Circular 27/2008 — Operations and Activities of Credit Reporting Agencies and Their Users

Tuesday, July 1, 2008 OFFICIAL GAZETTE (First Section) 1 CIRCULAR 27/2008 regarding the General Rules to which the operations and activities of credit reporting agencies and their users must adhere.

A logo appears at the margin, stating: Bank of Mexico.

CIRCULAR 27/2008 TO CREDIT REPORTING AGENCIES: SUBJECT: GENERAL RULES TO WHICH THE OPERATIONS AND ACTIVITIES OF CREDIT REPORTING AGENCIES AND THEIR USERS MUST ADHERE.

The Bank of Mexico, based on Articles 28 of the Political Constitution of the United Mexican States, sixth and seventh paragraphs; 24 of the Bank of Mexico Law; 12, 17, 20, 23, 28, 36, 41 and 42 of the Law to Regulate Credit Reporting Agencies; 22 of the Law for Transparency and Ordering of Financial Services; 8th, third and sixth paragraphs, 10, 14 in relation to 25 section II and 17 section I, which grant the General Directorate of Analysis of the Financial System and the Directorate of Central Banking Regulations, respectively, the authority to participate in the issuance of provisions, all from the Internal Regulations of the Bank of Mexico published in the Official Gazette of the Federation on September 30, 1994, whose last modification was published in said Official Gazette on May 9, 2008, as well as in the Sole Article, section IV of the Agreement on the Assignment of Administrative Units of the Bank of Mexico, and with the objective of carrying out the appropriate modifications derived from the "Decree by which various provisions of the Law to Regulate Credit Reporting Agencies are reformed, added to and repealed" published in said Official Gazette on February 1, 2008, has resolved to issue the following:

GENERAL RULES TO WHICH THE OPERATIONS AND ACTIVITIES OF CREDIT REPORTING AGENCIES AND THEIR USERS MUST ADHERE

CHAPTER I Preliminary Provisions

FIRST.- For the purposes of these Rules, the term Law refers to the Law to Regulate Credit Reporting Agencies. The definitions contained in Article 2 of the Law shall be applicable to these Rules insofar as appropriate.

SECOND.- The specialized units of Financial Entities provided for in Article 50 Bis of the Law for the Protection and Defense of Users of Financial Services may receive requests for Special Credit Reports, as well as respond to complaints from Clients.

CHAPTER II Regarding Special Credit Reports

THIRD.- Agencies must receive and process requests for Special Credit Reports in their specialized units, or through their electronic page on the worldwide network (Internet); telephone; fax; mail; email, and private courier companies.

Agencies must deliver the Special Credit Reports requested by Clients in their specialized units, at that same moment, once their identity has been verified in terms of Rule Fifth.

FOURTH.- Agencies must process Special Credit Reports adhering to the following:

I.- The first time Clients request them or if at least twelve months have passed since the last request, if the delivery is carried out through: 1.- The Agency's Internet electronic page; in their specialized units, or email, there will be no cost; 2.- Fax, the maximum rate will be nine UDIS; 3.- Mail in a closed envelope with receipt acknowledgment, the maximum rate will be twenty-seven UDIS, or 4.- Private courier companies, Agencies may freely determine the rates they will charge.

Tuesday, July 1, 2008 OFFICIAL GAZETTE (First Section) 2

II.- If twelve months have not passed since the last free request and the request is made through: 1.- The Agency's Internet electronic page and the delivery is carried out through that same medium or email, the maximum rate will be three UDIS; 2.- The Agency's specialized unit; the telephone line provided for in Article 40, penultimate paragraph of the Law; fax; mail, or email and the delivery is carried out through the Agency's Internet electronic page or email, the maximum rate will be twelve UDIS, or 3.- The Agency's Internet electronic page; its specialized unit; the telephone line provided for in Article 40, penultimate paragraph of the Law; fax; mail, or email. If the delivery is carried out through: a) The specialized unit or fax, the maximum rate will be twelve UDIS; b) Mail in a closed envelope with receipt acknowledgment, the maximum rate will be thirty UDIS, or c) Private courier companies, Agencies may freely determine the rates they will charge.

To determine the amount of the rates, the value of the UDI on the date the request in question is presented must be used, in accordance with the publication made by the Bank of Mexico in the Official Gazette of the Federation.

