Re: Credit Reference Agencies NO consent.
"The Credit Reference agencies then SELL this data out to other companies without our permission as we don't even have a contract with them and have never given them informed consent to do so.."
You've always been able to prevent this with a DPA section 11 notice. The CRAs make more money selling your data to advertisers/marketers than actual credit lookups.
Of course, this is now the default position under the law. It's going to be interesting what happens next.