A consumer reporting agency may not charge a consumer a fee or collect from a consumer any money or item of value for:

(1) Placing, temporarily lifting or removing a security freeze on the consumer’s consumer report.

(2) Creating or deleting a protective record.

(3) Placing or removing a security freeze on a protective record for a protected consumer.

(4) Replacing a lost personal identification number, password or similar device the consumer reporting agency previously provided to the consumer. [2007 c.759 § 6; 2013 c.415 § 4; 2018 c.10 § 5]