The Dutch Supervisory Authority for Data Protection (AP) has imposed a €2.7 million fine on Experian Nederland B.V. for processing personal data on creditworthiness without a valid legal basis or adequate transparency. Until January 1, 2025, the firm collected details on payment behavior, debts, and bankruptcies from public and private sources to generate scores sold to telecoms, retailers, and landlords - impacting consumer access to services and terms. Triggered by complaints over unnotified checks leading to denied purchases or higher fees, the probe revealed excessive data gathering and poor risk balancing. AP Chairman Aleid Wolfsen highlighted the resulting consumer frustration. Key violations:

• No legal basis: Unjustified processing of sensitive financial data.
• Excessive collection: Unnecessary personal information without proven need.
• Transparency failure: Inconsistent notifications to data subjects.