Who or what empowers Credit Bureaus?

Who or what gives businesses the right to report my debt and spending habits to Credit Bureaus? Who or what gives Credit Bureaus the power or the right to collect that information? It would appear to me that it is a infringement on personal privacy.