Clients may cover the corresponding rates using any of the available payment methods, such as credit or debit card; cash; payment order; electronic funds transfer, or deposit in the Agencies' bank accounts, for which the latter must make the necessary information available to effect the corresponding payment.

FIFTH.- Agencies must verify the identity of Clients requesting Special Credit Reports, under the following terms:

I.- When Clients who are natural persons go to the Agency's specialized unit, they must sign their request and identify themselves with a valid voter credential or passport and, in the case of foreigners, with the FM2 migratory form. They may also identify themselves by providing the information referred to in section II of this Rule.

II.- When Clients who are natural persons request their Special Credit Report through the Agency's Internet electronic page; telephone; fax; mail, or email, they must provide the following information: 1.- Full names; 2.- Address (street and number, neighborhood, city, federal entity and postal code); 3.- Unique Population Registry Key, Federal Taxpayer Registry or date of birth; 4.- Indicate if they have one or more valid credit cards and, if so, indicate from any of them the numbers that identify the account, the name of the credit grantor and the authorized credit limit for the month immediately preceding the date of the request, and 5.- Indicate if they have exercised a mortgage credit or auto credit and, if so, indicate for any of said credits the name of the credit grantor and the contract number.

III.- Natural persons with business activity who go to the Agency's specialized unit must sign their request and identify themselves with their valid voter credential or passport and, in the case of foreigners, with the FM2 migratory form. They may also identify themselves in accordance with what is provided in section IV of this Rule.

Representatives of legal entities may identify themselves in accordance with the previous paragraph, presenting a certified copy of the instrument in which the powers conferred upon them are stated, declaring under oath that said powers have not been revoked, and providing regarding their represented entity, the following information: 1.- Name; 2.- Address for tax purposes (street and number, neighborhood, city, federal entity and postal code), and 3.- Federal Taxpayer Registry.

IV.- When Clients who are natural persons with business activity or legal entities request their Special Credit Report through the Agency's Internet electronic page; telephone; fax; mail, or email, they must provide the following information: 1.- Name; 2.- Address for tax purposes (street and number, neighborhood, city, federal entity and postal code); 3.- Federal Taxpayer Registry, and 4.- Regarding any of the credits they maintain: a) Name of the grantor; b) Amount, date of opening or first disbursement, and c) Currency in which it was granted.

SIXTH.- Clients may also request their Special Credit Report through Users, going to them personally; through their Internet electronic page, or by telephone.

For the purposes of the above and before accepting the request, Users must inform: I.- The free public attention telephone number of the Agencies; II.- The address of their Internet electronic pages, and III.- That they can obtain their Special Credit Report directly from the Agencies free of charge once a year, in accordance with what is established in Rule Fourth.

When attending to such requests, Users must verify the identity of Clients in accordance with the following: 1.- When they go in person, they must sign their request and identify themselves with any of the official documents indicated in Rule Fifth, sections I or III, as appropriate. 2.- Users may attend to requests through their Internet electronic pages or telephone, only when they have agreed with Clients the use of electronic identification means, such as electronic signature or personal identification number (PIN).

Users may freely determine the rates they will charge for attending to requests for Special Credit Reports.

Special Credit Reports requested in terms of this Rule will be sent by the Agencies directly to the Clients by the means and to the address they have established for that effect.

SEVENTH.- The Special Credit Reports that Agencies deliver must contain the denomination or trade name, telephone and address of the Users who have consulted their information during the last twenty-four months.

In said reports, it will not be necessary to include information related to credit and risk rating, nor any other prediction indicator on the payment capacity of Clients that the Agencies have prepared or determined.

CHAPTER III Regarding Credit Reports

EIGHTH.- In the case of Users who intend to make credit offers to natural person Clients with whom they do not maintain a legal relationship, Agencies, in terms of what is provided in Article 28 of the Law, may deliver to said Users Credit Reports when they have the authorization of the Clients granted verbally or by electronic means, provided that previously the Users present a document that describes in detail the terms and conditions of the credit offer in question, as well as the other information that the Agencies require from them.

