> All credit agencies should be made to contact all subjects with details on what data they hold and if it was compromised.
Better yet, all of them should be obliged to submit data they hold to the data subject for validation annually, and pay for that validation at a rate of (say) £5 per item in the record. And for that matter, not just credit reference agencies, but any organisation - including, separately, each government department and agency.