The ICO has found GDPR failings in the data broking industry
The ICO’s (Information Commissioner’s Office) report on credit reference agencies has major ramifications for the data broking industry.
The October 2020 report details six key findings following an investigation into Experian Limited, Equifax Limited and the relevant entities within the TransUnion group of companies (TransUnion International UK Limited and Callcredit Marketing Limited). The report forms part of a wider ongoing investigation by the ICO into the data broking industry.
The key findings relate to:
- Transparency of the processing;
- Article 14 of the GDPR (General Data Protection Regulation) and invisible processing;
- Using credit reference data for limited direct marketing purposes; and
- Appropriate lawful bases for processing.
Download the guide >