A security freeze on a protected consumer’s consumer file or record remains in effect until:
(1) the protected consumer or the protected consumer’s representative requests that the consumer reporting agency remove the security freeze in accordance with § 20.28; or
(2) a consumer reporting agency removes the security freeze under § 20.30.