I don't get it: How do credit scoring companies in the EU even get access to browsing data or my search history?
Wasn't the GDPR introduced to prevent data sharing like this in the first place if I don't explicitly opt-in to this particular use case, like, as a separate toggle and not "by using our service you agree to our privacy policy".
I'm confused.