>malicious incompetence by everyone in the Experian security chain
How do we know it's malicious and not just regular incompetence? Hanlon's razor and all.
My question was related to this quote:
>the GDPR has fines of up to 4% of global turnover.
I was asking what GDPR has fines on. Does it have fines for incompetence? snthd claimed that "this issue (verification by SSN) doesn't affect GDPR-land" saying GDPR-land somehow prevents this with a specific fine. I'm wondering what the specific fine is that GDPR-land has that prevents this issue.