(1) A consumer reporting agency shall place a security freeze for a protected consumer if:
(a) The consumer reporting agency receives a request from the representative for the placement of the security freeze under this section; and
(b) The representative:
(i) Submits the request to the consumer reporting agency at the address or other point of contact and in the manner specified by the consumer reporting agency; and
(ii) Provides to the consumer reporting agency:
(A) Sufficient proof of identification of the protected consumer and the representative; and
(B) Sufficient proof of authority to act on behalf of the protected consumer.
(2) If a consumer reporting agency does not have a file pertaining to a protected consumer when the consumer reporting agency receives a request described in subdivision (1)(a) of this section, the consumer reporting agency shall create a record for the protected consumer.
(3) Within thirty days after receiving a request that meets the requirements of this section, a consumer reporting agency shall place a security freeze for the protected consumer.