Italian Data Protection Authority (Garante) · 3 July 2026
Experian Italia S.p.A.
Non-compliance with general data processing principles
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 3 July 2026
- Country
- Italy
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2026/IT/089
What happened
The Italian DPA has imposed a fine of EUR 120000 on Experian Italia S.p.A. The controller provides a service offering information on the creditworthiness of potential customers. The controller creates scores for data subjects using various pieces of personal data. When requested the controller did not adequately inform data subjects about the processing of their personal data. Furthermore it did not adequately minimise personal data by sending its customers files containing sub-scores regarding data subjects which were not necessary for credit scoring activities.
Summary from the CMS Enforcement Tracker, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Art. 15Right of access by the data subjectRead →
- Art. 25Data protection by design and by defaultRead →
- Accountability
- Data principles
- Data subject rights
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/IT/089.