payments under which any one payment is not equal or substantially equal to all other payments, excluding any final payment which is less than the average of previous payments or any down payment received by the creditor contemporaneously with or prior to the consummation of the transaction, or under which the intervals between any consecutive payments differ substantially.

(2) Notwithstanding any provision of this section, where a consumer’s livelihood is dependent upon seasonal or intermittent income, the parties may agree in a separate writing that one or more payments or the intervals between one or more payments may be reduced or expanded in accordance with the needs of the consumer if such payments are expressly related to the consumer’s income. The separate writing shall contain a conspicuous notice directly above the signature line stating: “I waive my right to have all payments to be made under this agreement in substantially equal amounts”.

(3) In the event that the provisions of paragraph (2) of this subsection apply, the consumer shall have the right at any time, without further cost or obligation, to revise the schedule of payments to conform both as to amounts and intervals to the average of all installments and intervals.

§ 28–3804. Assignment of earnings and authorization to confess judgment prohibited.

(a) A creditor may not take an assignment of earnings of the consumer for payment or as security for payment of an obligation arising out of a consumer credit sale or direct installment loan.

(b) A creditor may not take or accept from the consumer a warrant or power of attorney or other authorization for the creditor, or other person acting on his behalf, to confess judgment arising out of a consumer credit sale or direct installment loan.

(c) An assignment of earnings or an authorization in violation of this section is subject to the provisions of section 28-3813(d)(1) of this subtitle.

§ 28–3805. Debts secured by cross-collateral.

(a) If debts arising from two or more consumer credit sales other than sales pursuant to a revolving charge account (section 28-3701), are secured by cross-collateral, or consolidated into one debt payable on a single schedule of payments, and the debt is secured by security interests taken with respect to one or more of the sales, payments received by the seller after the taking of the cross-collateral or the consolidation are deemed, for the purpose of determining the amount of the debt secured by the various security interests, to have been first applied to the payment of the debts arising from the sales first made. To the extent debts are paid according to this section, security interests in items of property terminate as the debts originally incurred with respect to each item are paid.

(b) Payment received by the seller upon a revolving charge are deemed, for the purpose of determining the amount of the debt secured by the various security interests, to have been applied first to the payment of credit service charges in the order of their entry to the account and then to the payment of debts in the order in which the entries to the account showing the debts were made.

(c) If the debts consolidated arose from two or more sales made on the same day, payments received by the seller are deemed, for the purpose of determining the amount of the debt secured by the various security interests, to have been applied first to the payment of the smallest debt.

§ 28–3806. Attorney’s fees.

With respect to a consumer credit sale or direct installment loan the agreement may provide for the payment by the consumer of reasonable attorney’s fees not in excess of 15% of the unpaid balance of the obligation.

§ 28–3807. Negotiable instruments prohibited.

(a) In a consumer credit sale, no seller shall take or otherwise arrange for the consumer to sign an instrument, except a check, payable “to order” or “to bearer” as evidence of the credit obligation of the consumer.

(b) Any holder of an instrument prohibited by subsection (a) of this section 28-3807, if he takes it with knowledge of a violation of this section, takes it subject to all claims and defenses of the consumer up to the amount owing on the transaction total at the time of the assignment.

§ 28–3808. Assignees subject to defenses.

(a) With respect to a consumer credit sale, an assignee of the rights of the seller or lessor is subject to all claims and defenses of the consumer or lessee arising out of the sale notwithstanding any terms or agreements to the contrary, but the assignee’s liability under this section may not exceed the amount owing to the assignee at the time of the assignment.

(b) Rights of the consumer or lessee can only be asserted as a matter of defense to or set-off against a claim by the assignee.

§ 28–3809. Lender subject to defenses arising from sales.

(a) A lender who makes a direct installment loan for the purpose of enabling a consumer to purchase goods or services is subject to all claims and defenses of the consumer against the seller arising out of the purchase of the goods or service if such lender acts at the express request of the seller, and —

(1) the seller participates in the preparation of the loan instruments, or

(2) the lender is a person or organization controlled by or under common control with the seller, or

(3) the seller receives or will receive a fee, compensation, or other consideration from the lender for arranging the loan.

(b) The lender’s liability under this section may not exceed the amount of the loan. Rights of the debtor can only be asserted affirmatively in an action to cancel and void the sale from its inception, or as a matter of defense to or set-off against a claim by the lender.

§ 28–3810. Referral sales.

With respect to a consumer credit sale, the seller or lessor may not give or offer to give a rebate or discount or otherwise pay or offer to pay value to the buyer or lessee as an inducement for a sale or lease in consideration of his giving to the seller or lessor the names of prospective purchasers or lessees, or otherwise aiding the seller or lessor in making a sale or lease to another person, if the earning of the rebate, discount, or other value is contingent upon the occurrence of an event subsequent to the time the buyer or lessee agrees to buy or lease. If a buyer or lessee is induced by a violation of this section to enter into a consumer credit sale, the agreement is unenforceable by the seller or lessor and the buyer or lessee, at his option, may rescind the agreement or retain the goods delivered and the benefit of any services performed, without any obligation to pay for them.

§ 28–3811. Home solicitation sales.

(a) As used in this section, “home solicitation sale” means a cash sale or a consumer credit sale of goods, other than farm equipment, or services in which the seller or a person acting for him engages in a personal solicitation of the sale at or near a residence of the buyer and the buyer’s agreement or offer to purchase is there given to a seller or a person acting for him. It does not include a sale made pursuant to a preexisting revolving credit account or prior negotiations between the parties at a business establishment at a fixed location where goods or services are offered or exhibited for sale.

(b) Except as provided in subsection (f) of this section, in addition to any right otherwise to revoke an offer, the buyer has the right to cancel a home solicitation sale until midnight of the third business day after the day on which the buyer signs an agreement or offer to purchase which complies with this section.

(c) Cancellation occurs when the buyer gives written notice of cancellation to the seller at the address stated in the agreement or offer to purchase.

(d) Notice of cancellation, if given by mail, is given when it is deposited in a mail box properly addressed and the postage prepaid.

(e) Notice of cancellation given by the buyer need not take a particular form and is sufficient if it indicates by any form of written expression the intention of the buyer not to be bound by the home solicitation sale.

(f) The buyer may not cancel a home solicitation sale if the buyer requests the seller to provide goods or services without delay because of an emergency, and

(1) the seller in good faith makes a substantial beginning of performance of the contract before the buyer gives notice of cancellation, and

(2) in the case of goods, the goods cannot be returned to the seller in substantially as good condition as when received by the buyer, and

(3) the buyer has signed separately the following notice which appears under the conspicuous caption: “WAIVER OF RIGHT TO CANCEL,” and reads as follows: “Because of an emergency I waive any right I may have to cancel this home solicitation sale”.

(g)(1) In a home solicitation sale, unless the buyer requests the seller to provide goods or services without delay in an emergency, the seller must present to the buyer and obtain his signature to a written agreement or offer to purchase which designates as the date of the transaction the date on which the buyer actually signs and contains a statement of the buyer’s rights which complies with paragraph (2) of this subsection.

(2) The statement must—

(A) appear under this conspicuous caption: “BUYERS RIGHT TO CANCEL”, and

(B) read as follows:

“If this agreement was solicited at or near your residence and you do not want the goods or services, you may cancel this agreement by mailing a notice to the seller. The notice must say that you do not want the goods or services and must be mailed before midnight of the third business day after you signed this agreement. The notice must be mailed to:

"(insert name and address of seller)

"If you cancel, the seller may not keep any of your cash down payment.”

(3) Until the seller has complied with this section the buyer may cancel the home solicitation sale by notifying the seller in any manner and by any means of his intention to cancel.

(h)(1) Except as provided in this section, within ten days after a home solicitation sale has been canceled or an offer to purchase revoked the seller must tender to the buyer any payments made by the buyer and any note or other evidence of indebtedness. A provision permitting the seller to keep all or any part of any payment, note, or evidence of indebtedness is in violation of this section and unenforceable.

(2) If the down payment includes goods traded in, the goods must be tendered in substantially as good condition as when received by the seller. If the seller fails to tender the goods as provided by this section, the buyer may elect to recover an amount equal to the trade-in allowance stated in the agreement.

(3) The seller is not entitled to retain a cancellation fee.

(4) Until the seller has complied with the obligations imposed by this section the buyer may retain possession of goods delivered to him by the seller and has a lien on the goods in his possession or control for any recovery to which he is entitled.

(i)(1) Except as provided by the provisions on retention of goods by the buyer (subsection (h)(4) of this section), within a reasonable time after a home solicitation sale has been canceled or an offer to purchase revoked, the buyer upon demand must tender to the seller any goods delivered by the seller pursuant to the sale but he is not obligated to tender at any place other than his residence. If the seller fails to demand possession of goods within a reasonable time after cancellation or revocation, the goods become the property of the buyer without obligation to pay for them. For the purpose of this section, forty days is presumed to be a reasonable time.

(2) The buyer has a duty to take reasonable care of the goods in his possession before cancellation or revocation and for a reasonable time thereafter, during which time the goods are otherwise at the seller’s risk.

(3) If the seller has performed any services pursuant to a home solicitation sale prior to its cancellation, the seller is entitled to no compensation.

(j) Subsections (b), (c), (d), (e), and (f) of this section shall not apply to a home solicitation sale between a buyer and a public insurance adjuster, as defined in [§ 31-1631.01(c)]. [Section 31-1631.07] shall apply to all such sales.

§ 28–3812. Limitation on creditors’ remedies.

(a) This section applies to actions or other proceedings to enforce rights arising from consumer credit sales, consumer leases, and direct installment loans (other than a loan directly secured on real estate or a direct motor vehicle installment loan covered by Chapter 36 of Title 28, District of Columbia Official Code); and, in addition, to extortionate extensions of credit.

(b)(1) During the thirty-day period after a default consisting of a failure to pay money the creditor may not because of the default (A) accelerate the unpaid balance of the obligation, (B) bring action against the debtor, or (C) proceed against the collateral.

(2) Unless the creditor has first (A) notified the debtor that he has elected to accelerate the unpaid balance of the obligation because of default, (B) brought action against the debtor, or (C) proceeded against the collateral, the debtor may cure a default consisting of a failure to pay money by tendering the amount of all unpaid sums due at the time of tender, without acceleration, plus any unpaid delinquency or deferral charges. Cure restores the debtor to his rights under the agreement as though the defaults cured had not occurred.

(3) Posting of any notice required by law shall be deemed valid if mailed by certified mail to the debtor’s last known address.

(c)(1) The debtor may redeem the collateral from the creditor at any time —

(A) within fifteen days of the creditor’s taking possession of the collateral, or

(B) thereafter until the creditor has either disposed of the collateral, entered into a contract for its disposition, or gained the right to retain the collateral in satisfaction of the debtor’s obligation pursuant to the provisions on disposition of collateral in section 9-505 of subtitle I of Title 28, District of Columbia Official Code.

(2) The debtor may redeem the collateral by tendering fulfillment of all obligations secured by the collateral including reasonable expenses incurred in realizing on the security interest.

