I fail to understand
how personal data aggregation conducted the way of Experian is legal.
It shouldn't be.
A business has a right to keep certain kinds of personal information on clients. That is understandable.
A third party that collects data for sale to other third parties is a parasite and their behaviour immoral in my rather idealised world view of our right to privacy.
The law needs to be changed so that personal data cannot be sold without specific permission from the person involved. I am not talking obscure cover all statements in the small print of T&C's. I mean a specific request for permission from the data farmers for EVERY instance of personal data they wish to sell. They should inform the person involved of who the data is going to and exact details of the content of that data and request permission to pass it on.
Do I care if this breaks the way business is done, the way leads are found and that businesses could no longer spam thousands of people with silent/computer generated phone calls or texts and email. Not at all.
Do I care that this might make such data farming no longer financially viable? Nope. However, as long as there are sheep to be fleeced, there are victims to bear the cost.
Do I care that I might have to do a bit of research to determine if that big order from the unknown customer is bogus or not? Yes, it is a small price to pay though if it puts a stop to, or a least a slowdown on the harvesting and selling of personal information.
In my opinion and without any evidence to back it up, Experian along with all such commercial data aggregators serve a very few whilst providing a real disservice for the vast majority.