Consumer Credit Control Act of 2021 This bill requires a consumer's affirmative informed consent before a consumer reporting agency may share that consumer's report with third parties for specified purposes. A consumer reporting agency must verify a consumer's identity when obtaining this consent. (Currently, this sharing is generally allowed unless a consumer opts out.) If the consumer provides consent, a consumer reporting agency may share information with a third party for an extension of credit or the underwriting of insurance. Additionally, in connection with transactions not initiated by the consumer, a consumer reporting agency may provide a consumer report with the consumer's consent only if the transaction consists of a firm offer of credit or insurance. Furthermore, consumer reporting agencies may not charge consumers fees in connection with furnishing consumer reports. The bill also requires consumer reporting agencies to use reasonable efforts to prevent data breaches of consumer reports. The Government Accountability Office must report on how best to protect information collected in consumer files.