Anyone with a “legitimate business need” may obtain a copy of your credit report. Unfortunately, the combination of this being a pretty vague term and the credit reporting agencies not being particularly vigilant in protecting your information has caused numerous situations of people who have no business having your credit report gaining access to it.
Legitimate businesses, such as credit card companies, landlords, and insurance companies routinely view credit reports. Prospective employers may look at your credit report, but generally only with your express permission.