Privacy International (PI) in the UK submitted complaints about the harmful practices of data broker (credit referencing agency) Experian, known in the Netherlands for its illegal use of customer data from telco KPN.

This month PI wrote the following in a newsletter:

If you’ve been following us for a while, you might remember that back in 2018, we submitted a set of seven complaints about the harmful practices of data brokers working in the AdTech industry. Earlier this year, the end of the road was reached for one of those complaints – against UK company Experian.
The UK Information Commissioner’s Office had previously issued an Enforcement Notice against Experian, which stood up to some of the data broker’s exploitative data processing tactics. However, the UK Upper Tribunal has since reached a judgment that largely overturns that Enforcement Notice.

Read their analysis: Muddied Waters: Why (Data Protection) Tribunals Must Explain Their Factual Assessments.

The Dutch Data Protection Authority has fined Experian, which has appealed (article).