A consumer reporting agency may remove a security freeze on a protected consumer’s consumer file or record, or delete a record of a protected consumer, if the security freeze was placed or the record was created based on a material misrepresentation of fact by the protected consumer or the protected consumer’s representative.