It tells credit bureaus that they cannot sell your data...

It tells credit bureaus that they cannot sell your data without first getting permission. We're not saying that consumers should own this data or that they should be able to put credit bureaus out of business, but bureaus should not sell data until you've given permission.