Which place’s debt rules apply—and who can help?

SettleADebt S_WI PASS-09

Federal identity-theft credit-report blocking, fraud alerts, ordinary security freezes, and protected-consumer freezes

Actual fresh source-access date: October 26, 2026, America/Los_Angeles; October 27, 2026 UTC. Historical baseline: October 22, 2026 Pacific. Mode/model: Regular Chat on GPT-5.6 Sol Pro. No separate power setting, quota state, reset, or measured model ranking is exposed to me, so none is claimed. Scope: Federal reporting protections relevant to a hypothetical Wisconsin consumer. This is not debt cancellation, criminal identity-theft adjudication, creditor or collector authorization, an actual identity-theft report, or Wisconsin/A066/parent acceptance.

P01-P03, P07, and P08 remain unreviewed and supply no accepted premise. The P04-P06 freeze boundary and corrections are preserved but are independently re-read here from a newer current OLRC compilation where available.

Throughout this report, C001 means S_WI-P09-C001, and S001 means S_WI-P09-S001.

Executive disposition

The federal system has four different tools that should not be collapsed into one “identity theft dispute”:

The identity-theft block applies to a consumer reporting agency generally, subject to reseller and check-service rules. Fraud alerts and the federal national-freeze provisions apply specifically to CRAs meeting the nationwide-file definition in §1681a(p). A nationwide specialty CRA under §1681a(x) is not silently treated as a nationwide credit CRA merely because it maintains medical, tenant, check-writing, employment, or insurance files. U.S. Code+2

None of these protections:

• adjudicates whether the underlying obligation legally exists;
• orders a creditor to forgive money;
• automatically stops every collection communication or lawsuit;
• guarantees deletion of unsupported allegations;
• guarantees a credit-score increase;
• supplies an automatic damages award; or
• substitutes for a general accuracy dispute where identity theft cannot honestly be alleged.

G1. Identity-theft credit-report blocking

1. Actor and route matrix

C001–C016. U.S. Code+2

2. The complete four-element block packet

Under 15 U.S.C. §1681c-2(a), the four-business-day clock begins only after the CRA receives all of the following:

1. Appropriate proof of the consumer’s identity.
2. A copy of an identity-theft report.
3. Identification of the specific report information alleged to result from identity theft.
4. The consumer’s statement that the identified information does not relate to any transaction by the consumer.

The required action is to block reporting of the identified information, not to declare the account nonexistent for all legal purposes. C003. U.S. Code+1

Packet-element matrix

Regulation V permits CRAs to require information sufficient to match the consumer to the correct file and proportionate to the risk of misidentification. Illustrative proof can include identifying data, government-issued identification, utility bills, or knowledge-based authentication. It does not prescribe one mandatory national form or one universal document combination. C006. Consumer Financial Protection Bureau+1

3. “Identity theft” and “identity-theft report”

Federal law defines identity theft as fraud committed—or under Regulation V, committed or attempted—using another person’s identifying information without authority. Identifying information includes names, identifying numbers, birth dates, government identifiers, biometric data, electronic identifiers, routing codes, and specified telecommunications or access-device information. C004. U.S. Code+1

A qualifying identity-theft report must:

• allege identity theft with as much specificity as the consumer can provide;
• be a copy of an official, valid report filed with an appropriate federal, state, or local law-enforcement or other qualifying government agency; and
• subject a knowingly false filer to criminal penalties.

Regulation V allows a CRA or furnisher to request reasonably necessary supplemental information, but limits the request and decision periods:

• initial additional-information request: no later than 15 days after the later of report receipt or service request;
• supplemental requests and final acceptance decision: within another 15 days after the initial request; and
• if supplemental information arrives on day 11 or later of that second period: 5 additional days to make the final acceptance decision.

