Case Detail


PIF Number:
3656
Case Name:
In re Experian Data Corp.
Supplier:
Experian Data Corp.
Case Number:
491856
Date in Pif:
11/7/2022
Court:
County:
Keywords:
Statute Cites:
Rules & Regulations:
Subject Matter:
Privacy
Category:
Data Breach
Sub-Category:
Issue Summary:
Supplier acquired Court Ventures, which provided access to public records data, in 2012. One of Court Venture's clients used its access to unlawfully obtain and sell personal information of consumers. Supplier agrees to notify the state attorneys general of any and all personal information security incidents on a quarterly basis. Supplier also agrees to ensure that any 3d parties with access to personal information are credentialed by identifying themselves, certifying the purpose for which the information is sought and that the information will be used for no other purpose. Supplier to develop and implement an identity theft prevention program within 180 days of the date of the agreement. Supplier to pay the states $1,000,000. (EDITOR'S NOTE: See the AVC for all terms)