Report: Law on credit-reporting fails consumers