(1) A consumer who has been the victim of identity theft may place a security freeze on the consumer's consumer report by making a request in writing by certified mail to a consumer reporting agency with a valid copy of a police report, investigative report or complaint the consumer has filed with a law enforcement agency about unlawful use of personal information by another person. In the case of a victim of identity theft, a consumer reporting agency may not charge a fee for placing, removing or suspending for a specific party or period of time a security freeze on a consumer report.

(2) A consumer who has not been the victim of identity theft may place a security freeze on the consumer's consumer report by making a request in writing by certified mail to a consumer reporting agency. A consumer reporting agency may charge a fee of no more than $10  $6 to a consumer for each security freeze, removal of a security freeze or temporary suspension of a security freeze for a period of time or for reissuing the same or a new personal identification number if the consumer fails to retain the original personal identification number provided by the agency under paragraph D. A consumer reporting agency may charge a fee of not more than $12  $8 for a temporary suspension of a security freeze for a specific party.