Equifax, Experian, data brokers and ad tech companies face investigation under GDPR
Campaigning charity Privacy International has filed complaints with data protection authorities in France, Ireland, and the UK against seven data brokers, ad-tech companies and credit reference agencies.
It said that Equifax and Experian, data brokers Acxiom and Oracle, and ad-tech firms Criteo, Quantcast, and Tapad, should be investigated “to protect individuals from the mass exploitation of their data”.
The charity added: “Our complaints target companies that, despite exploiting the data of millions of people, are not household names and therefore rarely have their practices challenged. In tandem with the complaints, we have today launched a campaign to seek to empower people and make it easier to demand that these companies delete our data.”
UK-based Privacy International’s complaints argue that the way these companies “exploit people’s data, in particular for profiling”, is in contravention of the General Data Protection Regulation (GDPR), which took effect in May this year.
The complaints are based on more than 50 subject access requests to the companies, as well as information in their marketing material and privacy policies.
“As such, our assertions are based on evidence that represents only the tip of the iceberg. We expect and anticipate the regulators will be able to delve more deeply into our concerns regarding wide-scale and systematic infringements of the GDPR,” said Privacy International.
The UK’s Information Commissioner’s Office (ICO) has already issued assessment notices to Acxiom, Equifax and Experian. “We are asking the ICO to take into account our submissions in the context of their ongoing investigation and urge the ICO to widen its investigation to include Criteo, Oracle, Quantcast, and Tapad,” said the charity.
As part of its campaign, Privacy International said it had made it easier for people to write to companies and demand they delete their data.
“The data broker and ad-tech industries are premised on exploiting people’s data,” said Ailidh Callander, its legal officer. “Most people have likely never heard of these companies, and yet they are amassing as much data about us as they can and building intricate profiles about our lives.
“GDPR sets clear limits on the abuse of personal data. Privacy International’s complaints set out why we consider these companies’ practices are failing to meet the standard – yet we’ve only been able to scratch the surface with regard to their data exploitation practices. GDPR gives regulators teeth and now is the time to use them to hold these companies to account.”
The GDPR strengthens rights of individuals in relation to the protection of their data and imposes more stringent obligations on those processing personal data, and provides for stronger regulatory enforcement powers. Privacy International said that the real test for GDPR will be in its enforcement.
Frederike Kaltheuner, its data exploitation programme lead, said: “The world is being rebuilt by companies and governments so that they can exploit data.
“Without urgent and continuous action, data will be used in ways that people cannot now even imagine, to define and manipulate our lives without us being to understand why or being able to effectively fight back. We encourage journalists, academics, consumer organisations, and civil society more broadly, to further hold these industries to account.”
Not a drop wasted: digital cask filling can save the whisky industry millions
Scotland’s food and drink sector is central to the country’s economy. Bringing in around £14 billion every year, it employs more than 115,000 people and accounts for one in five manufacturing…
The value of engineering in the curriculum
If you were to look back at the greatest discoveries in science and technology over the past 30 years, you would soon notice that engineering is a key catalyst for…
Glasgow Council leads the way in digital learning
In 2017, we at Glasgow City Council took the opportunity to overhaul our digital approach to education and redefine learning, keeping in mind the core aim of reducing the impact…
Why data is the new oil
In 2006, British mathematician Clive Humby coined the phrase, “Data is the new oil”. This analogy has been proven correct as data now powers entire industries and holds tremendous value…
Global Entrepreneurship Week offers chance to reset aspirations amid new innovation landscape
With the advent of Global Entrepreneurship Week, it is an opportunity for us to celebrate the innovators, the grassroots risk takers who drive the economy, and those who invest in…
Aberdeenshire leads the way in work-based learning
There has long been debate about the distinction to be drawn between vocational and academic learning. However, in Aberdeenshire Council the focus is on what is best for our learners;…
5G connectivity can ’empower people to restore our planet’
Six years on from the Paris Climate Accords and the world is still getting warmer. We are now seeing first-hand the impact of climate change – the floods and fires…
Cracking the code to offline computational thinking
In our digitally connected world, it can be argued that coding and especially computational thinking have become essential parts of a new ‘computing literacy’ to support traditional literacy. These computational…