Risk Assessments

How would you rate consumer credit reporters such as TransUnion, Equifax and Experian? Since financial institutions and consumers must provide non-public information to these vendors to obtain credit scores, what are best practices to assess and due diligence that should be required?

We rate the credit bureaus as high-risk because of the non-public information, and perform annual due diligence. 

While we are required to use the credit bureaus, we can modify how much we use them based on the due diligence.  "How much" means things like which bureau we use for primary credit scores or for marketing services.