A detailed signed police report ordinarily should suffice absent an identifiable concern. An automated, minimally detailed report used for a tradeline block may justify additional identity documentation or an affidavit. The regulation says that comparable extra documentation ordinarily would not be reasonable merely to obtain an extended fraud alert. C004–C005. Consumer Financial Protection Bureau

The FTC identifies IdentityTheft.gov as the federal government’s one-stop reporting and recovery resource, and the CFPB says that using it generates an Identity Theft Report and recovery plan. No report was created, filed, or requested in this pass. C042. Federal Trade Commission+1

4. Four-business-day block and furnisher notice

Once the complete packet is received, the CRA must block reporting of the identified information no later than four business days after receipt. It must promptly tell the furnisher:

• that the information may result from identity theft;
• that an identity-theft report was filed;
• that a block was requested; and
• the effective dates of the block.

C003, C007. U.S. Code+1

The FCRA provisions read here do not define “business day.” The calendar examples below therefore disclose a modeling convention rather than pretending the statute expressly adopts a Monday-through-Friday/federal-holiday rule.

5. Declining or rescinding a block

A CRA may decline or rescind a block only after reasonably determining one of three statutory grounds:

1. the information was blocked, or the block requested, in error;
2. the request or block rested on a material factual misrepresentation by the consumer; or
3. the consumer obtained goods, services, or money from the blocked transaction.

The CRA must notify the consumer promptly in the same manner as a reinsertion notice under §1681i(a)(5)(B). That referenced notice regime uses written notice within five business days after reinsertion—or another available means if the consumer authorized it—and supplies specified furnisher and dispute-right information. Section 1681c-2 itself uses the word promptly; this report does not silently rewrite it as an independent five-business-day decision deadline. C008–C009. U.S. Code+1

If a block is rescinded, the mere pre-block presence of the information in the consumer’s file is not evidence that the consumer knew or should have known that the consumer obtained the goods, services, or money. C008. U.S. Code

6. Resellers, check services, and law enforcement

Reseller without a relevant maintained or currently resold report

The ordinary block section does not apply when the reseller:

• is not then furnishing or reselling a report concerning the identified information; and
• tells the consumer that identity theft may be reported to the Bureau to obtain identity-theft information.

Reseller maintaining the identified report

Its sole §1681c-2 obligation is to block that maintained report from later use when the consumer satisfies the statutory identification requirements and the reseller is the source of the identified information. It must promptly notify the consumer of the decision and provide the name, address, and telephone number of each source CRA. C010. U.S. Code+1

Check-services company

A check-services company acting in that capacity is specially excepted, but beginning four business days after receiving:

• proof of identity;
• the identity-theft report; and
• identification of the information,

it may not report the identified identity-theft information to a nationwide CRA. The separate no-transaction statement in §1681c-2(a)(4) is not listed in this branch. C011. U.S. Code+1

Law enforcement

Nothing in §1681c-2 requires a CRA to prevent lawful federal, state, or local law-enforcement access to blocked information. C011. U.S. Code

7. Furnisher, transfer, and collector consequences

CRA notice to furnisher

A furnisher must maintain reasonable procedures to respond to a CRA’s §1681c-2 notification and prevent refurnishing the blocked information. C012. U.S. Code

Direct identity-theft report to a furnisher

If a consumer submits an identity-theft report to the address the furnisher specifies for such reports and states that information maintained by the furnisher resulted from identity theft, the furnisher may not furnish that information unless it later knows—or the consumer informs it—that the information is correct. This is a furnishing restriction, not an automatic ruling on the internal debt ledger or contract. C013. U.S. Code

Selling, transferring, or placing the debt for collection

After a person is notified under §1681c-2 that a debt resulted from identity theft, §1681m(f) generally prohibits selling it, transferring it for consideration, or placing it for collection. The prohibition applies to all persons collecting that debt after the statutory notification. Its limited exceptions are:

• repurchase required by an assignee because the debt resulted from identity theft;
• securitization or pledge of a debt portfolio as borrowing collateral; and
• transfer through a merger, acquisition, purchase-and-assumption transaction, or transfer of substantially all assets.

