Experian
Closing the account does not close the file. Money-laundering and tax rules keep your identity and transaction records for years, and a permission to share your data wherever the law allows covers much of the rest. The holds set by statute are the ones no request can move.
Reported incidents
Fined 2.7 million euros in the Netherlands for credit scores people never knew of
2025-10-17Affected Dutch consumer credit scores
The Dutch data protection authority, the Autoriteit Persoonsgegevens, fined Experian 2.7 million euros on 17 October 2025. Experian built credit scores on Dutch consumers from public registers and from data it bought from telecom and energy companies, and sold that data to businesses. Many people did not know Experian held their data, so they could not check it; some were refused payment by instalments or asked for higher deposits by energy suppliers. The regulator found Experian could not justify the scope of what it collected. Experian said it would not appeal, stopped the practice and said it would delete its Dutch consumer database by the end of 2025.
People affected typically ask Experian to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.