73 Pa. Stat. § 2504
The consumer reporting agency shall, no later than ten business days after the date the agency receives a request from a consumer for a security freeze, send the consumer a written confirmation that provides the consumer with a unique personal identification number or password to be used by the consumer when providing authorization for the access to his consumer report for a specific period of time or for a specific third party or removing the security freeze. In addition, the consumer reporting agency shall simultaneously provide to the consumer in writing notification of the process of removing a security freeze and the process of temporarily lifting a security freeze and the process for allowing access to information from the consumer report for a specific party or for a specific period while the security freeze is in effect.
73 P.S. § 2504