In reviewing RFPA and USDA customer authorizations, it appears that the authorization is good for the life of the loan, not just a 3 month period. I also can't find any information regarding the customer's right to revoke the authorization before the records are disclosed or the customer's rights. Has anyone else encountered this when doing a similar review?