Look at #5 in this letter - I just found it for someone else. http://www.ftc.gov/os/statutes/fcra/cohan2.htm