Product: Credit reporting, credit repair services, or other personal consumer reports

I sent one of my first letters to the three credit bureaus to dispute the accuracy of the closed account listed as DEPTEDXXXX with the account number XXXX on or about XX/XX/XXXX. Among the inaccuracies I listed was the issue that the bureaus were reporting what could be a violation of a Nondisclosure Agreement. The contractual agreement between the U.S. Government and me is to never to disclose information to an unauthorized person. 
Upon further research, it is specifically the Privacy Act of 1974, 5 U.S.C. 552a, that DEPTEDXXXX violated. The Privacy Act prohibits the disclosure of a record about an individual absent the written consent of the individual, unless the disclosure is pursuant to one of twelve statutory exceptions. 
Most importantly DEPTEDXXXX never had the authority under the Privacy Act to disclose any information about me to the credit bureaus ; DEPTEDXXXX never had my consent ( implied or otherwise ) to disclose any information about me to the credit bureaus. The Federal courts have explained that, 5 U.S.C. 552a ( 4 ) ; see also 5 U.S.C. 552a ( b ) ( " No agency shall disclose any record.... " ). The Privacy Act also requires government agencies to apply the protections mandated by the Privacy Act to record systems operated by government contractors. 5 U.S.C. 552a ( m ) ( 1 ). Consumer Fin. Prot. Bureau v. XXXX XXXX, 3:17-CV-101, at *5 ( XXXX. XXXX XXXX XXXX, XXXX ). 
The courts have established a personal right of action. In XXXX XXXX XXXX and XXXX v. XXXX, 451 U.S. 1 ( XXXX ) and in XXXX County XXXX XXXX v. XXXX XXXX Clammers XXXX, 453 U.S. 1, 19 ( XXXX ) ; the U.S Supreme Court has established that my privacy rights are enforceable under 42 U.S.C. XXXX. 
I was forced to grant the Department of Education certain uses of my personal information ; see attached loan contract. Demonstrating DEPTEDXXXX never had my consent or the authority to disclose my personal information to any of the credit bureaus. 
I have also requested the deletion of the account DEPTEDXXXX for its inaccuracies. The report shows OK one month ; then the next month it reports 90 days late. An account can not mathematically be 90 days late after one month. 
Now that Transunion is the only credit bureau still reporting this unauthorized account with such a glaring inaccuracy they are violating my privacy and violating 5 U.S. Code 1681i : Procedure in case of disputed accuracy ( 5 ) Treatment of inaccurate or unverifiable information ( A ) In general If, after any reinvestigation under paragraph ( 1 ) of any information disputed by a consumer, an item of the information is found to be inaccurate or incomplete or can not be verified, the consumer reporting agency shall ( i ) promptly delete that item of information from the file of the consumer The Department of Education and DEPTEDXXXX have duplicated similar derogatory information but different payment histories, different start dates. It is negligent for transunion to allow Department of Education and DEPTEDXXXX to Morph or duplicate negative credit information for the sole purpose of injury. After 73 days of inaction, it is clear TransUnion doesnt want an amicable resolution.