It compares his responses with information obtained from protected repositories of personal data maintained by creditreporting companies affiliated with the bank, and it accesses this information in real time, making no permanent record of it at the bank.
Companies, and especially credit-reporting firms, generally enjoy more latitude than government bodies do in making personalinformation available to third parties.