(d) Subject to the provisions in this part, the parties may agree that the creditor has the right to take possession of the collateral on default. In taking possession, a secured party may proceed without judicial process if this can be done without breach of the peace and with consent of the debtor. Those who take the collateral through repossession shall be deemed the agent of the creditor, and the creditor shall be civilly liable for any of the actions of its agents.

(e)(1) This subsection applies to consumer credit sales of goods or services and to direct installment loans served by interests in goods.

(2) A creditor may not maintain a proceeding for a deficiency unless he has disposed of the goods in good faith and in a commercially reasonable manner.

(3) If the creditor repossesses or voluntarily accepts surrender of goods which were the subject of the sale and in which he has a security interest, the consumer is not personally liable to the creditor for the unpaid balance of debt arising from the sale of a commercial unit of goods of which the cash price was $2,000 or less. In that case the creditor is not obligated to resell the collateral unless the consumer has paid 60% or more of the cash price and has not signed after default a statement renouncing his rights in the collateral.

(4) If the creditor takes possession or voluntarily accepts surrender of goods which were not the subject of the sale but in which he has a security interest to secure a debt arising from a sale of goods or services or a combined sale of goods and services and the cash price of the sale was $2,000 or less, the debtor is not personally liable to the creditor for the unpaid balance of the debt arising from the sale and the creditor’s duty to dispose of the collateral is governed by the provisions on disposition of collateral in section 9-505 of Subtitle I of Title 28, District of Columbia Official Code.

(5) If the creditor takes possession or voluntarily accepts surrender of goods in which he has a security interest to secure a debt arising from a direct installment loan and the net proceeds of the loan paid to or for the benefit of the debtor are $2,000 or less, the consumer is not personally liable to the lender for the unpaid balance of the debt arising from the loan and the lender’s duty to dispose of the collateral is governed by the provisions on disposition of collateral in section 9-505 of Subtitle I of Title 28, District of Columbia Official Code.

(6) The consumer shall be liable in damages to the creditor if the debtor has wrongfully damaged the collateral or if, after default and demand, the debtor has wrongfully failed to make collateral available to the creditor.

(7) If the creditor elects to bring an action against the buyer for a debt arising from a consumer credit sale of goods or services, when under this section he would not be entitled to a deficiency judgment if he repossessed the collateral, and obtains judgment —

(A) he may not repossess the collateral, and

(B) the collateral is not subject to levy or sale on execution or similar proceedings pursuant to the judgment.

(f)(1) If it is the understanding of the creditor and the debtor at the time an extension of credit is made that delay in making repayment or failure to make repayment could result in the use of violence or other criminal means to cause harm to the person, reputation, or property of any person, the repayment of the extension of credit is unenforceable through civil judicial processes against the debtor.

(2) If it is shown that an extension of credit was made at an annual rate exceeding 45% and that the creditor then had a reputation for the use or threat of use of violence or other criminal means to cause harm to the person, reputation, or property of any person to collect extensions of credit or to punish the nonrepayment thereof, there is prima facie evidence that the extension of credit was unenforceable under paragraph (1) of this subsection.

(g)(1) With respect to a consumer credit sale, or direct installment loan, if the court as a matter of law finds —

(A) the agreement to have been unconscionable at the time it was made, or to have been induced by unconscionable conduct, the court may refuse to enforce the agreement, or

(B) any clause of the agreement to have been unconscionable at the time it was made, the court may refuse to enforce the agreement, or may enforce the remainder of the agreement without the unconscionable clause, or may so limit the application of any unconscionable clause as to avoid any unconscionable result.

(2) If it is claimed or appears to the court that the agreement or any clause thereof may be unconscionable the parties shall be afforded a reasonable opportunity to present evidence as to its setting, purpose, and effect to aid the court in making the determination.

(3) For the purpose of this section, a charge or practice expressly permitted by this section is not in and of itself unconscionable in the absence of other practices and circumstances.

§ 28–3813. Consumers’ remedies.

(a) The remedies provided by this section shall be liberally administered to the end that the consumer as the aggrieved party shall be put in at least as good a position as if the creditor had fully complied with this chapter. Except as is otherwise specifically provided where there are wilful and repeated violations of this chapter consequential and special damages may be had in lieu of the specific penalties allowed, and in addition punitive damages may be had as indicated.

(b) Any right or obligation declared by this chapter is enforceable by action unless the provision declaring it specifies a different and limited effect.

(c) “Transaction total” means —

(1) in the case of transactions pursuant to open end credit plans or consumer credit transactions, the total of the following calculated as if the amount or amounts financed were paid over the maximum period of the plan or, if there is no such period, over twelve months beginning with the next billing cycle or cycles following the transaction or transactions:

(A) the amount financed, plus any down payment or required deposit balance, and

(B) the total finance charge, including any prepaid finance charge;

(2) in the case of other than open end transactions or consumer credit transactions, the total of the following:

(A) the amount financed, plus any down payment or required deposit balance, and

(B) the amount of all precomputed or precomputable finance charge, including any prepaid finance charge.

(d)(1) In the discretion of the court, a consumer may recover from the person violating this chapter, in addition to the damages the law otherwise allows, 10% of the transaction total, if applicable, or $100, whichever is greater, for violations to which this section applies.

(2) This section also applies to all violations for which no other remedy is specifically provided.

(e) If a consumer prevails in a suit brought under this chapter, the court may assess reasonable attorney’s fees in addition to any other amounts recoverable under this chapter.

(f) Any charge, practice, term, clause, provision, security interest, or other action or conduct which can be shown to be in wilful violation of the provisions of this chapter shall confer no rights or obligations enforceable by action.

§ 28–3814. Debt collection.

*NOTE: This section includes amendments by temporary legislation that will expire on November 21, 2024. To view the text of this section after the expiration of all emergency and temporary legislation, click this link: Permanent Version.*

(a)(1) This section applies to conduct and practices in connection with the collection of obligations arising from any consumer debt (other than a loan directly secured on real estate or a direct motor vehicle installment loan covered by Chapter 36 of this title).

(2) This section shall apply to public utilities as of May 2, 2023.

(b) As used in this section, the term:

(1) "Consumer" means any individual obligated or allegedly obligated to pay any consumer debt.

(2) "Consumer debt" means money or its equivalent, or a loan or advance of money, which is, or is alleged to be, more than 30 days past due and owing, unless a different period is agreed to by the consumer, as a result of a purchase, lease, or loan of goods, services, or real or personal property for personal, family, medical, or household purposes. The term consumer debt does not include an extension of credit secured by a mortgage.

(3) "Debt buyer" means a person that is engaged in the business of purchasing charged-off consumer debt or other delinquent consumer debt for collection purposes, whether it collects the consumer debt itself or hires a third party, including an attorney, in order to collect such consumer debt. The term debt buyer does not include a person or entity that acquires delinquent or charged-off debt as an incidental part of acquiring a portfolio of debt that is predominantly not delinquent or charged-off debt.

(4) "Debt collection" means any action, conduct, or practice undertaken for the purpose of collecting consumer debt.

(5) "Debt collector" means a person, including an original creditor or debt buyer engaging directly or indirectly in debt collection and any person who sells or offers to sell forms represented to be a collection system, device, or a scheme or method intended or calculated to be used to collect consumer debt.

(6) "Original creditor" means the person that owned a consumer debt at the date of default, or the date of charge-off for credit cards or revolving credit accounts, giving rise to a cause of action for its collection.

(7) "Person" means an individual, corporation, business trust, estate, trust partnership, limited liability company, association, joint venture, government, governmental subdivision, agency, or instrumentality, public corporation, or any other legal or commercial entity.

(8) "Public health emergency" means a period of time for which the Mayor has declared a public health emergency pursuant to § 7-2304.01, or a state of emergency pursuant to § 28-4102.

(9) "Public utility" shall have the same meaning as set forth in § 34-214.

(c) No debt collector shall collect or attempt to collect any money alleged to be due and owing by means of any threat, coercion, or attempt to coerce in any way, including:

(1) the use, or express or implicit threat of use, of violence or other criminal means, to cause harm to the person, reputation, or property of any person;

(2) the false accusation or threat to falsely accuse any person of fraud or any crime, or of any conduct which, if true, would tend to disgrace such other person or in any way subject the person to ridicule, contempt, disgrace, or shame;

(3) false accusations made to another person, including any credit reporting agency, that a consumer has not paid a just debt, or threat to so make such false accusations;

(4) the threat to sell or assign to another the consumer debt with a representation or implication that the result of such sale or assignment would be that the consumer would lose any defense in an action seeking to collect such consumer debt or would be subjected to collection attempts in violation of this section;

(5) the threat that nonpayment of an alleged consumer debt will result in the arrest of any person;

(6) the threat of any action that the debt collector cannot legally take or which the debt collector does not in fact intend to take;

(7) disclosing or threatening to disclose information concerning the existence of a consumer debt known to be disputed by the consumer without disclosing the fact that the consumer debt is disputed by the consumer;

(8) disclosing or threatening to disclose information affecting the consumer's reputation for creditworthiness with knowledge or reason to know that the information is false; and

(9) disclosing or threatening to disclose the consumer's citizenship status to any individual, organization, or entity.

(d) No debt collector shall unreasonably oppress, harass, or abuse any person in connection with the collection of or attempt to collect any consumer debt alleged to be due and owing by that person or another in any way, including:

(1) the use of profane or obscene language or language that is intended to unreasonably abuse the hearer or reader;

(2) the placement of telephone calls without disclosure of the caller’s identity or with the intent to harass or threaten any person at the called number;

(3) absent the person's express written consent, knowingly causing expense to any person incurred by use of a medium of communication, or by concealment of the true purpose of a notice, letter, message, or communication; and

(4) communicating with a consumer or any member of a consumer's family or household in such a manner that can reasonably be expected to abuse or harass the consumer or any member of the consumer's family or household or communicating with the consumer or any member of the consumer's family or household at an unreasonable hour or with unreasonable frequency, including:

(A)(i) Making in excess of 4 phone calls per account, inclusive of all phone numbers the debt collector has for the consumer, in any 7-day period; except, that the limit of 4 calls per account in any 7-day period shall not apply to calls made to:

(I) A debt collector by a consumer;

(II) A single completed phone call made by a debt collector in response to a consumer's request for a returned phone call;

(III) Calls when there is no connection or ability to leave a message; or

(IV) Calls made to a wrong number that is not affiliated with the consumer or the consumer's family.

(ii) After a completed call between the debt collector and consumer takes place, the debt collector shall not call the consumer back for 7 days unless otherwise requested by the consumer.

(iii) The consumer may opt out of receiving phone calls in writing at any time.

(iv) For purposes of this subparagraph, a completed phone call means one in which the debt collector engages in a telephone conversation with the consumer.

(B)(i) Sending text messages, emails, and private messages through social media platforms to a consumer prior to mailing the written notice required pursuant to subsection (m)(2)(A) of this section;

(ii) After mailing the consumer the written notice required pursuant to subsection (m)(2)(A) of this section, sending text messages, emails, and private messages through social media platforms prior to obtaining a consumer's express consent to communicate via one or more of these methods; except, that a debt collector may send one email, text message, or private message to a consumer in any 7-day period for purposes of obtaining consent to communicate via the method the debt collector is using to communicate; and

(iii)(I) After obtaining a consumer's consent, sending more than 5 text messages, emails, and private messages per account in any 7-day period unless otherwise agreed to by the consumer.

