There is a big difference in systemic risk and one-offs. It sounds like you are referring to the information on the SF-86 - used for clearances - there is a lot of legal protection for that information. My experience has been that the security people who handle SF-86's are very diligent, although I do have my share of stories about people who got fired for being sloppy -- but they were fired.

No such legal protections exist for commercially collected data and consequently there is practically no control of that information and no consequences for misuse - in fact what normal people would consider misuse is just another business opportunity to the people who collect it.