Well, these has becoming a common feature of a lot of major credit cards. However, they get an updated CR on their customer under the "review" permissible purpose. It is used to determine whether or not the issuer wants to make a change to the account, such as credit limits.
"Staff believes that the “review” permissible purpose applies only where the creditor has an existing account relationship with the consumer and uses the report solely to decide whether to modify the terms of the account."
How this relates to just having an on-line banking account, I am not sure and I would be questioning the vendor as to under what permissible purpose is this information becoming available to the bank in order to pass it along to the customer.
The opinions expressed here should not be construed to be those of my employer: PPDocs.com