I.- To be able to receive the aforementioned reports in accordance with what is stated in the previous paragraph, Users must comply with the following: 1.- Inform Clients of the identity of the User and explain to them the characteristics of the credit offered, including among others, the Total Annual Cost and associated commissions; 2.- Obtain from Clients their authorization verbally or by electronic means so that the User can access their Credit Report; 3.- Identify Clients, collecting at least the information indicated below: a) Full names; b) Address (street and number, neighborhood, city and federal entity); c) Unique Population Registry Key, Federal Taxpayer Registry or date of birth; d) If they have one or more credit cards and, if so, indicate the last four digits of the number that identifies the account from any of them; e) If they have mortgage credit, and f) If they have exercised an auto credit in the last two years. 4.- In the case of verbal authorization, record the information indicated in sections 2 and 3 above and conserve said recordings in the terms and periods provided in the Law. In cases where the authorization has been granted by electronic means, conserve the information indicated in sections 2 and 3 above in magnetic media, for the period provided in the Law.

II.- For its part, Agencies must: 1.- Receive the Client identification data sent by Users and check the information against their database. They may only deliver Credit Reports in cases where the aforementioned Client information coincides with the data in possession of the Agency. 2.- Send Credit Reports only to the official or employee of the User who requested them, provided that they are registered in accordance with what is stated in Rule Fourteenth.

The authorizations referred to in this Rule shall be subject to what is provided in the penultimate paragraph of Article 29 and in the third paragraph of Article 30 of the Law. Such authorizations may only be used to consult the Credit Report of Clients on a single occasion.

To avoid violating the provisions related to Financial Secrecy, Agencies must reject User requests that do not comply with what is provided in this Rule.

NINTH.- Agencies may provide Credit Reports to Users who, through their Internet electronic page, ATMs or telephone lines, make credit offers to Clients with whom they have entered into a contract that allows them to access the provision of services by using electronic identification means, such as electronic signature or PIN.

This is always provided that said Users are able to demonstrate credibly that they have the corresponding authorization in accordance with what is provided in Article 28 of the Law and conserve a record of it through optical, magnetic or any other technology means, for the term established in Article 31 of the Law.

The aforementioned authorization must comply with the requirements provided in the first paragraph of Article 28 of the Law, except for the autograph signature which will be replaced by the use of any of the aforementioned electronic identification means.

In the cases provided for in this article, Users must have mechanisms that require Clients to re-enter the agreed electronic identification means to grant the aforementioned authorizations.

CHAPTER IV Regarding Complaints

TENTH.- Agencies have the obligation to: I.- Process up to two complaints free of charge each calendar year per Client; II.- Determine the rate they will charge for processing additional complaints during said period, which may not exceed the equivalent to fifteen UDIS per complaint, and III.- Make said rate known to the public through their Internet electronic page.

In each complaint presented in terms of Article 42 of the Law, Clients may object one or more records contained in their Special Credit Report.

To determine the amount of the rates, the value of the UDI on the date the complaint in question is presented must be used, in accordance with the publication made by the Bank of Mexico in the Official Gazette of the Federation.

CHAPTER V General Provisions

ELEVENTH.- Agencies are obliged to establish the forms that Users must use to send them information related to the credit history, credit operations and other of an analogous nature of Clients.

Agencies must prepare the filling instructions for the respective forms, which among other aspects, must contain a precise description of the information to be included in each field of the form.

Agencies must make the forms and their filling instructions known to the public through their Internet electronic page, which may be freely used by other Agencies.

TWELFTH.- Agencies must eliminate negative information from credit histories, related to any credit that has been reported as overdue or, that of credits regarding which the User has ceased to update the records, in accordance with the following:

I.- If the outstanding principal balance is equal to or less than the equivalent to twenty-five UDIS, twelve months having passed from the date that occurs first, either the date on which the credit was first reported as overdue, or from the last time the User updated the credit record; II.- If the outstanding principal balance is greater than the equivalent to twenty-five and up to five hundred UDIS, twenty-four months having passed from the date that occurs first, either the date on which the credit was first reported as overdue, or from the last time the User updated the credit record, and III.- If the outstanding principal balance is greater than the equivalent to five hundred and up to one thousand UDIS, forty-eight months having passed from the date that occurs first, either the date on which the credit was first reported as overdue, or from the last time the User updated the credit record.

Additionally, when Agencies carry out the elimination of negative information of the credits referred to in sections I, II and III above, they must delete, as appropriate, the observation or prevention keys respectively. Regarding prevention keys, their elimination will only proceed when the sum of the outstanding principal balances of the credits of a Client regarding the same creditor is less than the equivalent to four hundred thousand UDIS.