This is a different statutory branch from Regulation F’s paid/settled/discharged-debt transfer rule addressed in PASS-05/PASS-06. It is not a general debt-cancellation adjudication. C014. U.S. Code+1

Third-party debt collector

When a debt collector acting for a creditor or other report user is told that information relating to a debt may be fraudulent or identity-theft-related, the collector must:

• notify that third party; and
• on the consumer’s request, provide the information the consumer would otherwise receive when disputing the debt under law applicable to that collector.

The subsection does not say that the collector itself decides criminal guilt or automatically waives the balance. C015. U.S. Code

8. Block versus ordinary dispute

Regulation V recognizes identity theft as a subject of a direct furnisher dispute, but that does not erase the separate and more specific identity-theft blocking route. C016. Consumer Financial Protection Bureau

G2. Fraud alerts

9. Alert comparison

C017–C021. U.S. Code+4

10. Initial fraud alert

A nationwide CRA maintaining a file must place an initial alert upon direct request by the consumer or a representative who:

• asserts in good faith that the consumer has been or is about to become a fraud or identity-theft victim; and
• supplies appropriate identity proof.

The alert lasts at least one year unless properly removed earlier. The contacted CRA refers it to the other nationwide CRAs. The receiving CRAs must act as though the consumer contacted them directly for the alert and free-file procedures specified by the statute. C017–C018. U.S. Code+1

The initial-alert provision gives the consumer a right to request a free file disclosure, supplied within three business days after that request. Through the mandatory referral process, the right attaches at the other nationwide CRAs as well. C018. U.S. Code+1

11. Extended fraud alert

An extended alert requires:

• direct request by the consumer or representative;
• an identity-theft report;
• proper identity proof; and
• an existing file at the nationwide CRA.

It lasts seven years and removes the consumer from covered uninitiated credit/insurance solicitation lists for five years, unless rescinded earlier. The consumer may request two free file disclosures from each nationwide CRA within the first twelve months, each supplied within three business days after request. C019–C020. U.S. Code+1

For the extended alert, a prospective credit user cannot approve the covered new credit, card, or limit-increase request unless it contacts the consumer in person or through the alert’s designated contact method to confirm the request is not identity theft. C024. U.S. Code

12. Active-duty alert

An “active-duty military consumer” is a consumer who:

• is on active duty or qualifying reserve duty; and
• is assigned away from the usual duty station.

A consumer or representative may request the alert with proper identity proof. The statutory period is at least twelve months, and current Regulation V fixes the duration at twelve months. The prescreen exclusion lasts two years. The contacted nationwide CRA refers the alert to the others. C021–C022. U.S. Code+3

Section 1681c-1(c) does not provide the separate one- or two-file alert benefit supplied for initial and extended alerts. Other free-report provisions can still apply, but should not be attributed to the active-duty subsection itself. C021.

Free active-duty electronic credit monitoring under §1681c-1(k) is a separate program, not part of the alert’s mechanics. Its separate proof, service, rulemaking, and enforcement questions are deferred. C043. U.S. Code

13. User verification duties

Initial and active-duty alerts

A prospective report user seeking to establish covered new credit, issue an additional card requested by the consumer, or increase a requested credit limit must use reasonable policies and procedures to form a reasonable belief that it knows the requester’s identity.

If the alert supplies a verification telephone number, the user must either:

• contact the consumer at that number; or
• take reasonable identity-verification steps and confirm that the request is not identity theft.

C023. U.S. Code+1

Extended alert

The extended-alert standard is more prescriptive. The user must contact the consumer in person or using the alert’s designated contact method before approving the covered request. C024. U.S. Code

Neither alert type absolutely prevents report access. It changes the prospective credit user’s duties.

14. Referral, resellers, and other CRAs

• Initial, extended, and active-duty alerts expressly use a one-contact referral system among nationwide CRAs.
• A referred nationwide CRA acts as if it received the relevant request directly.
• A reseller must reconvey any alert appearing in the underlying report.
• A non-nationwide CRA contacted about suspected identity theft must provide information about contacting the Bureau and nationwide CRAs for alert assistance.
• Nationwide CRAs must maintain procedures to refer identity-theft complaints, alert requests, and block requests to one another—but the block statute does not contain the same explicit “act as if directly requested” language that governs fraud-alert referrals.

