An organization implements a 'compliance by design' approach to FCRA. Which practice BEST exemplifies this principle?
-
A
Reviewing consumer reports after employees have already used them
-
B
Embedding permissible-purpose checks into the system workflow before a report can be pulled
-
C
Training employees annually on FCRA rules
-
D
Conducting quarterly legal reviews of adverse action letters