Prohibits a consumer reporting agency from charging a fee to temporarily lift a security freeze or remove the security freeze for: (1) A victim of identity theft;

(2) A person that certifies he or she has received notice of a security breach involving his or her personal or financial data; or

(3) A consumer who is at least sixty-five years old.

Requires consumer reporting agencies to provide consumers with notice of the security freeze certification.