We evaluate the institution’s policies, procedures, and processes to determine compliance with the requirements of the Act. Specifically, account number truncation; solicitations based on prescreened lists; using consumer reports; disclosure of credit scores; notification requirements; red flag rules; disposal of consumer report information; disclosure of negative information to consumer reporting agencies; furnishing and maintaining the accuracy of reports; and protection of medical information.