It was reasonable at the time it was put into place. It's now so much easier to deal with information, reform is needed but it's not going to happen unless the Democrats are in control.

What I would like to see is a rule that if a company collects data for more than in-house use (so it doesn't apply to a company who simply has records of it's customers) they must make a reasonable effort to notify you and allow you to examine the data and challenge anything you believe to be incorrect.

>It was reasonable at the time it was put into place

I don't think so. It's only been around for about 15 years or so. Internet infrastructure wasn't as advanced then, but neither were there as many people who would've used it.

The only reason I can see for the state of things is that the credit bureaus wanted to nickel-and-dime people for credit monitoring, and because they could water down the regulations, they did.

Another thing that was sorely needed was to make the domain a .gov or something other than a .com to prevent so many imposters.

And I just now read on Wikipedia a list of companies excluded from the requirements, like ChexSystems.