A data provider shall discharge the following duties:

(a) submit to a credit bureau confirmation that it has received the consent of the subject of the credit information for

(i) submitting information, and

(ii) receiving credit report on the credit information subject;

(b) notify the credit bureau of changes to information the data provider becomes aware of as regards information submitted on a person.