In the case of overdue credits where there are both defaults and payments, the deletion of negative information for each period of default shall be subject to what is provided in sections I, II and III of this Rule, as appropriate.

For the purposes of this Rule, overdue credits shall be understood as those defined as such in the applicable provisions issued by the Commission and the calculation of the outstanding principal balance of overdue credits will be carried out using the value of the UDI corresponding to the first banking business day of the calendar year in which the deletion must be carried out, in accordance with the publication made by the Bank of Mexico in the Official Gazette of the Federation.

Agencies must not eliminate the credit histories referred to in this Rule that fall under the cases provided for in section II of Article 24 of the Law.

THIRTEENTH.- For Agencies to provide each other with their Primary Data Bases, they must establish by mutual agreement: a) The amounts to be paid initially for this purpose; b) The amounts that must be paid monthly to keep the respective information updated, and c) The characteristics of the formats they will use to carry out the referred exchange.

For the determination of the amounts mentioned in subsection a) of the previous paragraph, the expenses and investments incurred by each of them to integrate and update their Primary Data Base, as well as the expenses they require to incur to transmit it, must be taken into account.

To comply with what is stated in this rule, Agencies must observe the following:

I.- Within a term of 30 natural days counted from the date on which the document in which one of the Agencies has requested the exchange of Primary Data Bases has been delivered, they must reach an agreement: a) On the amounts and the characteristics of the referred formats or, in default, b) On the designation of an independent expert in whom they delegate the authority to determine said amounts and the cited characteristics of the formats.

In the case referred to in subsection b) above, additionally and within the stated term, Agencies must celebrate the corresponding contract or contracts with the independent expert, as well as provide him with all the information they have that is necessary for the performance of his functions.

Within said 30 natural days, Agencies must inform the Bank of Mexico, through the Directorate of Authorizations, Consultations and Control of Legality, the agreements they have reached, as well as in the case provided for in subsection b) cited, a copy of the contract or contracts they have celebrated with the independent expert in question.

II.- In the event that Agencies do not comply with what is provided in section I above, the Bank of Mexico will proceed to designate on their behalf the independent expert who will carry out the referred functions, as well as inform them in writing about such designation.

III.- An independent expert shall be understood as a person unrelated to the Agencies who proves to have knowledge and experience to perform the functions indicated in this Rule.

Such person must declare in writing under oath that they are not in any of the situations mentioned in the following paragraph.

Under no circumstances may the following act as independent experts: a) Employees or executives of the Agency;

Tuesday, July 1, 2008 OFFICIAL GAZETTE (First Section) 3

hayan sido conferidas, declarando bajo protesta de decir verdad que dichas facultades no le han sido revocadas, y proporcionar respecto de su representada, la información siguiente: 1.- Nombre; 2.- Domicilio para efectos fiscales (calle y número, colonia, ciudad, entidad federativa y código postal), y 3.- Registro Federal de Contribuyentes.

IV.- Cuando los Clientes personas físicas con actividad empresarial o personas morales, soliciten su Reporte de Crédito Especial a través de la página electrónica en Internet de las Sociedades; teléfono; fax; correo, o correo electrónico, deberán proporcionar la información que a continuación se indica: 1.- Nombre; 2.- Domicilio para efectos fiscales (calle y número, colonia, ciudad, entidad federativa y código postal); 3.- Registro Federal de Contribuyentes, y 4.- En relación con alguno de los créditos que mantienen: a) Nombre del otorgante; b) Importe, fecha de apertura o de la primera disposición, y c) Moneda en que fue otorgado.

SEXTA.- Los Clientes también podrán solicitar su Reporte de Crédito Especial a través de los Usuarios, acudiendo personalmente ante ellos; a través de su página electrónica en Internet, o por teléfono.

Para efecto de lo dispuesto en el párrafo anterior y antes de aceptar la solicitud, los Usuarios deberán informar: I.- El número telefónico gratuito de atención al público de las Sociedades; II.- La dirección de sus páginas electrónicas en Internet, y III.- Que pueden obtener su Reporte de Crédito Especial directamente ante las Sociedades sin costo una vez por año, de conformidad con lo establecido en la Regla Cuarta.

