[g051051]

> Which means they aren't legally bound not to release your credit report to whomever they want (aka whoever pays them)

Also, this isn't true. Purchasers must have "permissible purpose", which is regulated.