This bill revises requirements related to credit reporting agencies and the reporting of adverse credit information. Credit reporting agencies are prohibited from using social security numbers in credit reports and as a method of verifying a consumer's identity. The Consumer Financial Protection Bureau must supervise and examine the cybersecurity of certain credit reporting agencies. The bill prohibits a credit reporting agency from reporting paid, medically-necessary debt if the debt was paid over a year prior. A credit reporting agency is also prohibited from reporting certain adverse credit information related to financial abuse, unfair or fraudulent mortgage lending, or fraudulent private student lending. The bill extends the time credit reporting agencies have to place a credit security freeze when receiving such a request by phone or through electronic means from one to three business days. It also extends the time agencies have to remove a freeze from one hour to three days.