This post diagnoses what went wrong with Equifax and proposes a solution: a public utility regulation regime for consumer reporting agencies in which the CRAs would be restricted in their ability to pay dividends and executive compensation unless they meet certain performance metrics in terms of reporting accuracy, dispute resolution, and data security. Here goes: