Cybersecurity Policy Report, Violation of GDPR Costs Experian 2.7 Million Euros, (Oct 17, 2025)
Experian plc has been fined 2.7 million euros ($3.2 million) after the company was found in violation of the European Union’s General Data Protection Regulation (GDPR) by the Dutch privacy agency, Autoriteit Persoonsgegevens (AP).
The AP began investigating Experian after receiving complaints from Dutch residents who were harmed by the credit scores assigned to them by Experian, AP said in a news release.
“Experian collected a lot of data about people. But the company could not make it sufficiently clear why the collection of certain data was needed. In addition, using sensitive data could have major consequences for the people involved. Experian had not weighed that well and had wrongly used this data,” the AP said, according to a machine translation of its Dutch language news release.
“Experian acknowledges having violated the law and does not appeal the fine,” it noted. “The company has stopped working in the Netherlands and will delete the database with all this personal data this year.”
News: InternationalLegislation LitigationEnforcement DataPrivacy GDPR