1.    A consumer reporting agency may charge a fee not to exceed five dollars for placing or temporarily lifting a security freeze unless:

a.    The consumer is a victim of identity theft; and

b.    The consumer provides, or has already provided in connection with the security freeze, the consumer reporting agency with a valid copy of a police report or a police case number documenting the identity theft, investigative report, or complaint to a law enforcement agency.

2.    In addition to the charge, if any, permitted under this section, a consumer may be charged no more than five dollars if the consumer fails to retain the original personal identification number given to the consumer by the agency, but the consumer may not be charged for a one-time reissue of the same or a new personal identification number. The consumer may be charged no more than five dollars for subsequent instances of loss of the personal identification number. No other fees may be imposed in connection with the security freeze.