California Codes, Civil Code - CIV, Division 3 — Obligations, Part 4 — Obligations Arising from Particular Transactions, Title 1.6 — Consumer Credit Reporting Agencies Act, Chapter 2 — Obligations of Consumer Credit Reporting Agencies, Section 1785.11.3

(a) If a security freeze is in place, a consumer credit reporting agency shall not change any of the following official information in a consumer credit report without sending a written confirmation of the change to the consumer within 30 days of the change being posted to the consumer’s file: name, date of birth, social security number, and address. Written confirmation is not required for technical modifications of a consumer’s official information, including name and street abbreviations, complete spellings, or transposition of numbers or letters. In the case of an address change, the written confirmation shall be sent to both the new address and to the former address.

(b) If a consumer has placed a security alert, a consumer credit reporting agency shall provide the consumer, upon request, with a free copy of his or her credit report at the time the 90-day security alert period expires.