In the case of Equifax customer data was given to them by creditors. Customers had no say.