(II) The limit of 5 text messages, emails, and private messages per account in any 7-day period shall not apply to messages or emails sent to a debt collector by a consumer, to messages or emails sent by a debt collector in response to a consumer's request for a response, or to messages or emails sent to a wrong number or email address that is not affiliated with the consumer or the consumer's family.

(III) Debt collectors must include opt-out language in all emails, text messages, and private messages, and consumers shall be able to opt-out of receiving communications from debt collectors via text message, email, or private message at any time;

(5) visiting or threatening to visit the household of a consumer at any time for the purpose of collecting a debt, other than for the purpose of serving process in a lawsuit or for the purpose of a public utility contacting a utility customer pursuant to 15 DCMR § 312; and

(6) visiting or threatening to visit the place of employment of a consumer at any time, other than for the purpose of serving process in a lawsuit.

(e) No debt collector shall unreasonably publicize information relating to any alleged indebtedness or consumer in such a manner as to harass or embarrass the consumer in any way, including:

(1) the communication of any information relating to a consumer's indebtedness to any employer or employer's agent, except:

(A) when such indebtedness had been guaranteed by the employer or the employer has requested the loan giving rise to the indebtedness; or

(B) when such communication is in connection with an attachment or execution after judgments as authorized by law;

(2) the disclosure, publication, or communication of information relating to a consumer's indebtedness to any relative, family member, friend, or neighbor of the consumer, except:

(A) through proper legal action or process;

(B) in connection with a matter related to a deceased consumer's estate;

(C) in connection with a public utility posting a notice pursuant to 15 DCMR § 312 or 15 DCMR § 314; or

(D) at the express and unsolicited request of the relative or family member;

(3) the disclosure, publication, or communications of any information relating to a consumer’s indebtedness by publishing or posting any list of consumers, except for the publication and distribution of “stop lists” to point-of-sale locations where credit is extended, or by advertising for sale any consumer debt or in any other manner other than through proper legal action, process, or proceeding; and

(4) the use of any form of communication to the consumer, which ordinarily may be seen by any other persons, that displays or conveys any information about the alleged consumer debt other than the name, address, and phone number of the debt collector.

(f) No debt collector shall use any unfair, fraudulent, deceptive, or misleading representation, device, or practice to collect a consumer debt or to obtain information in conjunction with the collection of a consumer debt in any way, including:

(1) the use of any company name, while engaged in debt collection, other than the original creditor or debt collector's true company name;

(2) the failure to clearly disclose in all written communications made to collect or attempt to collect consumer debt or to obtain or attempt to obtain information about a consumer, that the debt collector is attempting to collect consumer debt and that any information obtained will be used for that purpose;

(3) any false representation that the debt collector has in his possession information or something of value for the consumer, that is made to solicit or discover information about the consumer;

(4) the failure to clearly disclose the name, phone number, email address, if used for receipt of communications in connection with collection with a consumer debt, and full business address of the person to whom the consumer debt has been assigned, or to whom the consumer debt is owed, at the time of making any demand for money;

(5) any false representation or implication of the character, extent, or amount of a consumer debt, or of its status in any legal proceeding;

(6) any false representation or false implication that any debt collector is vouched for, bonded by, affiliated with or an instrumentality, agent, or official of the District of Columbia or any agency of the Federal or District government;

(7) the use or distribution or sale of any written communication which simulates or is falsely represented to be a document authorized, issued, or approved by a court, an official, or any other legally constituted or authorized authority, or which creates a false impression about its source, authorization, or approval;

(8) any representation that an existing obligation of the consumer may be increased by the addition of attorney’s fees, investigation fees, service fees, or any other fees or charges when in fact such fees or charges may not legally be added to the existing obligation;

(9) any false representation or false impression about the status or true nature of or the services rendered by the debt collector or his business;

(10) initiating a cause of action to collect a consumer debt when the debt collector knows or reasonably should know that the applicable statute of limitations period has expired; and

(11) attaching or garnishing a consumer's funds or negotiating a settlement agreement on a consumer debt when the debt collector knows or has reason to know the funds are exempt from attachment or garnishment under federal or state law without letting the consumer know in writing that the funds may be exempt. The notice provided in subsection (m)(2)(A) of this section shall satisfy this requirement.

(g) No debt collector shall use unfair or unconscionable means to collect or attempt to collect any consumer debt in any way, including:

(1) the seeking or obtaining of any written statement or acknowledgment in any form that specifies that a consumer’s obligation is one incurred for necessaries of life where the original obligation was not in fact incurred for such necessaries;

(2) the seeking or obtaining of any written statement or acknowledgment in any form containing an affirmation of any obligation by a consumer who has been declared bankrupt without clearly disclosing the nature and consequences of such affirmation and the fact that the consumer is not legally obligated to make such affirmation;

(3) the collection or the attempt to collect from the consumer all or any part of the debt collector's fee or charge for services rendered, unless otherwise provided for by law or contract with the consumer;

(4) the collection of or the attempt to collect any interest or other charge, fee, or expense incidental to the principal obligation unless such interest or incidental fee, charge, or expense is expressly authorized by the agreement creating the obligation and legally chargeable to the consumer or unless such interest or incidental fee, charge, or expense is expressly authorized by law;

(5) any communication with a consumer whenever it appears that the consumer has notified the creditor that he is represented by an attorney and the attorney’s name and address are known; and

(6)(A) attempting to collect debts owed by a deceased consumer from a person with no legal obligation to pay the amounts alleged to be owed, except from the executor of an estate or a person informally performing such functions.

(B) When contacting the executor of an estate, or a person informally performing such functions, the debt collector must state that the person being contacted is not personally liable for the debts of the estate.

(h) No debt collector shall use, or distribute, sell, or prepare for use, any written communication that violates or fails to conform to United States postal laws and regulations.

(i) No debt collector shall take or accept for assignment any of the following:

(1) an assignment of any claim for attorney’s fees which have not been lawfully provided for in the writing evidencing the obligation; or

(2) an assignment of any consumer debt without evidence that written notice from the assigning debt collector was first provided to the consumer.

(j) [Repealed].

(k) No debt collector or its representatives or agents shall contact consumers by telephone or text message before 8 a.m. or after 9 p.m. EST or EDT, whichever time zone is in effect.

(l) Notwithstanding any other provision of law, when the applicable statute of limitations period for an action to collect consumer debt has expired, any subsequent payment toward or written or oral affirmation of such consumer debt shall not extend the limitations period.

(m)(1) Except as provided in paragraph (3) of this subsection, no debt collector shall collect or attempt to collect a consumer debt unless the debt collector has complete documentation of the ownership of the consumer debt, and the debt collector is in possession of or has immediate access to the following information or documents:

(A) Documentation of the name of the original creditor as well as the name of the current creditor or owner of the consumer debt;

(B) The consumer's last account number with the original creditor;

(C)(i) A copy of the signed contract, signed application, or other documents that provide evidence of the consumer's contractual or other liability and the terms thereof.

(ii) For a revolving credit account, the most recent monthly statement recording a purchase transaction, last payment, balance transfer, or extension of credit shall be deemed sufficient to satisfy the requirement of this subparagraph;

(D) The date that the consumer debt was incurred; except, that in the case of a revolving credit account, the date that the consumer debt was incurred shall be the date of the most recent purchase, payment, balance transfer, or last extension of credit;

(E) The date and amount of the last payment by the consumer, if applicable; and

(F)(i) An itemized accounting of the amount claimed to be owed, including the amount of the principal, any interest, fees, or charges, and whether the charges were imposed by the original creditor, a debt collector, or a subsequent owner of the debt.

(ii) If the consumer debt arises from a credit card or revolving credit account that has been charged off, the itemized accounting shall be measured from the charge-off balance and shall include copies of the charge-off statement and the most recent monthly statement recording a purchase transaction, last payment, or balance transfer.

(G) If the consumer debt has been reduced to a judgment, a copy of the judgment as originally issued, complete documentation establishing that the debt collector is the owner of the judgment, and an itemized accounting of the balance due on the judgment.

(2)(A) In the first written communication with the consumer regarding charged-off debt, a debt collector shall provide written notice to the consumer that the consumer may request that the debt collector provide the information or documents identified in paragraph (1) of this subsection to the consumer, or if the consumer debt has been reduced to a judgment, the documents and information identified in paragraph (1)(G) of this subsection. The notice shall set forth, in boldface type, in a minimum of 12-point type, the following statement:

" If your debt has not been reduced to a judgment by a court, you have the right to request the following information concerning your debt:

"(1) The name of the original creditor, and the name of any other owners of your debt, including the current owner;

"(2) Your last account number with the original creditor;

"(3) A copy of the signed contract, application, or other documents which show your obligations;

"(4) The date your debt was incurred;

"(5) The date of your last payment, if applicable; and

"(6) An itemized accounting of the alleged debt, including the amount of any principal interest, fees, or charges, and whether the charges were imposed by the original creditor, a debt collector, or other owner of the debt. For credit card or revolving credit accounts, the itemized accounting is measured from the charge-off balance.

"If your debt has been reduced to a judgment by a court, you have a right to a copy of the judgment, documentation establishing that the debt collector is the owner of the judgment, and an itemized accounting of the current balance due on the judgment.

"You may request the above information by contacting us by phone, mail, or email at the following:

"Address:

"Phone:

"E-mail Address:

"You might have income or resources that are protected from being taken by debt collectors. These might include certain sources of income, funds, or property, including, but not limited to, Social Security, Supplemental Security Income (SSI), disability or unemployment benefits, veteran's benefits, or child support payments. If you believe your property or income may be protected, you may wish to seek legal advice, including at a legal services provider or legal aid office, before paying this debt.".

(B) If the person to whom the notice is sent is the Executor or Administrator of an estate, or a person informally performing such functions, the word "your" may be replaced in the notice with another appropriate word or words.

(C) The written notice required pursuant to subparagraph (A) of this paragraph shall be provided to the consumer in English and Spanish; except, that if a language other than Spanish is principally used in the original contract with the consumer or by the debt collector in the initial oral communication with the consumer, notice required by subparagraph (A) of this paragraph shall be provided to the consumer in that language and English.

(D) Upon receipt of the first request by a consumer for any of the information identified in paragraph (1) of this subsection, the debt collector shall send all of the information listed in paragraph (1) of this subsection to the consumer in writing within 15 days of the receipt of the request and shall cease all collection of the consumer debt until such information is provided.

(3) The provisions of this subsection shall not apply to original creditors collecting or attempting to collect their own debt.

(n)(1) A debt collector who enters into a payment schedule or an agreement on terms to resolve consumer debt shall send a written copy of the payment schedule or settlement agreement to the consumer within 7 days; except, that the requirement to send a written copy of the payment schedule or settlement agreement to the consumer shall not apply to a deferred payment agreement entered into between a public utility and a utility customer pursuant to 15 DCMR § 306.

