Who is responsible when the Credit Information Act is not complied with?