Italy

Experian Italia S.p.A.

120,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-07-03.

Rank · Sector

#88

of 331 in Finance, Insurance and Consulting

Rank · Italy

#78

of 595

Rank · All fines

#463

of 3,127

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-07-03
Controller / Processor: Experian Italia S.p.A.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 12 GDPR, Art. 15 GDPR, Art. 25 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 120000 on Experian Italia S.p.A. The controller provides a service offering information on the creditworthiness of potential customers. The controller creates scores for data subjects using various pieces of personal data. When requested the controller did not adequately inform data subjects about the processing of their personal data. Furthermore it did not adequately minimise personal data by sending its customers files containing sub-scores regarding data subjects which were not necessary for credit scoring activities.

Open original source Links to the regulator's original publication or another source.