Answer from Randy: If you have an application for credit, you have a permissible purpose to pull a credit report. A signature by the consumer is not a requirement. As far as documenting delivery of disclosures, I'm not sure that I understand the question, but most banks attach a dated cover letter to the multitude of initial disclosures that are required to be delivered for proof of mailing date.
Answer from Andy: Proof to a regulator is the same proof you want when you audit this. To know that disclosures are made, you look for the copies in the file, the dates and completeness. You look for notations in the files and you ask the staff involved what the procedures are, when they are done, and what the staff does if this can't be done for some reason. Essentially, what is in the file and if there wouldn't be evidence in the file, what is the SOP that is followed and is it always followed. As to the credit bureau access, your permissible purpose could include an application the applicant completed, that your staff completed, or an oral application. In case of the latter, I recommend detailed notes.
First published on BankersOnline.com 7/15/13