(2) A consumer shall not be required to make a payment on a payment schedule or agreement on terms to resolve a consumer debt until the written agreement required by paragraph (1) of this subsection has been provided by the debt collector. Without limiting the foregoing, a debt collector may accept a payment on a payment schedule or settlement agreement before the complete, written agreement has been provided by the debt collector if all material terms of the payment schedule or settlement agreement have been disclosed to the consumer in writing or by phone; provided, that the debt collector send the information discussed on the phone in writing after the call. When providing this information to the consumer in writing, the debt collector shall include a statement in boldface, in a minimum of 12-point type, that reads:

"You might have income or resources that are protected from being taken by debt collectors. These might include certain sources of income, funds, or property, including, but not limited to, Social Security, Supplemental Security Income (SSI), disability or unemployment benefits, veteran's benefits, or child support payments. If you believe your property or income may be protected, you may wish to seek legal advice, including at a legal services provider or legal aid office, before paying this debt.".

(o) Any action for the collection of a consumer debt that is commenced on or after September 1, 2021, shall only be commenced within 3 years of accrual. This period shall apply whether the legal basis of the claim sounds in contract, account stated, open account, or other cause, and notwithstanding the provisions of any other statute of limitations unless that statute provides for a shorter limitations period. This time period also applies to contracts under seal.

(p) Immediately prior to commencing a legal action to collect a consumer debt, the plaintiff shall undertake a reasonable investigation to verify the defendant's current address for service of process. At the time of filing the proof of service, the plaintiff must include with the proof of service a photograph with a readable time stamp indicating the date and time of service and readable global positioning system (commonly known as "GPS") coordinates indicating the location of service.

(q) In a cause of action initiated by a debt collector to collect a consumer debt, the debt collector shall attach to the complaint or statement of claim a copy of the signed contract, signed application, or other documents that provide evidence of the consumer's liability and the terms thereof, and shall allege or state the following information in the complaint or statement of claim:

(1) A short and plain statement of the type of consumer debt;

(2) The information enumerated in subsection (m)(1) of this section; except, that the debt collector shall only include the last four digits of the consumer's last account number with the original creditor;

(3) The basis for any interest and fees charged;

(4) The basis for the request of attorney's fees, if applicable;

(5) The current owner of the consumer debt and a chronological listing of the names of all prior owners of the consumer debt and the date of each transfer of ownership, beginning with the original creditor;

(6) That the suit is filed within the applicable statute of limitations period; and

(7)(A) The following statement in boldface, in a minimum of 12-point type:

"You might have income or resources that are protected from being taken by debt collectors. These might include certain sources of income, funds, or property, including, but not limited to, Social Security, Supplemental Security Income (SSI), disability or unemployment benefits, veteran's benefits, or child support payments. If you believe your property or income may be protected, you may wish to seek legal advice, including at a legal services provider or legal aid office, before paying this debt.".

(B) The statement in subparagraph (A) of this paragraph shall also include the current phone number or numbers for civil legal service providers in debt collection cases as published by the Superior Court of the District of Columbia.

(r) In a cause of action initiated by a debt collector to collect a consumer debt, prior to entry of a default or summary judgment or judgment on the pleadings or at trial against a consumer, the plaintiff shall file evidence with the court to establish the amount and nature of the consumer debt. The only evidence sufficient to establish the amount and nature of the debt shall be business records, authenticated by an affiant or affiants with knowledge of how the records were created and kept by the original creditor and any subsequent debt buyer, that shall include the information in subsection (m)(1) of this section; except, that the debt collector shall only include the last four digits of the consumer's account numbers with the original creditor.

(s)(1) In a cause of action initiated by a debt buyer to collect a consumer debt, prior to entry of a default or summary judgment or judgment on pleadings or at trial against a consumer, the plaintiff shall file:

(A) An account-specific affidavit by the original creditor setting forth the facts establishing the existence of the debt and the amount due at the time of sale or assignment;

(B) For each assignment or sale of debt to another debt collector, an account-specific affidavit of sale by the debt seller, completed by the seller or assigner; and

(C) An account-specific affidavit that includes the chain of title of the debt, completed by the plaintiff or the plaintiff's witness.

(2) An Affidavit required by paragraph (1) of this subsection shall include, as an attachment, business records that verify the information required in the affidavit; except, that the plaintiff is only required to attach such business records if the information required in the affidavits is not verified within the documents attached to the complaint or statement of claim in subsection (q) of this section.

(3) The Superior Court of the District of Columbia shall issue form affidavits to satisfy the requirements of this subsection.

(t)(1) In a cause of action initiated by a debt collector to collect a consumer debt, the court shall, on its own, prior to entering a judgment, review whether the plaintiff has complied with the requirements of subsections (o) through (s) of this section. If the plaintiff has not complied, the court may dismiss the case; provided, that the court shall dismiss the case with prejudice for substantial or willful noncompliance.

(2) A defendant may raise any violation of this section as a defense. If the court finds that the plaintiff has failed to comply, it may dismiss the case; provided, that the court shall dismiss the case with prejudice for substantial or willful noncompliance.

(u) A debt collector that violates any provision of this section with respect to a consumer may be liable to the consumer for the following:

(1) Actual damages;

(2) Costs and reasonable attorney's fees;

(3) Punitive damages;

(4)(A) If the consumer is an individual, the court may award an additional penalty in an amount not less than $500 per violation and not to exceed $4,000 per violation; or

(B) In the case of a class action, the amount for each named plaintiff as could be recovered under subparagraph (A) of this paragraph and an amount as the court may determine for each class member, not exceeding the amount per person that could recovered under subparagraph (A) of this paragraph times the number of class members; and

(5) Any other relief that the court determines proper.

(v) If the plaintiff is the prevailing party in any action to collect a consumer debt, the plaintiff shall be entitled to collect attorney's fees only if the contract or other document evidencing the indebtedness sets forth an obligation of the consumer to pay such attorney's fees, or if otherwise authorized by District law, and subject to the following provisions:

(1) If the contract or other document evidencing indebtedness provides for attorney's fees in some specific percentage, such provision and obligation shall be valid and enforceable up to but not in excess of 15% of the amount of the consumer debt, excluding attorney's fees and collection costs.

(2) If a contract or other document evidencing indebtedness or District law provides for the payment of reasonable attorney's fees by the consumer, without specifying any specific percentage, such provision shall be presumed to mean the lesser of 15% of the amount of the debt, excluding attorney's fees and collection costs, or the amount of attorney's fees calculated by a reasonable rate for such cases multiplied by the amount of time reasonably expended to obtain the judgment.

(3) The documentation setting forth a party's obligation to pay attorney's fees shall be provided to the court before a court may enforce those provisions. Such documentation must include the agreement for any attorney's fees and documents establishing the basis for the attorney's fees.

(4)(A) Notwithstanding paragraphs (1) through (3) of this subsection, in a case other than one filed in the Small Claims and Conciliation Branch of the Superior Court of the District of Columbia, a prevailing plaintiff may seek to recover attorneys' fees in an amount greater than 15% of the amount of the consumer debt by submitting an application to the court demonstrating why such fees were reasonably necessary to obtain the judgment and providing a detailed breakdown of the fees that identifies the date, time spent, the rate charged, identity and position of the person performing the work, and a description of the work performed for each entry.

(B) The Court shall grant recovery of any fees over the 15% of the amount of the consumer debt only for those fees it makes a finding were reasonably necessary to obtain the judgment.

(w) Before a court may issue a bench warrant for civil arrest for failing to appear in a debt collection case under this section, the following conditions must be met:

(1) The plaintiff must have personally served its motion for contempt, or other related motion or filing, on the defendant; and

(2) The defendant must have failed to appear at 2 contempt hearings.

(x) Notwithstanding any other law or court rule, a consumer who is compelled to attend pursuant to a civil arrest warrant shall be brought before the court the same day.

(y) Notwithstanding any other law or court rule, no person shall be imprisoned or jailed for failure to pay a consumer debt, nor shall any person be imprisoned or jailed for contempt of court or otherwise for failure to comply with a court order to pay a consumer debt in part or in full.

(z) A violation of the Fair Debt Collection Practices Act, approved September 20, 1977 (91 Stat. 874; 15 U.S.C. § 1692 et seq.), shall constitute a violation of this section.

(aa)(1) Notwithstanding subsection (a) of this section, subsections (aa) and (bb) of this section shall apply to any consumer debt.

(2) During a public health emergency and for 60 days after its conclusion, no debt collector shall, with respect to any consumer debt:

(A) Initiate, file, or threaten to file any new collection lawsuit;

(B) Initiate, threaten to initiate, or act upon any statutory remedy for the garnishment, seizure, attachment, or withholding of wages, earnings, property, or funds for the payment of a consumer debt to a debt collector; or

(C) Initiate, threaten to initiate, or act upon any statutory remedy for the repossession of any vehicle; except, that debt collectors may accept collateral that is voluntarily surrendered;

(D) Confront or communicate in person with a consumer debt regarding the collection of a debt in any public place at any time, unless initiated by the consumer.

(3) This subsection shall not apply to:

(A) Collecting or attempting to collect a consumer debt that is, or is alleged to be, owed on a loan secured by a mortgage on real property or owed for common expenses pursuant to § 42-1903.12; or

(B) Collecting or attempting to collect delinquent consumer debt pursuant to subchapter XVII of Chapter 3 of Title 1.

(4) Any statute of limitations on any collection lawsuit is tolled during the duration of the public health emergency and for 60 days thereafter.

(bb)(1)(A) During a public health emergency and for 60 days after its conclusion, no debt collector shall initiate any communication with a consumer via any written or electronic communication, including email, text message, or telephone.

(B) A debt collector shall not be deemed to have initiated a communication with a consumer if the communication by the debt collector is in response to a request made by the consumer for the communication or is the mailing of monthly statements related to an existing payment plan or payment receipts related to an existing payment plan.

(2) This subsection shall not apply to:

(A) Communications initiated solely for the purpose of informing a consumer of a rescheduled court appearance date or discussing a mutually convenient date for a rescheduled court appearance;

(B) Original creditors collecting or attempting to collect their own consumer debt;

(C) Collecting or attempting to collect a debt which is, or is alleged to be, owed on a loan secured by a mortgage on real property or owed for common expenses pursuant to § 42-1903.12;

(D) Receiving and depositing payments the consumer chooses to make during a public health emergency;

(E) Collecting or attempting to collect delinquent consumer debt pursuant to subchapter XVII of Chapter 3 of Title 1.

(cc) Subsections (aa) and (bb) of this section shall not be construed to:

(1) Exempt any person from complying with existing laws or rules of professional conduct with respect to debt collection practices;

(2) Supersede or in any way limit the rights and protections available to consumers under applicable local, state, or federal foreclosure laws; or

(3) Supersede any obligation under the District of Columbia Rules of Professional Conduct, to the extent of any inconsistency.

§ 28–3815. Administrative enforcement.