Al atender dichas solicitudes, los Usuarios deberán verificar la identidad de los Clientes conforme a lo siguiente: 1.- Cuando acudan personalmente, deberán firmar su solicitud e identificarse con alguno de los documentos oficiales señalados en la Regla Quinta, fracciones I o III, según corresponda. 2.- Los Usuarios podrán atender las solicitudes a través de sus páginas electrónicas en Internet o teléfono, únicamente cuando hayan pactado con los Clientes la utilización de medios electrónicos de identificación, tales como la firma electrónica o el número de identificación personal (NIP).

Los Usuarios podrán determinar libremente las tarifas que cobrarán por atender las solicitudes de Reportes de Crédito Especiales.

Los Reportes de Crédito Especiales que se soliciten en términos de la presente Regla, serán enviados por las Sociedades directamente a los Clientes por los medios y a la dirección que al efecto hayan establecido.

SEPTIMA.- Los Reportes de Crédito Especiales que las Sociedades entreguen deberán contener la denominación o nombre comercial, teléfono y dirección de los Usuarios que hayan consultado su información durante los últimos veinticuatro meses.

En dichos reportes no será necesario incluir información relativa a la calificación crediticia y de riesgo, ni cualquier otro indicador de predicción sobre la capacidad de pago de los Clientes que las Sociedades hayan elaborado o determinado.

CAPITULO III De los Reportes de Crédito

OCTAVA.- En caso de Usuarios que pretendan efectuar ofertas de crédito a Clientes personas físicas con los que no mantengan relación jurídica, las Sociedades, en términos de lo dispuesto en el artículo 28 de la Ley, podrán entregar a dichos Usuarios Reportes de Crédito cuando cuenten con la autorización de los Clientes otorgada de forma verbal o por medios electrónicos, siempre que previamente los Usuarios les presenten un documento que describa de manera detallada los términos y condiciones de la oferta de crédito de que se trate, así como la demás información que las Sociedades les requieran.

I.- Para estar en posibilidad de recibir los mencionados reportes conforme a lo señalado en el párrafo anterior, los Usuarios deberán cumplir con lo siguiente: 1.- Informar a los Clientes la identidad del Usuario y explicarles las características del crédito que ofrece, incluyendo entre otros, el Costo Anual Total y las comisiones asociadas; 2.- Obtener de los Clientes su autorización de forma verbal o por medios electrónicos para que el Usuario pueda tener acceso a su Reporte de Crédito; 3.- Identificar a los Clientes, recabando cuando menos la información que se indica a continuación: a) Nombres y apellidos completos; b) Domicilio (calle y número, colonia, ciudad y entidad federativa); c) Clave Unica de Registro de Población, Registro Federal de Contribuyentes o fecha de nacimiento; d) Si cuenta con una o varias tarjetas de crédito y, en caso afirmativo, indicar de alguna de ellas los últimos cuatro dígitos del número que identifica la cuenta; e) Si cuenta con crédito hipotecario, y f) Si ha ejercido en los últimos dos años un crédito automotriz. 4.- En caso de autorización verbal, grabar la información señalada en los numerales 2 y 3 anteriores y conservar dichas grabaciones en los términos y periodos previstos en la Ley. En los casos en que la autorización se haya otorgado por medios electrónicos, conservar la información señalada en los numerales 2 y 3 anteriores en medios magnéticos, por el periodo previsto en la Ley.

II.- Por su parte, las Sociedades deberán: 1.- Recibir los datos de identificación de los Clientes que le envíen los Usuarios y cotejar la información contra su base de datos. Sólo podrán entregar los Reportes de Crédito en los casos en que la aludida información de los Clientes coincida con los datos en poder de la Sociedad. 2.- Enviar los Reportes de Crédito únicamente al funcionario o empleado del Usuario que los haya solicitado, siempre que se encuentre registrado de conformidad con lo señalado en la Regla Decimocuarta.

A las autorizaciones a que hace referencia la presente Regla les será aplicable lo dispuesto en el artículo 29 penúltimo párrafo y en el artículo 30 tercer párrafo de la Ley. Dichas autorizaciones únicamente podrán ser utilizadas para consultar en una sola ocasión el Reporte de Crédito de los Clientes.

Para no incurrir en violación a las disposiciones relativas al Secreto Financiero, las Sociedades deberán rechazar las solicitudes de los Usuarios que no cumplan con lo dispuesto en la presente Regla.

