A consumer reporting agency shall maintain a toll-free telephone number that is answered at a minimum during normal business hours to accept security alert requests from consumers. If calls are not answered after normal business hours, an automated answering system shall record requests and calls shall be returned to the consumer not later than two hours after the time the normal business day begins on the next business day after the date the call was received.