some guy on the npr seemed to me to be saying that collecting personal data the way equifax does is no legal in some other countries