NOVENA.- Las Sociedades podrán proporcionar Reportes de Crédito a los Usuarios que a través de su página electrónica en Internet, cajeros automáticos o líneas telefónicas, efectúen ofertas de crédito a Clientes con los que hayan celebrado un contrato que les permita acceder a la prestación de servicios mediante la utilización de medios electrónicos de identificación, tales como firma electrónica o NIP.

Lo anterior, siempre que dichos Usuarios se encuentren en posibilidad de demostrar de manera fehaciente que cuentan con la autorización correspondiente conforme a lo previsto en el artículo 28 de la Ley y conserven registro de ella a través de medios ópticos, magnéticos o de cualquier otra tecnología, por el plazo establecido en el artículo 31 de la Ley.

La referida autorización deberá cumplir con los requisitos previstos en el primer párrafo del artículo 28 de la Ley, excepto el de la firma autógrafa la cual será sustituida por el uso de alguno de los mencionados medios electrónicos de identificación.

En los supuestos previstos en este artículo, los Usuarios deberán contar con mecanismos que requieran a los Clientes ingresar nuevamente el medio electrónico de identificación pactado para otorgar las aludidas autorizaciones.

CAPITULO IV De las reclamaciones

DECIMA.- Las Sociedades tendrán la obligación de: I.- Tramitar en forma gratuita hasta dos reclamaciones cada año calendario por Cliente; II.- Determinar la tarifa que cobrarán por tramitar reclamaciones adicionales durante dicho periodo, la cual no podrá exceder del equivalente a quince UDIS por cada reclamación, y III.- Dar a conocer al público dicha tarifa a través de su página electrónica en Internet.

En cada reclamación que se presente en términos del artículo 42 de la Ley, los Clientes podrán objetar uno o más registros de los contenidos en su Reporte de Crédito Especial.

Para determinar el importe de las tarifas deberá utilizarse el valor de la UDI de la fecha en que se presente la reclamación de que se trate, de conformidad con la publicación que realice el Banco de México en el Diario Oficial de la Federación.

CAPITULO V Disposiciones generales

DECIMOPRIMERA.- Las Sociedades estarán obligadas a establecer los formularios que deberán utilizar los Usuarios para enviarles la información relativa al historial crediticio, operaciones crediticias y otras de naturaleza análoga de los Clientes.

Las Sociedades deberán elaborar los instructivos de llenado de los formularios respectivos, los cuales entre otros aspectos, deberán contener una descripción precisa de la información a incluirse en cada campo del formulario.

Las Sociedades deberán dar a conocer al público a través de su página electrónica en Internet los formularios y sus instructivos de llenado, los cuales podrán ser utilizados libremente por otras Sociedades.

DECIMOSEGUNDA.- Las Sociedades deberán eliminar de los historiales crediticios la información negativa, relativa a cualquier crédito que haya sido reportado como vencido o bien, la de créditos respecto de los cuales el Usuario haya dejado de actualizar los registros, conforme a lo siguiente:

I.- Si el saldo insoluto del principal es igual o menor al equivalente a veinticinco UDIS, transcurridos doce meses contados a partir de la fecha que ocurra primero, ya sea la fecha en la que el crédito haya sido reportado por primera vez como vencido, o bien a partir de la última vez en que el Usuario haya actualizado el registro del crédito; II.- Si el saldo insoluto del principal es mayor al equivalente a veinticinco y hasta quinientas UDIS, transcurridos veinticuatro meses contados a partir de la fecha que ocurra primero, ya sea la fecha en la que el crédito haya sido reportado por primera vez como vencido, o bien a partir de la última vez en que el Usuario haya actualizado el registro del crédito, y III.- Si el saldo insoluto del principal es mayor al equivalente a quinientas y hasta mil UDIS, transcurridos cuarenta y ocho meses contados a partir de la fecha que ocurra primero, ya sea la fecha en la que el crédito haya sido reportado por primera vez como vencido, o bien a partir de la última vez en que el Usuario haya actualizado el registro del crédito.

Adicionalmente, las Sociedades al efectuar la eliminación de la información negativa de los créditos a que se refieren los numerales I, II y III anteriores, deberán borrar según corresponda, las claves de observación o de prevención respectivas. Tratándose de claves de prevención, sólo procederá su eliminación cuando la suma de los saldos insolutos del principal de los créditos de un Cliente respecto de un mismo acreedor, sea menor al equivalente a cuatrocientas mil UDIS.

