Recent findings by the UK's Information Commissioner's Office (ICO) in relation to credit reference agencies' data practices will impact thousands of businesses that rely on data brokers and also provide insights on how the authority interprets core provisions of data protection law.