Credit Reference Agency Information Notice (CRAIN)

This document describes how the three main credit reference agencies Equifax Limited, Experian Limited and TransUnion International UK Limited (also called “CRAs” in this document) obtain, process and share personal data about consumers and businesses.

Please note: you shouldn’t think of this document as a complete record of all the personal data each CRA may hold and process, as each has a number of different business functions running through it. To find out more about each CRA’s other businesses, services and personal data processing, go to the website links provided.

The full document can be accessed HERE and provides answers to questions such as:
1. Who are the credit reference agencies and how can they be contacted?
2. What do credit reference agencies use credit reference data for?
3. What are the credit reference agencies’ legal grounds for handling credit reference data?
4. What kinds of personal data do credit reference agencies use, and where do they get it from?
5. Who do credit reference agencies share credit reference data with?
6. Where is credit reference data stored and sent?
7. For how long is credit reference data retained?
8. Do the credit reference agencies make decisions about consumers or profile them?
9. How can a consumer see what data the credit reference agencies hold about them? Do consumers have a ‘data portability’ right in connection with their credit reference data?
10. What can a consumer do if their credit reference data is wrong?
11. Can a consumer object to the use of their credit reference data and have it deleted?
12. Can a consumer restrict what the credit reference agencies do with their credit reference data?
13. Who can a consumer complain to if they are unhappy about the use of their credit reference data?
14. Where can consumers find out more?