Lucy and Andy, I see your points. In thinking through this, though, I started questioning whether all the times we check the OFAC list meets the 'Permissable Purposes of Reports' test in the FCRA. Most do, but one instance I can think of (checking the beneficiary of outgoing wire transfers) doesn't - to my mind.
FCRA says,
"(a) In general. Subject to subsection (c), any consumer reporting agency may furnish a consumer report under the following circumstances and no other:
...(F) otherwise has a legitimate business need for the information—
(i) in connection with a business transaction that is initiated by the consumer; or
(ii) to review an account to determine whether the consumer continues to meet the terms of the account."
That business transaction wording covers most of the OFAC checks that would come up, but in the case of an outgoing wire beneficiary - that 'initiated by the consumer' part trips you up. Any thoughts?
_________________________
Opinions my own.