Tangentially: Purchasing on-demand PII from non-EU companies to produce some individuals score and deleting the sensitive records right after, appears to be a valid/emerging loophole to circumvent GDPR.
In my effort to find a new flat, I encoutered an unknown bavarian (germany) based rating company that boasted with a partnership in switzerland, which is a non-EU country. I cant remember the companies name.
Credit scores are somewhat different than trust scores because you usally agree to your data being given away to rating companies when you sign eg. a contract for a bank accout. Trust worthines additionally encapsulates stuff like criminal recods, complaints and maybe even mental health.