I found two links below for anyone looking to understand more about CRAs.
Also interesting that a few people were not happy about Monzo performing a search on their credit file, after reading these I found that it’s perfectly legit for Monzo to do that.
Do companies need my consent to carry out a credit search
The DPA doesn’t actually require these companies to have gained your consent before they can carry out a search of your credit file as long as they have a legitimate reason for doing so and you have been told that this search is going to take place. If you have taken out a loan or credit card you will probably find this in the original terms and conditions that you signed.
Also, interesting to note that ICO website says;
As there is no DPA requirement for lenders to report such data to the credit reference agencies, …
So, in theory, Monzo could opt-out of reporting our info to any of the CRAs.