Consumer reporting agencies, data encryption, requirements for - BR 286