Unless you have provided an opt-out notice I think you will be violating FCRA. The FCRA exclusion at 571.3(g)(2) is for information "solely as to transactions or experiences between the consumer" and the bank. A credit score does not fit that exclusion.
_________________________
My opinions are not legal advice and are worth what you paid for them.