C022. U.S. Code+1

G3. Ordinary and protected-consumer security freezes

15. Ordinary national freeze: coverage and operation

The ordinary federal freeze in §1681c-1(i) applies to a CRA satisfying the nationwide credit-file definition in §1681a(p). It is free and available on direct request with proper identification; identity theft need not already have occurred. C026. U.S. Code+1

Placement, confirmation, removal, and temporary lift

C026–C028. U.S. Code+3

The statute requires an authentication mechanism, not a particular PIN, app, paid lock, bureau subscription, or online account. A bureau may use a lawful authentication process, but its branded implementation is not transformed into the statutory definition. C027.

Unlike fraud alerts, a freeze request to one nationwide CRA is not statutorily referred to the others for automatic placement. A consumer seeking freezes across the nationwide files must make a direct request to each CRA. C032. Consumer Financial Protection Bureau+1

16. Complete ordinary-freeze exception matrix

A freeze does not apply to making a consumer report for the following uses:

C029–C030. U.S. Code+1

Two practical consequences follow:

1. A freeze is not a universal ban on report access.
2. The existing-account/collection exception is not an exemption for every collector in every situation. It requires the relationship described in clause (A), or another actual exception such as a court-order branch.

17. Freeze rights notice and web access

The statutory rights notice explains that a freeze can delay or prevent later credit applications and that existing-account review and collection can continue under the statutory exception.

Each nationwide CRA must maintain a webpage allowing requests for:

• a freeze;
• initial, extended, and active-duty alerts; and
• prescreen opt-out.

But the webpage cannot be the only freeze-request method. C031. U.S. Code+1

A freeze does not itself stop prescreened offers because §1681c-1(i)(4)(E) is an exception. The separate opt-out mechanism must be used if that protection is desired.

18. Protected consumers under subsection (j)

Who is a protected consumer?

A protected consumer is:

• an individual under age 16 when the placement request is made; or
• an incapacitated or protected person for whom a guardian or conservator was appointed.

The representative must provide sufficient proof of authority. Examples include:

• a court order;
• a valid power of attorney;
• government-issued proof of parentage, including a birth certificate; or
• a qualifying foster-care certification.

Sufficient identification examples include a Social Security number/card, official birth certificate, driver’s license, motor-vehicle identification card, or other government identification for the protected consumer and representative. C033–C034. U.S. Code+2

Placement and creation of a record

Upon the representative’s direct request and receipt of both sufficient identity and authority proof, the nationwide CRA must place the freeze free:

• within 1 business day for toll-free telephone or secure electronic requests; or
• within 3 business days for mail.

Confirmation and the authentication/removal process are due within 5 business days after placement.

If the protected consumer has no file, the CRA must create a special record solely to implement subsection (j). That record may not be used to assess creditworthiness or the other consumer-report characteristics listed by the statute. C035–C036. U.S. Code+1

Release and removal

After placement, the protected consumer’s report, derived information, or created record cannot be released unless the freeze is removed in accordance with subsection (j). The defined protected-consumer freeze focuses on requests for opening a new credit account. The ordinary subsection (i)(4) exception list is not textually incorporated into subsection (j); this pass therefore does not assume that every ordinary-freeze exception applies identically to a protected record. C036, C040. U.S. Code+1

Removal is allowed:

• on the representative’s direct request;
• on the protected consumer’s own direct request once the person is no longer under 16;
• after material misrepresentation by the representative, with prior written notice.

Requested removal is free and due:

• within 1 hour for telephone or secure electronic requests; or
• within 3 business days for mail.

Temporary removal is also available for a specified period. C037. U.S. Code+1

19. Ordinary versus protected-consumer freeze

G4. Fictional workflows and statutory clocks

The following are invented. No form was sent, no report was created, and no actual consumer result is predicted.

