Oh, and they don’t need your permission

Your insurance companies, your current creditors (banks, credit card companies, etc) can and do run periodic checks on customer credit scores. Credit reports are required to list who has run a report within the last 3 months whenever a report is issued, but no they don’t need permission.