The Fair Credit Reporting Act (FCRA) prohibits credit agencies from selling or otherwise giving out credit reports on individuals except in four limited situations. FCRA is codified at 15 USC 1681 et. seq. A current electronic version of the Act, as well as related Staff Opinion Letters, Actions, fees and other information is posted by the Federal Trade Commission (www.ftc.gov/os/statutes/fcrajump.shtm).
Legal issues concerning the act are discussed thoroughly in Fair Credit Reporting, published by the National Consumer Law Center. If you still have questions about FCRA, call the FTC Help Line (202-382-4357).
FRCA was created in a small section of the Foreign Bank Secrecy Act (in Title II of PL 91-508, I think). The original language was substantially amended by the Consumer Credit Reporting Reform Act of 1996 (P.L. 104-208, Title II, Subtitle D, Chapter 1).
Fair Credit Reporting Act Staff Opinion Letters from the Federal Trade Commission are available on Westlaw (FTC-FCRASO).