United Kingdom: Issued decision of UK First-Tier Tribunal (Information Rights) in case against Experian for unlawful processing of data

On 20 January 2023, the UK First-Tier Tribunal (Information Rights) issued its ruling concerning the Information Commissioner's Office's (ICO) action requiring Experian Limited, a credit reference agency, to change its practices concerning personal data. In particular, the Tribunal found that Experian had unfairly and unlawfully processed the personal data of over 5 million individuals by failing to notify them that it was processing their data for direct marketing purposes. Experian has been ordered to provide all data subjects with a privacy notice informing them of Experian's processing of their personal data for direct marketing purposes.