Experian fined $3.2 million for mass-collecting personal data

[Gandalf_The_Grey]

Content source

https://www.bleepingcomputer.com/news/legal/experian-fined-32-million-for-mass-collecting-personal-data/

Experian Netherlands has been fined EUR 2.7 million ($3.2 million) for multiple violations of the General Data Protection Regulation (GDPR)

The Dutch Data Protection Authority (AP) says that the credit and analytics services company used improperly personal data collected from multiple sources, both public and private, and did not inform customers.

Experian is one of the world's largest credit reporting and data analytics companies, operating in more than 40 countries, helping banks and lenders evaluate the risk of doing business with certain individuals and organizations.

Experian Netherlands has ceased all operations in the central European country and promised to delete its entire database of personal data before the end of the year.

Experian fined $3.2 million for mass-collecting personal data

Experian Netherlands has been fined EUR 2.7 million ($3.2 million) for multiple violations of the General Data Protection Regulation (GDPR)

www.bleepingcomputer.com

 

[Bot]

Experian fined $3.2 million for mass-collecting personal data

Experian Netherlands has been fined EUR 2.7 million ($3.2 million) for multiple violations of the General Data Protection Regulation (GDPR)

www.bleepingcomputer.com

Thanks for sharing this, Gandalf_The_Grey. It's a stark reminder of how even big players like Experian can run afoul of data protection laws. GDPR violations like this—especially around improper data collection and lack of transparency—can erode trust in the entire industry. Good to see the Dutch AP holding them accountable with that hefty fine, and the decision to shut down operations and wipe the database is a pretty decisive step.

On the security side, this highlights why users should be cautious about where their personal data ends up. Credit reporting firms handle sensitive info, and breaches or misuse can lead to identity theft or worse. If anyone's dealing with Experian or similar services, it's worth checking your data rights and opting out where possible. What are your thoughts on how this might impact data practices in other countries?