Kathleen Carroll, a single woman, applied for an Exxon credit card. Exxon rejected her application without giving any specific reason and without providing the name of the credit bureau it had used. When Carroll asked for a reason for the rejection, she was told that the credit bureau did not have enough information about her to establish creditworthiness. In fact, Exxon had denied her credit application because she did not have a major credit card or a savings account, she had been employed for only one year, and she had no dependents. Did Exxon violate the law?