(a) As used in this section —

(1) “Commissioner” [“Mayor”] means the Commissioner of the District of Columbia [Mayor of the District of Columbia] or his designated agent;

(b) Compliance with the requirements imposed under this chapter shall be enforced by the Commissioner [Mayor]. Nothing contained herein shall be construed to affect the authority and jurisdiction of the respective agencies designated in section 108 of the Truth-in-Lending Act (82 Stat. 146 et seq.; 15 U.S.C. 1601 et seq.).

(c) Civil fines, penalties, and fees may be imposed as alternative sanctions for any infraction of the provisions of this act [this chapter], or any rules or regulations issued under the authority of this act [this chapter], pursuant to titles I-III of the Department of Consumer and Regulatory Affairs Civil Infractions Act of 1985 [Chapter 18 of Title 2]. Adjudication of any infraction of this act [this chapter] shall be pursuant to titles I-III of the Department of Consumer and Regulatory Affairs Civil Infractions Act of 1985 [Chapter 18 of Title 2].

§ 28–3816. Inconsistent laws: What law governs.

If any provision of law or regulation promulgated thereunder is inconsistent with this chapter, this chapter shall govern, unless this chapter or the inconsistent provision of the other laws specifically provides otherwise.

§ 28–3817. Health spa sales.

(a) As used in this section, the term —

(1) “health spa” means a proposed or existing location or organization with indoor or outdoor facilities for physical sport, exercise, training, or therapy or rehabilitation. It does not include any location, the primary activity of which is training or instruction in a specific skill, such as dance, or swimming. It does not include any location which is operated primarily by a not-for-profit organization.

(2) “health spa sale” means a cash sale or a consumer credit sale in which a health spa or affiliated organization agrees, after the effective date of this section, to provide or make available, for a period of more than 30 days, goods or services (whether or not a membership is included) for physical sport, exercise, training, therapy or rehabilitation.

(3) “buyer” means any natural person who purchases a health spa sale contract for his, or another natural person’s, personal use.

(4) “seller” means the seller of a health spa sale to a buyer.

(b) Every contract containing a health spa sale shall:

(1) be in writing;

(2) if renewable in whole or part, require the buyer’s separate signature and payment for renewal;

(3) provide for a buyer’s right (which may not be waived) to cancel, as explained in subsection (c);

(4) in close proximity to the space reserved for the buyer’s signature, and in boldface type of at least ten points, include the following statement:

“NOTICE TO THE BUYER:

You have the right to cancel this contract during the first fifteen days after the contract is made, or after the first fifteen days, if, due to death, illness, injury, or a change in residence, you are unable to use the full membership privileges in this contract. If you cancel, you will have to pay only for the goods or services you are entitled to up through the month in which you cancel, plus a registration fee of 5% of the price of this contract (not counting any finance charge), not to exceed $25. You must notify the health spa, by certified or registered mail at the address given in this contract, of your intention to cancel, or your cancellation will not be effective. If your cancellation is due to illness or injury, a certificate from a doctor of your choice must accompany your notice of cancellation to the health spa. Contact the District of Columbia Office of Consumer Affairs if you have a question as to how to calculate your obligation or your refund after you cancel.”;

(5) be presented, fully completed, to the buyer, and be signed and dated by the buyer, and then a copy, as so approved, be furnished to the buyer; and

(6) specify the seller’s and the buyer’s addresses.

(c)(1) The buyer, at his option, has the right to cancel a health spa sale during the first fifteen days after the sale is made, or after such fifteen days, if, due to death, illness, injury, or a change in residence, the buyer is unable to use all the goods and services provided in the sale.

(2) Notice of cancellation given by the buyer need not take a particular form and is sufficient if it indicates by any form of written expression the intention of the buyer to be no longer bound by the health spa sale, and (whenever such notice is given more than 15 days after the contract is made) that, due to death, illness, injury, or a change in residence or in the location of the health spa, the buyer is unable to use all the goods or services promised in the sale. If the cancellation is due to illness or injury, a certificate from a doctor of the consumer’s choice must accompany the notice of cancellation to the health spa.

(3) Cancellation occurs when the buyer mails written notice of cancellation to the seller at the seller’s address as specified in the contract, by registered or certified mail.

(4) The cancellation balance shall be calculated as follows:

(A) Divide the number of months (counting a fraction as one month) which have elapsed from the date the contract (or renewal option then in effect) became effective to the date of cancellation, by the total number of months for which such services were contracted.

(B) Multiply the contract price (or the price for the renewal period then in effect) by the quotient obtained in subparagraph (A) of this paragraph.

(C) Add to the amount obtained in subparagraph (B) of this paragraph a registration fee of 5% of the original price of the contract (not counting any finance charge), but in no case more than $25.00.

(D) If the payment by the consumer of the contract price is financed, subtract from the amount obtained in subparagraph (C) of this paragraph the amount of interest, calculated by the method of 78ths, not yet accrued through the month of the contract during which cancellation occurs.

(E) Subtract the difference obtained in subparagraph (D) of this paragraph, or if not applicable, the amount obtained in subparagraph (C) of this paragraph, from the amount already paid by the buyer under the contract and finance agreement.

If this balance is a positive figure, it is the amount of the seller’s refund to the buyer, and shall be due and payable within 15 days after the cancellation. If this balance is a negative figure, it is the amount of the buyer’s obligation to the seller, and within 15 days after the cancellation, the seller shall notify the buyer of his obligation. Notice of such obligation, if given by mail, is given when it is deposited in a mail box postage prepaid and properly addressed to the buyer’s address as stated in the notice of cancellation, or, if the buyer’s address is not stated there, as stated in the contract.

(5) The buyer’s right to cancel, as explained in this subsection, applies separately to all health spa sale contracts between the seller and the buyer.

(6) When there are two or more buyers (signatories, not necessarily beneficiaries, of the contract) of a health spa sale, the right to cancel, as explained in this subsection, is available only when all the buyers join in the notice of cancellation.

(7) After receiving notice of cancellation from the buyer, the seller shall mark his copy of the cancelled health spa sale contract “cancelled”.

(d)(1) The seller shall maintain copies of all cancelled health spa sale contracts for a period of 2 years from their dates of cancellation, and such records shall be open to inspection by proper representatives of the District of Columbia Government.

(2) If a contract containing a health spa sale does not meet all the requirements of subsection (b) of this section, such health spa sale shall be void, and the buyer shall at any time be entitled to a complete refund of all payments made under that contract.

(3) Any person, company or organization which purchases a buyer’s obligations under a health spa sale, makes such purchase subject to the buyer’s right to cancel as explained in subsection (c) of this section, as if such person, company, or organization were the seller.

(4) The principal consumer protection agency or the Corporation Counsel of the District of Columbia Government may seek in the proper court or administrative agency an order requiring a health spa to include in all health spa sale contracts the notice required in subsection (b)(4) of this section.

(e)(1) Each health spa which contracts health spa sales for goods or services to be provided or made available at a health spa which is planned, under construction, or in operation shall be required by the Department of Licensing and Consumer Protection (“Department”) to maintain a bond, issued by a surety company licensed to do business in the District of Columbia, in an amount not less than $50,000, or shall file with the Department an irrevocable letter of credit or cash in that amount. A buyer of a health spa sale who suffers or sustains any loss or damage by reason of breach of contract or bankruptcy by the seller or by reason of a violation by the seller of the provisions of this act [this section] may bring an action based on the bond and recover against the surety, the liability of the surety under any bond may not exceed the aggregate amount of the bond, regardless of the number or amount of claims filed. If the claims filed should exceed the amount of the bond, the surety shall pay the amount of the bond to the Department for distribution to claimants entitled to restitution and shall be relieved of all liability under the bond.

(2) A health spa which states in writing, at the time it registers with the Department pursuant to subsection (f) of this section, that it will make health spa sales to no more than 100 persons, shall for as long as it abides by the agreement be required to purchase a surety bond in the amount of $25,000 or to file with the Department an irrevocable letter of credit or cash in that amount.

(3) Each health spa, prior to making or contracting for any health spa sale, shall complete the registration required by subsection (f) of this section and shall file with the Department evidence that the bond or letter of credit is in force or shall file cash in lieu of the bond or letter of credit. Each health spa obtaining a bond or letter of credit shall file annually with the Department evidence that the bond or letter of credit remains in force, and shall maintain accurate records of the bond and premium payments on it, or of the letter of credit. These records shall be open to inspection by the Department at any time during normal business hours.

(f)(1) Each person or health spa which makes health spa sales in the District of Columbia shall register with the Department on forms provided by the Department. The person or health spa shall furnish the full name and address of each business location where health spa sales are contracted, a financial statement, and any other information the department deems appropriate.

(2) Each seller of health spa sales in the District of Columbia shall designate a resident of the District of Columbia to serve as resident agent for receipt of service of process.

(g) Any person or health spa which makes or contracts to make any health spa sale in violation of subsection (e)(3) of this section shall be subject to a fine of not less than $1,000 and not more than the amount set forth in [§ 22-3571.01].

(h) The Department may bring an action to enjoin the sale of health spa memberships by any health spa which fails to comply with subsection (e)(3) of this section.

§ 28–3818. Layaway plans.

(a) Definitions. — As used in this section the term:

(1) “consumer goods” means chattels owned, used, or bought by an individual for personal, family, or household purposes. The term consumer goods does not include goods acquired for commercial or business use or resale;

(2) “layaway plan” means a plan or agreement whereby a seller of consumer goods offers for sale or sells such goods to a buyer on terms which contemplate completion of three (3) or more agreed payments all of which must be made prior to the release or delivery of such goods;

(3) “service charge” means a one time charge, not to exceed one dollar ($1.00) on any layaway plan, to cover the administrative costs associated with such layaway plan; provided, that the one dollar ($1.00) service charge shall cover all layaway plan transactions between the retailer and a single consumer occurring in the same business day.

(b) Disclosures. — The seller shall, prior to the time of executing a layaway plan agreement, provide the buyer with a copy of a written, clear, and conspicuous disclosure. Failure of the seller to comply with this provision shall be deemed an executed trade practice in violation of the law of the District of Columbia for which the penalties in section 6(i)(3) of the District of Columbia Consumer Protection Procedures Act, effective July 22, 1976 (D.C. Law 1-76) [§ 28-3905(i)(3)] shall apply. The disclosure required by this subsection shall include:

(1) a statement as to the schedule or period of payments to be made by the buyer towards the purchase of consumer goods under a layaway plan;

(2) a statement that the consumer goods identified in the layaway plan will be retained in stock or set aside from stock but retained by the seller and made available for release or delivery to the buyer upon final payment or within fourteen (14) days after final payment;

(3) a statement as to the refund and exchange policies and charges restrictive of the seller pursuant to subsections (c), (d), (f), (g), and (h) of this section to the extent applicable;

(4) a statement as to the seller’s right to deduct late charges as set forth in subsection (g) of this section; and

(5) a statement that the buyer shall receive from the seller a written statement, upon request, and shall obtain a receipt for any and all payments made towards the purchase of consumer goods under a layaway plan as set forth in subsections (i)(1) and (i)(2) of this section.

(c) Buyer’s right to cancel. — The buyer, at his option, has the right to cancel an executed layaway plan within two (2) weeks after entering into the layaway plan and to obtain a full refund of any amount of money paid toward the purchase of consumer goods under the layaway plan. Such refund is payable upon cancellation or within two (2) weeks after cancellation.

