The credit freeze provision of H.R. 3997, the “Financial Data Protection Act of 2006,” is still in the bill and was not stripped as reported previously. It has been modified, though, to restrict credit-freeze requests only to persons who are actually victims of identity theft. The freeze prohibits a consumer reporting agency from releasing all or any part of the credit report without the consent of the consumer. A security freeze may be placed by submitting a written request to the consumer reporting agency...