Prohibits a consumer reporting agency from imposing a charge on a consumer for a request to place, temporarily lift, or remove a security freeze.

Requires the office of cybersecurity, the office of privacy and data protection, and the attorney general's office to work with stakeholders to evaluate the impact to consumers and the consumer reporting agencies regarding the modifications in this act.