I know this is old but I'm catching up: Note that with Equifax you never signed any sort of permission or ToS for the data collected, so they'd be hit with a f

I know this is old but I'm catching up: Note that with Equifax you never signed any sort of permission or ToS for the data collected, so they'd be hit with a fine regardless. Many companies collect data on people without a contract. So this would still have teeth even with waived rights.