How many years can a collection agency still pull your credit report?

A collection agency can't access a credit report w/o the permission of the party involved. They may try to mislead someone into believing they are able to do so, and that is a violation of the FDCPA and should be reported as such.