To me it seems very similar to credit reporting agencies, so I would imagine much of it falls under the same buckets, legal or otherwise.