(d) Cancellation fee. — If a buyer notifies a seller of his intention to cancel a purchase of consumer goods under a layaway plan after the expiration of the two (2) week cancellation period set forth in subsection (c) of this section, the seller shall promptly refund the full amount of money paid by the buyer towards the purchase of the consumer goods under the layaway plan. The seller may, however, retain an amount not to exceed eight percent (8%) of the purchase price of the consumer goods purchased under the layaway plan or sixteen dollars ($16.00), whichever is less.

(e) Seller’s default. — If, for any reason, the seller is unable to provide the consumer goods identified in the layaway plan or their exact duplicate to the buyer upon final payment or within fourteen (14) days thereafter, the seller shall refund the entire amount paid by the buyer towards the purchase of such goods under the layaway plan plus eight percent (8%) of the purchase price of the consumer goods purchased under the layaway plan or sixteen dollars ($16.00), whichever is less.

(f) Charges restricted. — The seller shall not require a buyer who has executed a layaway plan to pay a charge or fee of any kind on such goods except for those fees pursuant to subsections (d), (g), and (j) of this section to the extent applicable.

(g) Late fee. — If, for any reason, the buyer is unable to make payment in accordance with the terms of a layaway plan, the seller shall send prompt notice informing the buyer of the delinquency in payment. If the seller does not receive payment on the consumer goods identified in the layaway plan within fourteen (14) days after such notice is sent to the buyer, the seller may deduct an amount not to exceed one dollar ($1.00) from the full amount of money paid by the buyer towards the purchase of such goods under the layaway plan and refund the remaining amount to the buyer.

(h) Acceleration of payment prohibited. — The seller shall not accelerate any payments under a layaway plan. The seller shall be entitled to the amount of payments due to date under the layaway plan including those charges pursuant to subsections (d) and (g) of this section to the extent applicable.

(i) Receipt and statement of payments. —

(1) The seller shall promptly provide the buyer with a receipt for any and all payments made towards the purchase of consumer goods under a layaway plan. If payment is made by mail or by any means other than in person, a receipt shall be provided no later than seven (7) days after a payment is made. Such receipt shall include:

(A) a description of the consumer goods identified in the layaway plan; and

(B) the amount and date of such payment.

(2) The seller, upon request of the buyer, shall provide the buyer, within a reasonable time thereafter, a written statement of any and all payments made towards the purchase of consumer goods under the layaway plan. Such statement shall include:

(A) a description of the consumer goods identified in the layaway plan;

(B) the amount and date of any and all payments made to date;

(C) the total of all payments made to date; and

(D) the balance of all payments remaining.

(j) Service charge. — The seller is allowed to charge the buyer a service charge, which is not to exceed one dollar ($1.00), for goods purchased under a layaway plan, to cover the administrative costs associated with such layaway plan; provided, that the one dollar ($1.00) service charge shall cover all layaway plan transactions between the retailer and a single consumer occurring in the same business day.

§ 28–3819. Rental housing locators.

(a) Definitions. — As used in this section the term or terms:

(1) “Fee” means any fee, commission, charge, deposit, down payment or other valuable consideration, including any fee or charge for a credit check or consultation.

(2) “Rental housing locator” or “locator” means any person who for a fee identifies or purports to identify or who provides or purports to provide any other information about any rental unit available for rent, other than a rental unit owned or managed by such person.

(3) “Rental housing locator contract” means a contract between a rental housing locator and another person that obligates the locator for a fee to identify any number of rental units as available for rent or to provide any other information about them.

(4) “Rental unit” means any room, suite, apartment, or single family house rented or offered for rent as a residence, including any appurtenant services, facilities, improvements or land.

(b) Repealed.

(c) Accuracy of information. —

(1) Every rental housing locator shall revise and correct all information to be provided pursuant to a rental housing locator contract or otherwise made available to any customer, potential customer, or the general public, every 24 hours for rental units it advertises and every 48 hours for rental units it does not advertise, or else remove such units from its lists and discontinue the advertising of such units.

(2) A rental housing locator shall identify as available for rent or provide other information about a rental unit only if the locator has been given permission to do so by the owner/manager of the unit, or the rental unit has been advertised, posted, or otherwise publicly offered or held out as available for rent, by the owner/manager of the rental unit.

(3) Rental housing locator agencies shall be required to make available, upon request, records of all unadvertised and advertised listings provided to customers and potential customers to the Office of Consumer Protection and the Metropolitan Police Department.

(d) Contracts. —

(1) Contracts between the rental housing locator agency and the customer shall be written, and a copy of the contract shall be supplied to the customer.

(2) The contract shall clearly state the duration of the locator service contract.

(3) Every rental housing locator shall refund, upon request, any fee to any customer within thirty (30) days of said request if any of the rental housing information provided to that customer by the locator fails to comply with the requirements of accuracy as defined by subsection (c) of this section or if the locator fails, upon demand, to provide the correct street address or telephone number of any rental housing unit it advertises or otherwise describes to a customer; or if the locator fails to provide a customer with rental housing listings as called for in the contract.

(4) The contract shall include in a prominent place and in bold face type the following clauses:

(A) The first clause shall read as follows:

SAVE THIS DOCUMENT AND ANY RENTAL HOUSING LISTINGS PROVIDED TO YOU. WE ARE AN INFORMATION SERVICE ONLY. WE MAKE NO ATTEMPT TO SECURE YOU HOUSING. THE SERVICE OFFERS ONLY COMPILED INFORMATION CONCERNING AVAILABLE RENTAL HOUSING UNITS. NO GUARANTEE IS MADE THAT YOU WILL FIND RENTAL PROPERTY BY USING THIS SERVICE. YOU MAY BE ENTITLED TO A REFUND IF ANY OF THE RENTAL HOUSING INFORMATION PROVIDED TO YOU IS NOT CURRENT, ACCURATE OR OTHERWISE NOT IN COMPLIANCE WITH THE LAW; and

(B) The second clause shall state that all inquiries should be made to the District of Columbia Office of Consumer Protection followed by the current address, telephone number, and hours of that office.

Subchapter II. Consumer Security Breach Notification.

§ 28–3851. Definitions.

For purposes of this subchapter, the term:

(1)(A) "Breach of the security of the system" means unauthorized acquisition of computerized or other electronic data or any equipment or device storing such data that compromises the security, confidentiality, or integrity of personal information maintained by the person or entity who conducts business in the District of Columbia.

(B) The term "breach of the security of the system" does not include:

(i) A good-faith acquisition of personal information by an employee or agency of the person or entity for the purposes of the person or entity if the personal information is not used improperly or subject to further unauthorized disclosure;

(ii) Acquisition of data that has been rendered secure, including through encryption or redaction of such data, so as to be unusable by an unauthorized third party unless any information obtained has the potential to compromise the effectiveness of the security protection preventing unauthorized access; or

(iii) Acquisition of personal information of an individual that the person or entity reasonably determines, after a reasonable investigation and consultation with the Office of the Attorney General for the District of Columbia and federal law enforcement agencies, will likely not result in harm to the individual.

(1A) "Genetic information" has the meaning ascribed to it under the federal Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), approved August 21, 1996 (Pub. Law 104-191; 110 Stat. 1936), as specified in 45 C.F.R. § 106.103.

(1B) "Medical Information" means any information about a consumer's dental, medical, or mental health treatment or diagnosis by a health-care professional.

(2) “Notify” or “notification” means providing information through any of the following methods:

(A) Written notice;

(B) Electronic notice, if the customer has consented to receipt of electronic notice consistent with the provisions regarding electronic records and signatures set forth in the Electronic Signatures in Global and National Commerce Act, approved June 30, 2000 (114 Stat. 641; 15 U.S.C. § 7001); or

(C)(i) Substitute notice, if the person or entity demonstrates that the cost of providing notice to persons subject to this subchapter would exceed $50,000, that the number of persons to receive notice under this subchapter exceeds 100,000, or that the person or entity does not have sufficient contact information.

(ii) Substitute notice shall consist of all of the following:

(I) E-mail notice when the person or entity has an e-mail address for the subject persons;

(II) Conspicuous posting of the notice on the website page of the person or entity if the person or entity maintains one; and

(III) Notice to major local and, if applicable, national media.

(2A) "Person or entity" means an individual, firm, corporation, partnership, company, cooperative, association, trust, or any other organization, legal entity, or group of individuals. The term "person or entity" shall not include the District of Columbia government or any of its agencies or instrumentalities.

(3)(A) "Personal information" means:

(i) An individual's first name, first initial and last name, or any other personal identifier, which, in combination with any of the following data elements, can be used to identify a person or the person's information:

(I) Social security number, Individual Taxpayer Identification Number, passport number, driver's license number, District of Columbia identification card number, military identification number, or other unique identification number issued on a government document commonly used to verify the identity of a specific individual;

(II) Account number, credit card number or debit card number, or any other number or code or combination of numbers or codes, such as an identification number, security code, access code, or password, that allows access to or use of an individual's financial or credit account;

(III) Medical information;

(IV) Genetic information and deoxyribonucleic acid profile;

(V) Health insurance information, including a policy number, subscriber information number, or any unique identifier used by a health insurer to identify the person that permits access to an individual's health and billing information;

(VI) Biometric data of an individual generated by automatic measurements of an individual's biological characteristics, such as a fingerprint, voice print, genetic print, retina or iris image, or other unique biological characteristic, that is used to uniquely authenticate the individual's identity when the individual accesses a system or account; or

(VII) Any combination of data elements included in sub-sub-subparagraphs (I) through (VI) of this sub-subparagraph that would enable a person to commit identity theft without reference to a person's first name or first initial and last name or other independent personal identifier.

(ii) A user name or e-mail address in combination with a password, security question and answer, or other means of authentication, or any combination of data elements included in sub-sub-subparagraphs (I) through (VI) of sub-subparagraph (i) that permits access to an individual's e-mail account.

[(B) For purposes of this paragraph, the term “personal information” shall not include publicly available information that is lawfully made available to the general public from federal, state, or local government records].

§ 28–3852. Notification of security breach.

(a) Any person or entity who conducts business in the District of Columbia, and who, in the course of such business, owns or licenses computerized or other electronic data that includes personal information, and who discovers a breach of the security of the system, shall promptly notify any District of Columbia resident whose personal information was included in the breach. The notification shall be made in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement, as provided in subsection (d) of this section, and with any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.

(a-1) The notification required under subsection (a) of this section shall include:

(1) To the extent possible, a description of the categories of information that were, or are reasonably believed to have been, acquired by an unauthorized person, including the elements of personal information that were, or are reasonably believed to have been, acquired;

(2) Contact information for the person or entity making the notification, including the business address, telephone number, and toll-free telephone number if one is maintained;

(3) The toll-free telephone numbers and addresses for the major consumer reporting agencies, including a statement notifying the resident of the right to obtain a security freeze free of charge pursuant to 15 U.S.C. § 1681c-1 and information how a resident may request a security freeze; and

(4) The toll-free telephone numbers, addresses, and website addresses for the following entities, including a statement that an individual can obtain information from these sources about steps to take to avoid identity theft:

(A) The Federal Trade Commission; and

(B) The Office of the Attorney General for the District of Columbia.

