The proposed rule will ensure protections from the Fair Credit Reporting Act apply to sensitive information, including information sold by data brokers.