Italy’s €400,000 Credit Scoring Fine: What U.S. Companies Should Know About the Next Phase of DSAR Enforcement

400,000 EUR fine by the Italian DPA for a credit agency Cerved Group S.p.A’s failure to provide sufficient responses to a data access requests (DSARs) provides some insight into a possible direction for the future of privacy rights enforcement, in the US as well. In this case , a credit reporting agency provided different answers to access requests by individuals, not providing complete information, especially where such information was not favorable. The agency also refrained from providing information about credit score information, including sub-scores and scoring logic that it had in its p