I think it's a daunting task for any corporate official to figure out what their obligations are.

From the FTC's standpoint, there are situations where we do hold individual corporate officers responsible.

The law permits the credit bureaus to sell and lenders to buy lists of consumers who meet certain criteria.