Consumer reporting agencies (CRAs), as well as those that furnish data to and receive data from CRAs, are popular targets for state legislation and regulation. Often driven by public opinion and perceived demand, legislators, regulators and the courts are rapidly developing new law and compliance obligations to address issues ranging from security breaches and data privacy to credit reporting and credit scoring.