Access to a consumer report is allowed when there is a legitimate reason to use it, such as evaluating an individual's application for credit or employment. This is a clear, proper permissible purpose under FACTA/FCRA, because lenders and employers rely on these reports to make informed decisions about extending credit, hiring, or other related actions. The other choices don’t fit the permissible purposes. Checking a neighbor’s credit or using a report for entertainment would violate the privacy protections of the FCRA. Marketing can be permissible only if the consumer has given prior express written consent for the report to be used for marketing; without that consent, it’s not a valid permissible purpose.

The main idea here is that the FCRA lets someone pull a consumer report only when there is a permissible purpose. That permissible purpose must authorize obtaining the report itself, not just other outcomes or data related to it. So the thing you’re allowed to obtain is the consumer report—the document that contains the person’s credit history and other data collected by the reporting agency. The other options describe things that happen after a decision is made (adverse action notice) or pieces of information that may appear in the report (employment history, credit file), but they don’t authorize pulling the report.

Under the Fair Credit Reporting Act, the furnisher of information—the bank, lender, or other entity that provides negative data about the consumer to a nationwide credit reporting agency—must notify the consumer when that information is reported. This direct notice, typically within 30 days, gives the consumer awareness of what is being reported and an opportunity to review or dispute if needed. The obligation sits with the furnisher, not the reporting agency, the consumer, or the government. The agency simply maintains and shares data; it does not bear the notification duty for furnishment.

Under the FACT Act, consumers have a say in how their information is used for marketing within a company and its related entities. The key idea is that you can limit the sharing of your information with a company’s affiliates for marketing purposes. The correct statement reflects this: you may opt out of sharing your information with affiliates so they can use it for marketing. This means if you don’t want an affiliated company to use your data to market products or services, you can stop that sharing. Why this is the best answer: it directly states the consumer’s right to prevent affiliate sharing for marketing, which is exactly what the opt-out provision covers. The other options imply absolute bans, limit opt-outs to non-affiliates, or tie opt-outs to a specific type of report, none of which align with how affiliate marketing opt-outs are defined under the FACT Act.