By law they have to correct misinformation. They also have to include a letter from you that explains a reason for any outstanding debt.
It’s up to you to correct a faulty credit report, so you have to keep up on what’s in it.
By law you are entitled to a free credit report once a year from every credit reporting company. You have to request it though.
Do you have to supply “sensitive” information to obtain your own report? Do they need to know, for example, SS#? OTOH, how do they prevent your avg joe from getting my credit report?