Example 1 — Complete block packet

Actors: Consumer and a CRA. Facts: The CRA receives all four §1681c-2(a) elements on Monday, November 2, 2026. Assume for illustration that:

• receipt day is day zero;
• “business day” means Monday through Friday;
• no holiday falls within the four-day interval; and
• the identity-theft report is accepted as complete.

Calculation

• Tuesday, November 3: business day 1
• Wednesday, November 4: day 2
• Thursday, November 5: day 3
• Friday, November 6: day 4

Conditional result: Reporting of the identified information must be blocked no later than Friday, November 6. The CRA must promptly send the furnisher the statutory notice. C003, C007; S001 §1681c-2(a)-(b).

Adverse branch: If the statement denying the transaction or proper identity proof is missing, the four-business-day complete-packet clock has not yet been established.

Missing evidence: Actual receipt log, packet contents, report-acceptance status, and the CRA’s business-day convention.

Example 2 — Incomplete or minimally detailed identity-theft report

Facts: A CRA receives an automated report containing a bare allegation but lacking information needed to match the consumer to the file.

Required process: Regulation V may permit reasonable requests for identity proof or a more detailed affidavit. The first request must be made within 15 days after the later of report receipt or the service request. Supplemental requests and the final report-acceptance decision generally occur within the next 15-day period, with a possible 5-day decision period for information arriving on day 11 or later of that second period. C005–C006; S006 §1022.3(i); S007 §1022.123.

Conditional result: The four-business-day block clock is not computed as though all §1681c-2 elements were complete when the report or identity proof remained deficient.

Adverse branch: A detailed official report generally should not attract extra-document demands without an identifiable concern.

Missing evidence: Exact report, requested service, request dates, and requested documentation.

Example 3 — Block declined or rescinded

Facts: A CRA initially blocks a retail account but later receives reliable evidence that the consumer personally received the purchased goods.

Decision-maker: CRA.

Conditional result: The CRA may rescind if it reasonably determines §1681c-2(c)(1)(C) is met and must promptly send the reinsertion-style notice. C008–C009.

Adverse branch: The fact that the account previously appeared in the file is not, standing alone, proof that the consumer received the goods or knew of the transaction.

Missing evidence: Delivery records, authentication, consumer response, and notice date.

Example 4 — Initial versus extended alert

Initial-alert branch

• Consumer has a good-faith suspicion but no completed identity-theft report.
• Proper identity proof is supplied.
• One nationwide CRA is contacted.
• Alert period: at least one year.
• One special free file from each nationwide CRA can be requested.

Extended-alert branch

• Consumer has a qualifying identity-theft report.
• Alert period: seven years.
• Prescreen exclusion: five years.
• Two special free file disclosures from each nationwide CRA in the first twelve months.

If requested on November 2, 2026, the anniversary references would be November 2, 2027 and November 2, 2033, respectively. Because the statute says the periods begin on the request date but supplies no general endpoint-counting convention in the provisions read, those are anniversary references—not individualized last-day determinations. C017–C020.

Example 5 — Active-duty alert

Facts: A hypothetical consumer meets the statutory active-duty definition and supplies proper identity proof through a representative.

Result:

• alert: 12 months;
• prescreen exclusion: 2 years;
• contacted nationwide CRA refers the alert to the others;
• prospective users use the initial/active identity-verification standard.

Adverse branch: Military affiliation without qualifying active duty away from the usual duty station does not establish this specific statutory status.

Missing evidence: Actual duty orders, assignment, requester authority, identity proof, and alert placement date.

C021–C023.

Example 6 — Ordinary freeze and one-hour temporary lift

Facts: A consumer directly submits an authenticated secure-electronic temporary-lift request at 2:00 p.m. Pacific on Tuesday, November 10, 2026, identifying the permitted lift period.

Conditional calculation: The statutory one-hour deadline produces a modeled deadline of 3:00 p.m. Pacific the same day.

Result: The CRA must temporarily remove the freeze for the consumer-specified period. C028; S003 §1681c-1(i)(3)(C), (E).

Adverse branch: An incomplete authentication attempt does not establish receipt of the qualifying direct request.

