Light-touch regulation may soon be a thing of the past for credit reporting agencies.