Experian GDPR fine

By Evie Kim Sing for Identity Week
Monday, October 20, 2025

• 385
• More

The legal proceedings have meant the company has ceased trading in the Netherlands and promised to delete all its database.

Dr. Kolochenko, CEO at ImmuniWeb and a Fellow at the British Computer Society (BCS), said the likely number of people affected ran into many millions, whilst the exact toll is unknown.

“In the UK alone, where Experian faced similar troubles with the UK ICO in the previous years, it was reported that the credit score giant collected information about as many as 51 million British residents. Therefore, in this case, one may easily estimate the number of EU residents whose personal data was used without notice or consent”.

“Worse, practically speaking, the personal data in question is highly sensitive, even if not expressly labelled as such by the blank ink of GDPR, and its misuse or disclosure can cause long-lasting and material damage to affected persons”.

“In view of the long duration of such processing and taking into consideration the substantial financial harm suffered by individuals by unlawful processing activities, the Dutch DPA’s fine seems to be surprisingly mild and lenient. Having said this, the story unlikely ends here”.

He also added that European Court of Justice recently allowed individuals to sue for non-material damages if their GDR rights were infringed, and many private litigation cases opened for plaintiffs whose damage is not quantifiable in simple numbers. Read Full Article