$3.7 million to affected consumers as well as a civil money penalty of $2.5 million to the Consumer Bureau. As part of the consent orders, the CRAs are also supposed to change the way that they sell their products to consumers. The CRAs must also obtain consumers’ express consent before enrolling them into subscription services as well as make it easer for consumers to cancel these programs. (C) The Consumer Bureau fined the other nationwide CRA—Experian—in March 2017 for deceiving consumers about the use of credit scores that it marketed and sold to consumers as credit scores that were used by lenders and for illegally advertising its products on web pages that consumers accessed through AnnualCreditReport.com before they obtained their free annual disclosures. Experian was ordered to pay more than $3.7 million in restitution to harmed consumers and a civil monetary penalty of $2.5 million to the Consumer Bureau. (D) The Consumer Bureau’s January and March 2017 consent orders with the three nationwide CRAs show that these CRAs have enticed consumers into purchasing products and services that they may not want or need, in some instances by advertising products or services free that automatically converted into an ongoing subscription service at the regular price unless cancelled by the consumer. Although these CRAs must now change their deceptive marketing practices, codifying these duties is an appropriate way to ensure that these companies never revert back to such misleading tactics. (E) Given the ubiquitous use of consumer reports in consumers’ lives and the fact that consumers’ participation in the credit reporting system is involuntary, CRAs should also prioritize providing consumers with the effective means to safeguard their personal and financial information and improve their credit standing, rather than seeking to exploit consumers’ concerns and confusion about credit reporting and scoring, to boost their companies’ profits. (F) Vulnerable consumers, who have legitimate concerns about the security of