4 ms·
They did, however, appear to do a good job with the recent Experian and Equifax enforcement.
by iamacyborg 6y ago
They did, however, appear to do a good job with the recent Experian and Equifax enforcement.
- Nextgrid 6y agoAre you talking about this case: https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2020/10/ico-takes-enforcement-action-against-experian-after-data-broking-investigation/ https://ico.org.uk/about-the-ico/news-and-events/news-and-bl... ? If so, we seem to have a major disagreement about the definition of a "good job". The ICO, by its own admission, found that: > The investigation found how the three CRAs were trading, enriching and enhancing people’s personal data without their knowledge. This processing resulted in products which were used by commercial organisations, political parties or charities to find new customers, identify the people most likely to be able to afford goods and services, and build profiles about people. > The ICO found that significant ‘invisible’ processing took place, likely affecting millions of adults in the UK. It is ‘invisible’ because the individual is not aware that the organisation is collecting and using their personal data. This is against data protection law. The ICO was clearly aware that a large-scale GDPR breach was being committed for profit for several years by a large company who should know better (and has the resources to comply should they want to), and the best they could muster is an "enforcement notice" as opposed to a fine?