Prohibits a consumer reporting agency from charging a fee for placing a security freeze, assigning a unique personal identification number or password, temporarily lifting a security freeze, or removing a security freeze.

Requires the office of cybersecurity, the office of privacy and data protection, and the attorney general's office to work with stakeholders to evaluate the impact to consumers and consumer reporting agencies regarding the modifications in this act.