Its I believe highly illegal when I worked for BT in the UK misuse of NI numbers was a very serious gross misconduct offence - we go read the riot act over this it was almost as bad as corruptly looking up data on individuals info - say the queens private number ;-)

... to what end? Credit reports can presumably be looked up without them if they're not asked for regularly.