Missing evidence: Actual receipt timestamp, time zone used by the CRA, authentication, and lift-period specification.

Example 7 — Existing creditor or collector versus a new creditor

Existing-account branch: A creditor with whom the consumer has an existing account—or its qualifying agent, affiliate, assignee, or collection party—seeks the report for account review or collection. Clause (i)(4)(A) can permit that use despite the freeze.

New-credit branch: An unrelated prospective creditor cannot access the frozen report under the existing-account exception. If the consumer does not permit access, it may treat the application as incomplete.

Adverse branch: Calling oneself a “collector” does not automatically satisfy clause (A); the relevant relationship or another statutory exception must exist.

C025, C029.

Example 8 — Child or protected adult with missing authority proof

Facts: A mailed placement request for a protected consumer arrives Friday, November 6, 2026, but contains identification documents without proof that the requester has authority.

Result: The statutory placement predicate is incomplete; the three-business-day deadline is not established on those facts.

Alternative complete-packet calculation: Assume the complete request arrives Friday, November 6 and, solely for illustration, business days are weekdays excluding Veterans Day, Wednesday, November 11:

• Monday, November 9: business day 1
• Tuesday, November 10: day 2
• Wednesday, November 11: excluded as a federal legal public holiday
• Thursday, November 12: day 3 — modeled placement deadline

If placement occurs November 12, the modeled five-business-day confirmation deadline is:

• Friday, November 13: day 1
• Monday, November 16: day 2
• Tuesday, November 17: day 3
• Wednesday, November 18: day 4
• Thursday, November 19: day 5

The FCRA provisions read do not themselves define business day by reference to the federal holiday statute. The calculation is expressly conditional. Veterans Day is listed as November 11 in 5 U.S.C. §6103. C035, C037, C042. GovInfo

Example 9 — Blocked debt transferred to another collector

Facts: A debt owner receives the statutory §1681c-2 identity-theft notification and nevertheless places the same debt with a new third-party collector.

Conditional result: Section 1681m(f) prohibits that placement unless an actual statutory exception applies. A routine reassignment to another collector is not one of the three listed exceptions. C014.

Adverse branch: A genuine assignee-required repurchase, securitization/pledge, or enumerated corporate transfer is separately treated.

Missing evidence: Notification, debt identity, transfer document, transferee role, and exception facts.

G5. Currentness and old-to-new disposition

20. Current primary text

This pass freshly read the following OLRC sections through Public Law 119-134, October 20, 2026:

• 15 U.S.C. §1681c-2;
• §1681c-1;
• §1681s-2;
• §1681m;
• §1681i;
• §1681h; and
• §1681j.

The exact current §1681s URL was inaccessible in this browsing session, so the complaint-referral provision was read from the official 2024 Edition published by the Government Publishing Office. Section 1681a was read from the OLRC compilation through Public Law 119-124, October 15, 2026; an attempted later /119-134/ retrieval was unavailable. No claim is made that the older displayed editions are the same as a successfully read October 20 body. U.S. Code+7

The 2018 amendments changed the initial alert from 90 days to one year and added subsections (i) and (j). Those changes took effect 120 days after May 24, 2018—September 21, 2018. The separate active-duty monitoring amendment had a one-year effective-date rule. C038. U.S. Code

21. P04/P05 old-to-new crosswalk

C039–C040.

22. Wisconsin §100.54 hold

No new Wisconsin §100.54 body was read in PASS-09. The earlier official integrated-source failure and current-fee/body hold remain intact. This federal pass establishes the federal no-charge rights but does not certify:

• the complete current Wisconsin statutory text;
• every Wisconsin-protected-consumer variation;
• any distinct Wisconsin deadline or exception;
• preemption of every state provision; or
• a private Wisconsin claim.

C039.

Source register — S_WI-P09-S001 onward

All fresh accesses occurred October 26, 2026 Pacific / October 27, 2026 UTC. Exact per-resource access times are unavailable. All cited source bodies are HTML; therefore printed-page and zero-based PDF-index fields are N/A unless expressly noted.

