The problem with this is the biggest, most important, and sketchiest data brokering services (credit monitoring) are all but entrenched in law at this point.

It is illegal, if it's PII without explicit consent.