A couple months ago a branch opened a new account for a new customer to the bank that had a security freeze on their ChexsSystems report.
The branch did not address the security freeze and opened a new account with the security freeze never lifted. It is against our deposit and Identity Theft policy. However, I'm trying to determine what section it would violate of the Fair Credit Report Acting. Would it be 605?

I think what you made was a business decision and probably a poor one, but acting on an application from a consumer that has a freeze on their account without them lifting the freeze is not a violation. You are just operating blind and possibly not dealing with the actual consumer. If the actual consumer later claims it was not them, then what? I might consider closing the account now or contacting the customer to lift the freeze so that you can get a report and then make your decision.