(a-2) Notwithstanding subsection (a-1) of this section, in the case of a breach of the security of the system that only involves personal information as defined in § 28-3851(3)(A)(ii), the person or entity may comply with this section by providing the notification in electronic format or other form that directs the person to change the person's password and security question or answer, as applicable, or to take other steps appropriate to protect the e-mail account with the person or entity and all other online accounts for which the person whose personal information has been breached uses the same username or email address and password or security question or answer.

(b) Any person or entity who maintains, handles, or otherwise possesses computerized or other electronic data that includes personal information that the person or entity does not own shall notify the owner or licensee of the information of any breach of the security of the system in the most expedient time possible following discovery.

(b-1) In addition to giving the notification required under subsection (a) of this section, and subject to subsection (d) of this section, the person or entity required to give notice shall promptly provide written notice of the breach of the security of the system to the Office of the Attorney General for the District of Columbia if the breach affects 50 or more District residents. This notice shall be made in the most expedient manner possible, without unreasonable delay, and in no event later than when notice is provided under subsection (a) of this section. The written notice shall include:

(1) The name and contact information of the person or entity reporting the breach;

(2) The name and contact information of the person or entity that experienced the breach;

(3) The nature of the breach of the security of the system, including the name of the person or entity that experienced the breach;

(4) The types of personal information compromised by the breach;

(5) The number of District residents affected by the breach;

(6) The cause of the breach, including the relationship between the person or entity that experienced the breach and the person responsible for the breach, if known;

(7) The remedial action taken by the person or entity to include steps taken to assist District residents affected by the breach;

(8) The date and time frame of the breach, if known;

(9) The address and location of corporate headquarters, if outside of the District;

(10) Any knowledge of foreign country involvement; and

(11) A sample of the notice to be provided to District residents.

(b-2) The notice required under subsection (b-1) of this section shall not be delayed on the grounds that the total number of District residents affected by the breach has not yet been ascertained.

(c) If any person or entity is required by subsection (a) or (b) of this section to notify more than 1,000 persons of a breach of security pursuant to this subsection, the person shall also notify, without unreasonable delay, all consumer reporting agencies that compile and maintain files on consumers on a nationwide basis, as defined by section 603(p) of the Fair Credit Reporting Act, approved October 26, 1970 (84 Stat. 1128; 15 U.S.C. § 1681a(p)), of the timing, distribution and content of the notices. Nothing in this subsection shall be construed to require the person to provide to the consumer reporting agency the names or other personal identifying information of breach notice recipients. This subsection shall not apply to a person or entity who is required to notify consumer reporting agencies of a breach pursuant to Title V of the Gramm-Leach-Bliley Act, approved November 12, 1999 (113 Stat. 1436; 15 U.S.C. § 6801 et seq[.]).

(d) The notification required by this section may be delayed if a law enforcement agency determines that the notification will impede a criminal investigation but shall be made as soon as possible after the law enforcement agency determines that the notification will not compromise the investigation.

(e) [Repealed].

(f) A waiver of any provision of this subchapter shall be void and unenforceable.

(g) A person or entity that maintains procedures for a breach notification system under Title V of the Gramm-Leach-Bliley Act, approved November 12, 1999 (113 Stat. 1436; 15 U.S.C. § 6801 et seq.), or the breach notification rules issued by the United States Department of Health and Human Services, Parts 160 and 164 of Title 45 of the Code of Federal Regulations, established pursuant to the Health Insurance Portability Accountability Act of 1996, approved August 21, 1996 (Pub. L. No. 104-191; 110 Stat. 1936), or the Health Information Technology for Economic and Clinical Health Act, approved February 17, 2009 (Pub. L. No. 111-5; 123 Stat. 226), and provides notice in accordance with such Acts, and any rules, regulations, guidance and guidelines thereto, to each affected resident in the event of a breach, shall be deemed to be in compliance with this section with respect to the notification of residents whose personal information is included in the breach. The person or entity shall, in all cases, provide written notice of the breach of the security of the system to the Office of the Attorney General for the District of Columbia as required under subsection (b-1) of this section.

§ [28–3852.01]. Security requirements.

(a) To protect personal information from unauthorized access, use, modification, disclosure, or a reasonably anticipated hazard or threat, a person or entity that owns, licenses, maintains, handles, or otherwise possesses personal information of an individual residing in the District shall implement and maintain reasonable security safeguards, including procedures and practices that are appropriate to the nature of the personal information and the nature and size of the entity or operation.

(b) A person or entity that uses a nonaffiliated third party as a service provider to perform services for a person or entity and discloses personal information about an individual residing in the District under a written agreement with the third party shall require by the agreement that the third party implement and maintain reasonable security procedures and practices that:

(1) Are appropriate to the nature of the personal information disclosed to the nonaffiliated third party; and

(2) Are reasonably designed to protect the personal information from unauthorized access, use, modification, and disclosure.

(c) When a person or entity is destroying records, including computerized or electronic records and devices containing computerized or electronic records, that contain personal information of a consumer, employee, or former employee of the person or entity, the person or entity shall take reasonable steps to protect against unauthorized access to or use of the personal information, taking into account:

(1) The sensitivity of the records;

(2) The nature and size of the business and its operations;

(3) The costs and benefits of different destruction and sanitation methods; and

(4) Available technology.

(d) A person or entity who is subject to and in compliance with requirements for security procedures and practices contained in Title V of the Gramm-Leach-Bliley Act, approved November 12, 1999 (113 Stat. 1436; 15 U.S.C. § 6801 et seq.), or the Health Insurance Portability Accountability Act of 1996, approved August 21, 1996 (Pub. L. No. 104-191; 110 Stat. 1936), or the Health Information Technology for Economic and Clinical Health Act, approved February 17, 2009 (Pub. L. No.111-5; 123 Stat. 226), and any rules, regulations, guidance and guidelines thereto, shall be deemed to be in compliance with this section.".

§ [28–3852.02]. Remedies.

When a person or entity experiences a breach of the security of the system that requires notification under § 28-3852(a) or (b), and such breach includes or is reasonably believed to include a social security number or taxpayer identification number, the person or entity shall offer to each District resident whose social security number or tax identification number was released identity theft protection services at no cost to such District resident for a period of not less than 18 months. The person or entity that experienced the breach of the security of its system shall provide all information necessary for District residents to enroll in the services required under this section.

§ [28–3852.03]. Rulemaking.

The Attorney General for the District of Columbia, pursuant to [Chapter 5 of Title 2], may issue rules to implement the notification provisions pursuant to § 28-3852(b-1).

§ 28–3853. Enforcement.

(a) [Repealed].

(b) A violation of this subchapter, or any rule issued pursuant to the authority of this subchapter, is an unfair or deceptive trade practice pursuant to § 28-3904(kk).

(c) The rights and remedies available under this section are cumulative to each other and to any other rights and remedies available under law.

Subchapter III. Consumer Security Freeze.

§ 28–3861. Definitions.

For the purposes of this subchapter, the term:

(1) “Consumer” means an individual who resides in the District of Columbia.

(2) "Credit report" means any written, oral, or other communication of any information by a credit reporting agency bearing on a consumer's creditworthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living, which is used or expected to be used or collected in whole or in part for the purpose of serving as a factor in establishing the consumer's eligibility for:

(A) Credit or insurance to be used primarily for personal, family, or household purposes;

(B) Employment purposes; or

(C) Any other purpose authorized under the Fair Credit Reporting Act, approved October 26, 1970 (84 Stat. 1127; 15 U.S.C. § 1681 et seq.).

(3) “Credit reporting agency” means any person who, for consideration, dues, or on a cooperative nonprofit basis, regularly engages in whole or in part in the practice of maintaining consumers’ credit information for the purpose of furnishing the information to third parties.

(4) “Proper identification” means information generally considered sufficient to identify a person. Additional information concerning the consumer’s employment and personal or family history shall not be included within the term “proper identification” unless the consumer is unable to reasonably identify himself or herself with other information generally considered sufficient.

(5) “Security freeze” or “freeze” means a restriction, at the request of the consumer and subject to certain exceptions, that prohibits the credit reporting agency from releasing all or any part of a credit report or any information derived from it without the express authorization of the consumer.

§ 28–3862. Security freeze.

(a) A credit reporting agency shall place a security freeze on a consumer’s credit report if a consumer, providing proper identification, makes a request to the credit reporting agency by certified mail. In addition, on or before January 31, 2009, a credit reporting agency shall make available an Internet-based method of requesting a security freeze and shall accept requests by one of the following methods: telephone or regular mail.

(b) A credit reporting agency shall place the security freeze on the consumer’s credit report no later than 3 business days after receiving the request.

(c) The credit reporting agency shall send a written confirmation of the security freeze to the consumer within 5 business days of placing the freeze and at the same time shall provide the consumer with a unique personal identification number or password to be used by the consumer when providing authorization for the release of his or her credit report to a specific party or for a specific period of time.

(d) A consumer may thereafter request that a credit reporting agency allow his or her credit report to be accessed by a specific party or for a specific period of time by providing the following:

(1) Proper identification;

(2) The unique personal identification number or password provided by the credit reporting agency pursuant to subsection (c) of this section; and

(3) The identity of the third party to receive the credit report or the time period for which the report shall be available to users of the credit report, if applicable.

(e)(1) A credit reporting agency that receives a request pursuant to subsection (d) of this section shall comply with the request no later than 3 business days after receiving the request.

(2) On or before September 1, 2008, the consumer reporting agency shall develop the capability, and offer the option to the consumer, of honoring a request under subsection (d) of this section, through Internet-based and telephonic methods, within 15 minutes after the consumer’s request is received by the consumer reporting agency. A consumer reporting agency shall not be required to lift a security freeze within 15 minutes if:

(A) The consumer fails to meet the requirements of subsection (d) of this section; or

(B) The consumer reporting agency is unable to lift the security freeze because of:

(i) An act of God, including fire, earthquakes, hurricanes or storms;

(ii) Unauthorized or illegal acts by a third party, including terrorism, sabotage, riot, vandalism, labor strikes, or disputes disrupting operations;

(iii) Operational interruption, including electrical failure, unanticipated delay in equipment or replacement part delivery, or computer hardware or software failures inhibiting response time;

(iv) Governmental action, including emergency orders or regulations, judicial or law enforcement action, or similar directives;

(v) Regularly scheduled maintenance during other than normal business hours of, or updates to, the consumer reporting agency’s systems; or

(vi) Commercially reasonable maintenance of, or repair to, the consumer reporting agency’s systems that is unexpected or unscheduled.

(f) A credit reporting agency may develop procedures involving the use of telephone, fax, or, upon the consent of the consumer in the manner required by the Electronic Signatures in Global and National Commerce Act, approved June 30, 2000 (114 Stat. 464; 15 U.S.C. § 7001 et seq.), for legally required notices, by the Internet, e-mail, or other electronic media, to receive and process a request from a consumer to temporarily lift a freeze on a credit report pursuant to subsection (d) of this section.

