The real question is why should Equifax have my data in the first place. My contract is with my employer not with Equifax. This is a breach of trust by the employer using my information as its product for sale. What is the government role in regulating this ? If government can't regulate this, what is the point of government's existence ?