A General Data Protection Regulation enforcement notice from United Kingdom regulators could leave credit reporting giant Experian on the hook for as much as $24 million. Direct marketing via mail is considered legitimate interest. But, in this case, the consent to use the data had been received by a broker that hadn’t specified the data would be sold. Goodwin’s Data, Privacy and Cybersecurity associate Frederica De Santis states how this could confuse users. Read the article in SC Media here.