En el caso de créditos vencidos en los que existan tanto incumplimientos como pagos, al borrado de la información negativa de cada periodo de incumplimiento le será aplicable lo previsto en los numerales I, II y III de esta Regla, según corresponda.

Para efectos de esta Regla, se entenderá por créditos vencidos a los definidos como tales en las disposiciones aplicables a instituciones de crédito emitidas por la Comisión y el cálculo del saldo insoluto del principal de los créditos vencidos, se realizará utilizando el valor de la UDI correspondiente al primer día hábil bancario del año calendario en que deba llevarse a cabo el borrado, de conformidad con la publicación que realice el Banco de México en el Diario Oficial de la Federación.

Las Sociedades no deberán eliminar los historiales crediticios a que se refiere esta Regla que se ubiquen en los casos previstos en la fracción II del artículo 24 de la Ley.

DECIMOTERCERA.- Para que las Sociedades se proporcionen sus Bases Primarias de Datos, deberán establecer de común acuerdo: a) Las cantidades que se cubrirán inicialmente para tal efecto; b) Las cantidades que deberán pagarse mensualmente para mantener actualizada la información respectiva, y c) Las características de los formatos que utilizarán para llevar a cabo el intercambio referido.

Para la determinación de las cantidades mencionada en el inciso a) del párrafo anterior, se deberán tomar en cuenta los gastos e inversiones en que cada una de ellas haya incurrido para integrar y actualizar su Base Primaria de Datos, así como los gastos en que requieran incurrir para transmitirla.

Para cumplir con lo señalado en la presente regla las Sociedades deberán observar lo siguiente:

I.- En un plazo de 30 días naturales contado a partir de la fecha en que se haya entregado el escrito en el que alguna de las Sociedades haya solicitado el intercambio de Bases Primarias de Datos, deberán llegar a un acuerdo: a) Sobre las cantidades y las características de los formatos aludidos o, en su defecto, b) Sobre la designación de un experto independiente en el que deleguen la facultad de determinar dichas cantidades y las citadas características de los formatos.

En el supuesto a que se refiere el inciso b) anterior, adicionalmente y dentro del plazo señalado, las Sociedades deberán celebrar con el experto independiente el o los contratos que correspondan, así como proporcionarle toda la información con que cuenten que resulte necesaria para el desempeño de sus funciones.

Dentro de los mencionados 30 días naturales, las Sociedades deberán informar al Banco de México, a través de la Gerencia de Autorizaciones, Consultas y Control de Legalidad, los acuerdos a los que hayan llegado, así como en el supuesto previsto en el inciso b) citado, copia del o los contratos que hayan celebrado con el experto independiente de que se trate.

II.- En caso de que las Sociedades no cumplan con lo dispuesto en el numeral I anterior, el Banco de México procederá a designar por cuenta de aquéllas al experto independiente que realice las funciones referidas, así como a informarles por escrito sobre tal designación.

III.- Se entenderá por experto independiente, la persona ajena a las Sociedades que acredite tener conocimientos y experiencia para desempeñar las funciones que se señalan en esta Regla.

Dicha persona deberá manifestar por escrito bajo protesta de decir verdad, que no se encuentra en alguno de los supuestos mencionados en el párrafo siguiente.

En ningún caso podrán actuar como expertos independientes: a) Los empleados o directivos de la Sociedad;

b) The shareholders of the Society; c) The partners or employees of societies or associations that provide advisory or consulting services to the Society, whose earnings, during the twelve months prior to the date of appointment, represented ten percent or more of the total income of said societies or associations; d) The clients, suppliers, debtors, creditors, partners, directors, or employees of a legal entity that is an important client, supplier, debtor, or creditor of the Society. A client or supplier is considered important when the services they provide to the Society or the sales they make represent more than ten percent of the total services or sales of the client or supplier, respectively, during the twelve months prior to the date of appointment. Likewise, a debtor or creditor is considered important when the credit amount is greater than fifteen percent of the Society's assets; e) The employees of a foundation, association, or civil society that receive important donations from the Society or its partners. Important donations are those that represent more than fifteen percent of the total donations received by the foundation, association, or civil society in question, during the twelve months prior to the date of appointment; f) The general managers or senior executives of a legal entity whose board of directors includes the general manager or a senior executive of the Society; g) The spouses or common-law partners, as well as those related by blood, affinity, or civil law up to the first degree, with respect to any of the persons mentioned in the preceding subsections c) to f), or up to the fourth degree, in relation to those indicated in subsections a), b), and h) of this section, and h) Persons who have held a management or administrative position in the Society during the twelve months immediately preceding the date of appointment.

