@friend So apparently EFX can ignore GDPR requests, unless I'm missing something. kravietz just pointed out that EFX operates in the UK, which normally would imply a real need for them to obey EU law, but with #brexit behind us it seems EFX has little incentive to follow the GDPR.