The Information Commissioner v Experian Limited

The Information Commissioner v Experian Limited

The Upper Tribunal held that the First-tier Tribunal did not err in law in its evaluative assessment that Experian's CIP and user journey provided sufficient transparency under GDPR, including Article 14(5)(a), and that the layering and prominence of information were adequate. The Tribunal found no material contravention of GDPR transparency requirements for the main cohort of data subjects, and rejected the Information Commissioner's grounds of appeal, confirming that the FTT's findings on the innocuous nature of Experian's processing, accessibility of the CIP, and adequacy of legitimate interest assessments were unassailable.

Parties
Appellant: The Information Commissioner; Respondent: Experian Limited
Jurisdiction
England and Wales
Judgment Date
22 April 2024
Procedural Posture
Appeal / Final Judgment
Outcome
appeal dismissed
Legal Topics
GDPR Transparency, Privacy Notices, Legitimate Interest Assessment, Direct Marketing, Enforcement Notice, Layered Privacy Statements
Data Protection Administrative Law GDPR Transparency Privacy Notices Legitimate Interest Assessment Direct Marketing Enforcement Notice Layered Privacy Statements

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 5 Authorities cited 11 Party arguments 2 Amounts and remedies 4
Sign in to unlock

Parties

The Information Commissioner

Appellant

Experian Limited

Respondent

Procedural Posture

Appeal / Final Judgment

Legal Issues

  1. 1 Whether Experian's processing of personal data for direct marketing complies with GDPR transparency requirements
  2. 2 Whether the Consumer Information Portal (CIP) and user journey satisfy Article 14 GDPR
  3. 3 Whether the layering and prominence of privacy information in the CIP meets legal standards

Ratio Decidendi

The Upper Tribunal held that the First-tier Tribunal did not err in law in its evaluative assessment that Experian's CIP and user journey provided sufficient transparency under GDPR, including Article 14(5)(a), and that the layering and prominence of information were adequate. The Tribunal found no material contravention of GDPR transparency requirements for the main cohort of data subjects, and rejected the Information Commissioner's grounds of appeal, confirming that the FTT's findings on the innocuous nature of Experian's processing, accessibility of the CIP, and adequacy of legitimate interest assessments were unassailable.

Court Disposition

appeal dismissed

Orders

  • No material contravention found for main cohort; substituted enforcement notice for residual cohort upheld; no financial penalty imposed.