Without running the risk of side-stepping the overarching issue of privacy and data harvesting, how can credit rating agencies be made to release our data back

Without running the risk of side-stepping the overarching issue of privacy and data harvesting, how can credit rating agencies be made to release our data back to us which was not opt-in to begin with? The more I think this, FB is a free service and was not foisted upon the users and yet media coverage or outrage on the Equifax breach was very limited (in general).