Source-register count: 21.

Atomic claim register — S_WI-P09-C001 onward

Atomic-claim count: 43.

Complete granular coverage table

Core federal coverage

Core coverage rows: 93.

Territorial and actor branches

Territorial/actor rows: 6.

Explicit deferred families

Deferred-family rows: 18.

Evidence-backed article and tool opportunities

A responsible SettleADebt article or tool can classify the requested protection without collecting sensitive data:

1. “Which identity-theft credit tool applies?” Ask whether the issue is a false report item, fear of new-account fraud, confirmed identity theft with a qualifying report, active-duty status, or a child/protected adult. Output the block, alert, or freeze branch with uncertainty—not a promise of deletion.
2. Block-packet checklist Display the four §1681c-2 elements, distinguish identity proof from the identity-theft report, and warn that a general balance dispute is not automatically an identity-theft block request.
3. Conditional clock calculator Accept a user-entered complete-packet receipt date and a user-selected business-day convention. It must state that the FCRA sections read do not define business day and that actual CRA receipt/completeness controls.
4. Freeze-exception classifier Separate a new creditor from an existing creditor, its collector, a court-order collector, an insurer, employer, landlord screener, monitoring service, or identity-authentication user.
5. Protected-consumer evidence checklist Separate proof of representative authority from proof of identity, and explain the no-file record-creation branch.

These are research opportunities only. No tool was built, published, or approved for operation.

Example inventory

Worked-flow count: 9.

Old-to-new boundary crosswalk

Crosswalk rows: 4.

Researcher self-check

Actual reading

Freshly read:

• the current OLRC bodies of §§1681c-2, 1681c-1, 1681s-2, 1681m, 1681i, 1681h, and 1681j through Public Law 119-134;
• the relevant §1681a definitions through Public Law 119-124;
• official GPO 2024 alternate editions of §§1681c-1, 1681c-2, and 1681s;
• current Regulation V §§1022.3, 1022.121, 1022.123, and the narrow identity-theft portion of §1022.43;
• CFPB Appendix I’s prescribing text, but not its linked image forms;
• current FTC and CFPB identity-theft, fraud-alert, and freeze guidance; and
• 5 U.S.C. §6103 only for the explicitly conditional holiday example.

Access and currentness limitations

• The current exact OLRC §1681s page was inaccessible; GPO’s official 2024 body supplied the referral provision.
• The later /119-134/ §1681a route was inaccessible; the October 15, 2026 /119-124/ body was read.
• Wisconsin §100.54 was deliberately not subjected to another unchanged failed-endpoint loop. Its current body remains held.
• No commercial citator, named-entity compliance review, private record, or actual CRA operational log was used.
• No source publication date was treated automatically as its effective date.

Clock checks

Two business-day calculations were completed, but both expressly use an assumed convention because the FCRA sections read do not define “business day”:

• November 2, 2026 complete block packet → modeled fourth business day November 6.
• November 6, 2026 protected-consumer mailed complete request → modeled third business day November 12 when November 11 is excluded; modeled fifth confirmation business day November 19.

The secure-electronic lift example uses the statutory one-hour period: 2:00 p.m. → 3:00 p.m. on the same assumed receipt day.

No actual deadline, bureau receipt, score effect, account result, award, refund, or debt cancellation was calculated.

Register reconciliation

Source, claim, coverage, scenario, crosswalk, and deferred rows are counted separately.

No actions performed

No named consumer, child, protected adult, servicemember, CRA, lender, collector, debt buyer, furnisher, employer, landlord, insurer, provider, account, report, crime report, court record, military record, or license was searched. No identity-theft report, fraud alert, freeze, block, dispute, complaint, filing, form, account, purchase, contact, or record request was made. No credentials were entered. No website, private account, local coordinator file, or publication was created or changed.

This is the researcher’s self-check, not independent review, legal advice for an actual person, all-source certification, operational approval, publication approval, or acceptance of Wisconsin PASS-09, A066, or the parent dossier.

END S_WI PASS-09.