(g) A credit reporting agency may permanently remove a freeze placed on a credit report, without a request from the consumer, if the credit reporting agency placed the freeze as a result of a material misrepresentation of fact by the consumer.

(h) A credit reporting agency shall send written notification to the consumer 5 business days prior to permanently removing a freeze on a credit report pursuant to subsection (g) of this section.

(i) If a third party requests access to a credit report on which a security freeze is in effect in connection with an application for credit and the consumer does not allow his or her consumer report to be accessed by that specific party or for that period of time, the third party may treat the application as incomplete.

(j) If a security freeze is in place, a credit report shall not be released to a third party without prior express authorization from the consumer. A credit reporting agency may advise a third party that a security freeze is in effect with respect to the credit report.

(k) A security freeze shall remain in place until the consumer requests its permanent removal in writing. On or before January 31, 2009, a credit reporting agency shall remove a security freeze within 3 business days of receiving a request for permanent removal from the consumer.

(l) A credit reporting agency shall not suggest or otherwise state or imply to a third party that the consumer’s security freeze reflects a negative credit score, history, report, or rating.

(m) Nothing in this section shall prevent the lawful use of a credit report by any of the following:

(1)(A) A person or entity (including a subsidiary, affiliate, or agent of that person or entity; an assignee of a financial obligation owing by the consumer to that person or entity; or a prospective assignee of a financial obligation owing by the consumer to that person or entity), with which the consumer has or had prior to assignment an account or contract, including a demand deposit account, or to whom the consumer issued a negotiable instrument, for the purposes of reviewing the account in conjunction with the proposed purchase of a financial obligation or collecting the financial obligation owing for the account, contract, or negotiable instrument.

(B) For purposes of this paragraph, the term “reviewing the account” includes activities related to account maintenance, monitoring, credit line increases, and account upgrades and enhancements;

(2) A subsidiary, affiliate, agent, assignee, or prospective assignee of a person to whom access has been granted under subsection (d) of this section for purposes of facilitating the extension of credit or other permissible use;

(3) A person or entity acting pursuant to a court order, warrant, subpoena, or other compulsory process;

(4) A state or local agency that administers a program for establishing and enforcing child support obligations;

(5) A third party for the purposes of prescreening under section 604(e) of the Fair Credit Reporting Act, approved October 26, 1970 (84 Stat. 1129; 15 U.S.C. § 1681b(e));

(6) A person or entity for the purpose of providing a consumer with a copy of his or her credit report upon the consumer’s request;

(7) An insurance company, licensed in the District, for the purpose of setting or adjusting a rate or premium, adjusting a claim, or underwriting for property and casualty insurance purposes;

(8) A person or entity administering a credit file monitoring subscription service to which the consumer has subscribed; or

(9) A state, local, or federal government agency and its agents acting pursuant to a lawful investigation or to fulfill any of its other official duties.

(n) The following persons are not required to place a security freeze on a credit report:

(1) A person or entity that acts only as a reseller of credit information by assembling and merging information contained in the database of another person or entity, or multiple persons or entities, and does not maintain a permanent database of credit information from which new credit reports are produced; provided, that a person or entity acting as a reseller shall honor any security freeze placed on a credit report by a credit reporting agency;

(2) A check services or fraud prevention services company which issues reports on incidents of fraud or authorizations for the purpose of approving or processing negotiable instruments, electronic funds transfers, or similar methods of payments; and

(3) A deposit account information service company which issues reports regarding account closures due to fraud, substantial overdrafts, ATM abuse, or similar negative information regarding a consumer to inquiring banks or other financial institutions for use only in reviewing a consumer request for a deposit account at the inquiring bank or financial institution.

(o) A consumer reporting agency may charge a consumer for a security freeze service only as follows:

(1) For the initial application for the consumer’s first personal identification number or password, the consumer may be charged $10.

(2) If the consumer fails to retain the original personal identification number or password provided by the agency, the consumer may not be charged for a one-time reissue of the same or a new personal identification number or password, but may be charged an amount not to exceed $10 for subsequent instances of loss and reissuance of a new personal identification number or password.

(3) Notwithstanding the foregoing, a consumer who has been a victim of identity theft shall not be charged any fee, but may be charged an amount not to exceed $10 for second or subsequent instances of loss and reissuance of a new personal identification number or password, for placement of a security freeze on his or her report.

§ 28–3863. Notice of rights.

Each time a credit reporting agency provides a consumer with a copy of the consumer’s credit report under section 609 of the Fair Credit Reporting Act, approved October 26, 1970 (84 Stat. 1131; 15 U.S.C. § 1681g ), the credit reporting agency shall include the following notice with the credit report:

District of Columbia Consumers Have the Right to Obtain a Security Freeze

District of Columbia law gives you the right to place a “security freeze” on your credit report. A security freeze restricts when a credit reporting agency may release information in your credit report without your express authorization or approval.

A security freeze is designed to help prevent credit, loans, and services from being approved in your name without your consent. To obtain a security freeze, you should contact each credit reporting agency. When you place a security freeze on your credit report, the credit reporting agency will send you a personal identification number or password to use if you later choose to lift the freeze from your credit report, or to authorize the release of your credit report to a specific party or parties, or for a specific period of time after the freeze is in place. To provide that authorization, you must contact the credit reporting agency and provide all of the following:

1. The unique personal identification number or password provided by the credit reporting agency.

2. Verification of your identity.

3. Information regarding who may receive the credit report or the period of time for which the report shall be made available.

Upon receiving your proper request to lift temporarily a freeze from your credit report, the credit reporting agency shall comply within 3 business days. Beginning September 1, 2008, the credit reporting agency is required to provide methods, including web-based and telephonic methods, for you to request that the freeze be temporarily lifted within 15 minutes.

A security freeze does not apply when you have an existing account relationship and a copy of your report is requested by your existing creditor or its agents or affiliates for certain types of account review, collection, fraud control or similar activities.

If you are actively seeking credit, the procedures involved in lifting a security freeze may slow your own applications for credit. You should plan ahead and consider lifting a freeze — either completely if you are shopping around, or for a specific creditor before actually applying for new credit. Beginning September 1, 2008, you will be able to have a credit reporting agency temporarily lift a freeze on your credit report within 15 minutes of your request.

You have a right to take legal action against someone who violates your rights under the credit reporting laws. The action can be brought against a credit reporting agency or anyone who fraudulently caused the release of your credit information.”.

§ 28–3864. Enforcement.

(a) A credit reporting agency that discovers a security breach of credit information in violation of a security freeze shall provide written notice to the affected consumer of the security breach of credit information in accordance with Subchapter II [of this chapter].

(b) If a credit reporting agency willfully violates the security freeze by releasing credit information that has been placed under a security freeze, the affected consumer may bring a civil action against the credit reporting agency for the following:

(1) Injunctive relief to prevent or restrain further violation of the security freeze;

(2) Actual damages;

(3) Punitive damages; and

(4) Reasonable attorney’s fees and costs of the action.

(c) If a credit reporting agency negligently violates the security freeze by releasing credit information that has been placed under a security freeze, the affected consumer may bring a civil action against the credit reporting agency for the following:

(1) Injunctive relief to prevent or restrain further violation of the security freeze;

(2) Actual damages; and

(3) Reasonable attorney’s fees and costs of the action.

(d)(1) The Attorney General may petition the Superior Court of the District of Columbia for temporary or permanent injunctive relief against, and for an award of restitution for property lost or damages suffered by a consumer as a consequence of, a violation of this subchapter by a credit reporting agency, or fraudulent or deceptive conduct that causes the improper release or use of credit information that is subject to a security freeze. Notwithstanding any other provision of this section, only the Attorney General shall enforce the requirements under § 28-3862(e)(2).

(2) In an action under this section, the Attorney General may recover:

(A) A civil penalty not to exceed $1,000 for each violation; and

(B) Reasonable attorney’s fees and costs of the action.

Subchapter IV. Public Health Emergency Credit Alert.

§ 28–3871. Public health emergency credit alert.

(a)(1) If a consumer reports in good faith that the consumer has experienced financial hardship resulting directly or indirectly from a public health emergency declared pursuant to § 7-2304.01, a credit reporting agency maintaining a file on the consumer shall accept and include in that file a personal statement furnished by the consumer indicating that the consumer has been financially impacted by the public health emergency.

(2) A credit reporting agency shall provide that personal statement, along with any credit report provided by the agency, beginning on the date the credit reporting agency receives the personal statement, unless the consumer requests that the personal statement be removed.

(b) This section shall not apply to a federal credit union, as defined by 12 U.S.C. § 1752(1), a national bank, as defined by 12 U.S.C. § 25b(a)(1), or a federal savings association, as defined by 12 U.S.C. § 1462(3); except, that an exception granted by this subsection shall not apply to any entity to which the savings clause at 12 U.S.C. § 25b(b)(2) applies.

(c)(1) No user of a credit report shall consider adverse information in a report that was the result of an action or inaction of a consumer that occurred during, and was directly or indirectly the result of, a public health emergency declared pursuant to § 7-2304.01, if:

(A) The credit report includes a personal statement pursuant to subsection (a) of this section; or

(B) The consumer provides a written statement to the user of a credit report that indicates in good faith that the consumer has experienced financial hardship resulting directly or indirectly from the public health emergency declared pursuant to § 7-2304.01, before the user of the credit report makes a determination.

(2) If the consumer receives a denial or rejection by the user of a credit report due to adverse information that was the result of an action or inaction of a consumer that occurred during, and was directly or indirectly the result of, the public health emergency declared pursuant to § 7-2304.01, the user must inform the consumer of the consumer's right to provide a written statement pursuant to paragraph (1) of this subsection.

(d) When a District resident requests a copy of a credit report pursuant to 15 U.S.C. § 1681j, the entity providing the credit report must notify the resident of the right to request that a personal statement accompany the credit report as set forth in subsection (a) of this section.

(e) If a credit reporting agency willfully fails to comply with any requirement imposed under this section, the affected consumer may bring a civil action against the agency in the Superior Court for the District of Columbia to recover:

(1) Any actual damages sustained by the consumer as a result of the failure or damages of not less than $100 and not more than $1,000;

(2) Such amount of punitive damages as the court may allow; and

(3) In the case of any successful action brought under this subsection, the costs of the action together with reasonable attorney's fees as determined by the court.

(f)(1) The Attorney General may petition the Superior Court of the District of Columbia to obtain temporary or permanent injunctive relief prohibiting the use of a method, practice, or act that violates this section and requiring the violator to take affirmative action, including the restitution of money.

(2) In addition, in an action under this subsection, the Attorney General may recover:

(A) A civil penalty not to exceed $1,000 for each violation of this section; and

(B) Reasonable attorney's fees and costs of the action.

(g) The following terms shall have the same meaning as set forth in § 28-3861:

(1) Consumer;

(2) Credit report; and

(3) Credit reporting agency.

(h) This section shall not be construed in a manner inconsistent with the Fair Credit Reporting Act, approved October 26, 1970 (84 Stat. 1127; 15 U.S.C. § 1681 et seq.), or any other federal law or regulation.