IV.- Starting from the next banking business day following the day on which the Societies receive the communication from the Bank of Mexico referred to in the previous section II, the Societies will have a period of 20 calendar days to proceed with the execution of the respective contract(s) with the designated independent expert, as well as to provide him in writing with the information necessary for him to carry out the functions indicated in the previous section I. Likewise, within the aforementioned 20 calendar days, the Societies must provide the Bank of Mexico, through the aforementioned Management, a copy of the contract(s) they have executed with the referred independent expert.

V.- Within 60 calendar days following the signing of the respective contract(s) in accordance with sections I or IV, as applicable, the independent expert must determine the amounts that each of the Societies must pay the other for the exchange of their Primary Data Bases, as well as for the periodic updating of the information. Likewise, he must determine the characteristics of the formats they will use for said exchange. For the foregoing, the independent expert will take into consideration the information available to him, including that received from the Societies, being authorized to request additional information from them, if necessary, to fulfill his functions. The Societies are obligated to provide the independent expert with the information he requests and to cooperate with him so that he is able to perform his functions within the aforementioned deadline.

VI.- No later than the date on which the deadline indicated in the previous section V concludes, the independent expert must send in writing to the Societies and to the Bank of Mexico through the aforementioned Management, a copy of the study and the opinion he has prepared in the exercise of his functions.

Martes 1 de julio de 2008 DIARIO OFICIAL (Primera Sección) 8

VII.- The Societies must accept the determinations of the independent expert that result in accordance with the procedure indicated in this Rule. This without prejudice to the fact that the amounts corresponding to the updating of the information in the Primary Data Bases may be modified subsequently by agreement of the Societies.

VIII.- The fees of the independent expert must be covered equally by the Societies. The Societies are obligated to exchange their Primary Data Bases in their entirety, no later than during the month following that in which the amounts and characteristics of the formats referred to in this Rule are determined, as well as to update them monthly in accordance with the Law.

FOURTEENTH.- The Societies must keep a record of the officials or employees of the Users who, in terms of articles 29 and 30 of the Law, make statements under oath of having the authorization of the Clients to obtain their Credit Reports.

FIFTEENTH.- The Societies must keep a record of the persons that the Commercial Enterprises designate to receive and respond to the complaints of the Clients referred to in Chapter IV of the Law. In the event that the Commercial Enterprises do not make such designations, the Societies must deny them the provision of their services.

TRANSITORY PROVISIONS

FIRST.- These Rules will enter into force the day following their publication in the Official Journal of the Federation, except for what is provided in the following Transitory Rule. From that date, the "General Rules to which the operations and activities of credit reporting societies and their users must be subject," published in the Official Journal of the Federation on March 18, 2002, and modified by resolutions published in said Official Journal on August 13, 2002, June 8, 2004, July 28, 2005, and May 9, 2006, are hereby repealed.

SECOND.- What is provided in Rule Twelfth will enter into force on July 16, 2008, except for what is provided in its second paragraph, which will enter into force from the date on which the Societies are obligated to use the prevention and observation keys approved by the National Banking and Securities Commission. From the time Rule Twelfth enters into force and until its second paragraph enters into force, the Societies must eliminate the keys corresponding both to credits individually and to the characteristics of the Client in general, as applicable, within the timeframes referred to in fractions I, II, and III of the aforementioned Rule Twelfth. The elimination of the latter keys will only proceed when the sum of the outstanding principal balances of the credits of a client with respect to the same creditor is less than the equivalent of four hundred thousand UDIS.

Sincerely Mexico, D.F., June 26, 2008.- BANK OF MEXICO: The Director General of Analysis of the Financial System, José Gerardo Quijano León.- Rubric.- The Manager of Provisions to the Financial System, Eduardo Aurelio Gómez Alcázar.- Rubric. For any inquiries regarding the content of this Circular, please contact the Management of Authorizations, Consultations, and Legal Control, located at Avenida 5 de Mayo number 2, sixth floor, Colonia Centro, Mexico, Federal District, C.P. 06059, or at the phones 5237.2308, 5237.3200, or 5237.2317.