California Codes, Civil Code - CIV, Division 3 — Obligations, Part 4 — Obligations Arising from Particular Transactions, Title 1.6 — Consumer Credit Reporting Agencies Act, Chapter 3 — Requirements on Users of Consumer Credit Reports, Section 1785.22

(a) A person may not procure a consumer credit report for the purpose of reselling the report or any information therein unless the person discloses to the consumer credit reporting agency which issues the report the identity of the ultimate end user and each permissible purpose for which the report is furnished to the end user of the consumer credit report or information therein.

(b) A person that procures a consumer credit report for the purpose of reselling the report or any information therein shall do all of the following:

(1) Establish and comply with reasonable procedures designed to ensure that the consumer credit report or information is resold by the person only for a purpose for which the report may be furnished under this title. These procedures shall include all of the following:

(A) Identification of each prospective user of the resold consumer credit report or information.

(B) Certification of each purpose for which the consumer credit report or information will be used.

(C) Certification that the consumer credit report or information will be used for no other purpose.

(2) Before reselling the consumer credit report or information, the person shall make reasonable efforts to verify the identities and certifications made under paragraph (1).