Experian Gets U.K. Ultimatum to Comply With Privacy Order (1)

Experian Plc risks potentially hefty penalties unless it makes “fundamental changes” within the next 9 months to the way it handles personal information in marketing, the U.K. privacy regulator warned the credit-data agency.

The Information Commissioner’s Office issued the ultimatum after Experian’s failure to “accept” it had to make changes set out by the ICO, according to a statement on Tuesday. The two-year probe into how credit agencies, including Equifax Inc., used people’s data for direct marketing purposes, followed a complaint by Privacy International in 2018.

“Our investigation uncovered data protection failings that likely affected millions of adults in the ...